Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3137312e3139322e302f32322d3234203d3e20323733363833.roa
File:                     34352e3137312e3139322e302f32322d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          PuwXYf5LSB4A4LB0N0VeUcR6jxLkb3nYlGV3DKre4Dk=
Subject key identifier:   45:8D:EF:C6:72:58:1C:99:FD:35:AF:6E:54:E0:00:72:B0:17:03:C3
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       533B0E33BA194B25406445B1DAFB316926B35E61
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3137312e3139322e302f32322d3234203d3e20323733363833.roa
Signing time:             Wed 01 Oct 2025 22:07:48 +0000
ROA not before:           Wed 01 Oct 2025 22:02:48 +0000
ROA not after:            Wed 30 Sep 2026 22:07:48 +0000
asID:                     273683
IP address blocks:        45.171.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3b:0e:33:ba:19:4b:25:40:64:45:b1:da:fb:31:69:26:b3:5e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  1 22:02:48 2025 GMT
            Not After : Sep 30 22:07:48 2026 GMT
        Subject: CN=458DEFC672581C99FD35AF6E54E00072B01703C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:36:dc:67:60:cd:df:fd:e4:ec:23:3a:4e:
                    0d:c5:12:59:af:f4:d1:52:f4:9d:c4:23:db:7a:43:
                    a6:ca:01:87:46:9d:9f:52:52:03:49:f9:05:b8:f2:
                    f4:85:70:5b:5b:1b:38:e9:31:d1:61:e0:93:6c:15:
                    55:8f:05:7f:af:51:77:62:07:1d:c0:85:56:f6:4f:
                    48:ba:ba:62:89:21:0c:55:77:0c:19:a5:4a:92:b0:
                    a5:d8:07:cf:28:d2:4f:ae:c4:fa:39:0d:91:44:10:
                    e8:ea:fc:a2:f6:8c:e6:d3:d6:f2:d6:97:8d:94:ef:
                    57:e2:32:93:ad:41:dc:76:f8:7d:64:c5:60:a1:8c:
                    8c:c1:5e:62:7b:70:02:5a:0d:20:09:6a:03:14:a2:
                    75:8f:b7:68:50:8c:5f:1a:fa:ac:16:19:9f:18:1d:
                    70:de:48:73:97:91:09:82:94:51:aa:35:58:cc:4f:
                    3e:47:4d:6d:00:51:7c:b9:93:a4:8f:21:79:e8:f5:
                    e8:e1:2a:a1:3e:63:74:fd:75:4a:0c:a6:9a:e8:a3:
                    76:f5:d8:66:6e:39:f5:b0:fb:c1:80:fa:0f:b3:7c:
                    4d:d2:ab:cf:32:52:2c:a2:a7:27:ef:d2:aa:19:b4:
                    7c:51:25:54:b6:28:0b:97:bc:fc:03:b8:e4:4b:4b:
                    62:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8D:EF:C6:72:58:1C:99:FD:35:AF:6E:54:E0:00:72:B0:17:03:C3
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3137312e3139322e302f32322d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:e4:63:ac:5b:b4:39:d9:2d:e4:1b:e7:a0:29:8d:6b:b8:0f:
         88:7d:89:3e:37:1a:f3:49:ba:25:fd:62:38:0c:60:3c:1b:4d:
         c7:32:a3:96:e3:fa:af:02:2f:fe:a9:ec:2b:9e:15:d9:75:bc:
         e1:84:85:d9:9f:77:9c:41:4b:ee:59:14:ca:64:89:25:5c:17:
         c2:03:fe:6c:01:32:5e:cc:2b:e4:69:7c:f5:c3:4e:9f:f2:c2:
         b6:e5:3e:51:6e:d6:e0:ca:f7:f3:b3:5d:11:78:12:21:b4:af:
         0b:f5:86:c1:75:d9:b7:11:97:da:12:d3:89:31:35:79:61:40:
         3d:ac:65:c6:54:35:53:9c:6e:d3:1f:fe:9d:5f:25:62:2a:8b:
         5b:34:af:27:88:c0:f5:88:0d:d4:5c:5b:bd:a3:33:f0:11:ec:
         d4:1f:3f:17:28:40:95:7e:22:02:e9:12:6b:a4:4d:c9:f2:7c:
         11:b7:aa:99:a4:f1:82:6e:4d:c6:bc:ee:cd:8a:ce:cf:27:3b:
         78:8b:af:bd:c6:2b:15:a1:e8:b8:60:84:51:22:e2:0c:b1:b8:
         98:91:f7:01:48:5c:59:d2:c5:83:5a:d6:9c:10:0f:d3:35:39:
         3b:d8:0c:98:84:58:37:56:01:11:4d:04:f8:96:98:a9:7f:93:
         f9:86:3e:10
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUUzsOM7oZSyVAZEWx2vsxaSazXmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNTEwMDEyMjAyNDhaFw0yNjA5MzAyMjA3NDhaMDMxMTAvBgNV
BAMTKDQ1OERFRkM2NzI1ODFDOTlGRDM1QUY2RTU0RTAwMDcyQjAxNzAzQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCacjbcZ2DN3/3k7CM6Tg3FElmv
9NFS9J3EI9t6Q6bKAYdGnZ9SUgNJ+QW48vSFcFtbGzjpMdFh4JNsFVWPBX+vUXdi
Bx3AhVb2T0i6umKJIQxVdwwZpUqSsKXYB88o0k+uxPo5DZFEEOjq/KL2jObT1vLW
l42U71fiMpOtQdx2+H1kxWChjIzBXmJ7cAJaDSAJagMUonWPt2hQjF8a+qwWGZ8Y
HXDeSHOXkQmClFGqNVjMTz5HTW0AUXy5k6SPIXno9ejhKqE+Y3T9dUoMpproo3b1
2GZuOfWw+8GA+g+zfE3Sq88yUiyipyfv0qoZtHxRJVS2KAuXvPwDuORLS2J9AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQURY3vxnJYHJn9Na9uVOAAcrAXA8MwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzQz
NTJlMzEzNzMxMmUzMTM5MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzMz
NjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAItq8AwDQYJKoZIhvcNAQELBQADggEBACTkY6xbtDnZ
LeQb56ApjWu4D4h9iT43GvNJuiX9YjgMYDwbTccyo5bj+q8CL/6p7CueFdl1vOGE
hdmfd5xBS+5ZFMpkiSVcF8ID/mwBMl7MK+RpfPXDTp/ywrblPlFu1uDK9/OzXRF4
EiG0rwv1hsF12bcRl9oS04kxNXlhQD2sZcZUNVOcbtMf/p1fJWIqi1s0ryeIwPWI
DdRcW72jM/AR7NQfPxcoQJV+IgLpEmukTcnyfBG3qpmk8YJuTca87s2Kzs8nO3iL
r73GKxWh6LhghFEi4gyxuJiR9wFIXFnSxYNa1pwQD9M1OTvYDJiEWDdWARFNBPiW
mKl/k/mGPhA=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:55:03 2025 by rpki-client