Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/34352e352e3134302e302f32322d3234203d3e20323639363333.roa
File:                     34352e352e3134302e302f32322d3234203d3e20323639363333.roa (raw, json)
Hash identifier:          /34JmMpLaB5gJO+Bdme705yqnHRF1zJXlJd4k50TR0A=
Subject key identifier:   2E:34:AF:C1:1F:9D:FD:EF:8B:18:AC:1C:0F:77:52:81:A6:E1:5B:54
Certificate issuer:       /CN=1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3
Certificate serial:       6038F124B98E6F13025C29CCDD9E371F983FA81D
Authority key identifier: 1D:D3:EF:11:1F:81:64:1C:8B:BB:14:F0:B1:A2:FA:CB:16:E6:73:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/34352e352e3134302e302f32322d3234203d3e20323639363333.roa
Signing time:             Fri 26 Sep 2025 12:35:32 +0000
ROA not before:           Fri 26 Sep 2025 12:30:32 +0000
ROA not after:            Fri 25 Sep 2026 12:35:32 +0000
asID:                     269633
IP address blocks:        45.5.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.crl
                          rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:38:f1:24:b9:8e:6f:13:02:5c:29:cc:dd:9e:37:1f:98:3f:a8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3
        Validity
            Not Before: Sep 26 12:30:32 2025 GMT
            Not After : Sep 25 12:35:32 2026 GMT
        Subject: CN=2E34AFC11F9DFDEF8B18AC1C0F775281A6E15B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:e2:81:7c:e4:5d:26:13:eb:5e:d5:69:cc:
                    f3:9f:da:23:d9:70:6a:a1:99:c7:97:32:7b:55:db:
                    43:51:9c:0f:6e:b8:f8:82:c1:2d:93:07:ae:5d:7a:
                    c4:39:0c:67:c5:35:98:df:98:8d:00:d0:ed:25:51:
                    cb:4f:6f:04:9d:fa:e4:1b:4f:3a:1e:c0:d4:c2:15:
                    11:ca:8b:d7:e1:52:25:a9:f1:a6:18:06:5a:c4:bf:
                    1b:47:8b:e3:88:95:34:2e:bc:79:c7:5e:d7:9c:5c:
                    4b:84:67:d8:c3:61:ad:5f:25:3e:73:e1:99:ad:69:
                    1a:4e:4a:8f:6f:e8:76:37:9e:6e:b8:0b:99:c6:1d:
                    ea:ee:b6:46:8b:3f:0c:34:6d:5a:66:e8:02:78:78:
                    47:52:b8:04:69:60:4b:92:f9:96:46:fc:34:22:0f:
                    b6:13:1b:ce:36:75:d2:61:cf:f3:11:4e:e3:5d:b6:
                    64:9a:97:42:3d:84:69:9a:fe:14:a8:de:d7:0b:f0:
                    c7:e2:4e:5f:de:2a:e0:ac:1a:cb:fe:32:f3:61:00:
                    d5:34:bf:1f:02:ea:6e:fc:3b:f6:10:b4:e2:a7:64:
                    00:30:44:63:fd:4f:cd:5e:e3:83:a8:81:0a:49:cb:
                    d0:bd:e0:0a:e1:11:f2:2d:16:42:50:5b:9b:b8:70:
                    22:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:34:AF:C1:1F:9D:FD:EF:8B:18:AC:1C:0F:77:52:81:A6:E1:5B:54
            X509v3 Authority Key Identifier:
                keyid:1D:D3:EF:11:1F:81:64:1C:8B:BB:14:F0:B1:A2:FA:CB:16:E6:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/34352e352e3134302e302f32322d3234203d3e20323639363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:cd:1c:83:84:b1:2d:28:b1:90:bc:5f:c6:56:6d:1a:ec:7d:
         0a:91:66:c5:ee:c2:9f:c3:5b:d3:31:3a:61:ae:64:b4:8d:82:
         3a:ff:fd:32:ed:55:28:f4:50:3c:6f:2a:d3:dc:eb:20:f2:46:
         a9:48:8c:82:2c:ec:bf:41:a8:03:f5:8f:5b:02:8c:75:a8:c2:
         00:97:1d:cd:d1:60:fa:05:fd:f6:8f:95:08:a6:0c:31:62:0b:
         4a:7a:5c:60:b7:11:ca:f3:36:59:fd:95:a2:35:c3:72:cc:44:
         50:9e:eb:66:26:38:4b:56:70:79:cf:a5:c3:21:6f:f8:79:d0:
         f1:56:da:a5:01:70:aa:64:b7:36:87:bf:cd:c2:fa:1d:cd:45:
         d0:6d:ee:ca:35:14:78:47:c0:0e:b4:76:1d:88:b6:d4:c8:05:
         e9:e9:48:cf:d7:9f:3e:c1:d0:c1:d0:12:7f:9e:2b:05:3b:7e:
         58:59:4c:e4:a6:1d:71:66:2c:16:ee:91:19:c8:ff:e8:0c:c9:
         03:1e:66:26:e1:66:b7:a1:b8:22:18:c3:5c:e1:5b:16:df:06:
         b4:5d:10:65:03:50:37:4f:24:a0:78:ce:3f:5c:75:97:75:8e:
         6d:b8:79:e8:86:4f:8c:83:23:a2:79:2d:b3:e3:d3:e2:c7:18:
         f0:58:c1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:48:32 2025 by rpki-client