Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/34352e3233352e38302e302f32322d3234203d3e203532353332.roa
File:                     34352e3233352e38302e302f32322d3234203d3e203532353332.roa (raw, json)
Hash identifier:          4iJLkxOgiAlcc2gcCkb4wGNlMRPFxLR27cmXth+Llbc=
Subject key identifier:   6B:D1:A0:6E:4A:34:9F:4B:3B:09:DB:31:0E:F2:F5:2D:55:70:02:21
Certificate issuer:       /CN=B58A535DFA3CC3409F5D6F92075412F203C29CE7
Certificate serial:       44F535879343E4E27CE416627185433D0A8E0505
Authority key identifier: B5:8A:53:5D:FA:3C:C3:40:9F:5D:6F:92:07:54:12:F2:03:C2:9C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/34352e3233352e38302e302f32322d3234203d3e203532353332.roa
Signing time:             Tue 03 Jun 2025 18:01:34 +0000
ROA not before:           Tue 03 Jun 2025 17:56:34 +0000
ROA not after:            Tue 02 Jun 2026 18:01:34 +0000
asID:                     52532
IP address blocks:        45.235.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 15:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f5:35:87:93:43:e4:e2:7c:e4:16:62:71:85:43:3d:0a:8e:05:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B58A535DFA3CC3409F5D6F92075412F203C29CE7
        Validity
            Not Before: Jun  3 17:56:34 2025 GMT
            Not After : Jun  2 18:01:34 2026 GMT
        Subject: CN=6BD1A06E4A349F4B3B09DB310EF2F52D55700221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:73:61:1b:b8:0b:1a:39:60:5f:38:b2:71:2f:
                    13:e9:9b:57:4d:df:29:93:78:1e:a6:76:02:73:86:
                    a9:05:ca:ac:a3:9d:4f:35:d3:53:e4:7c:82:b5:1e:
                    39:03:ba:17:7a:08:96:d6:71:48:a8:58:6b:2d:a9:
                    fd:ab:7d:1e:6e:56:2d:af:68:54:41:ed:b9:28:b3:
                    73:34:13:bc:ab:4e:67:db:4b:8a:ca:97:7f:51:28:
                    d4:e0:ce:0a:d6:62:48:60:22:f5:a8:cd:93:e9:02:
                    8b:90:76:95:4c:9b:d7:b1:b3:f5:55:51:38:95:18:
                    38:2b:9b:a3:d6:0e:b5:1e:c3:2e:bd:67:0a:2d:63:
                    02:23:a3:f1:6b:9c:e0:36:dd:46:f6:84:be:13:ff:
                    4c:88:25:74:90:d0:d4:42:23:87:a9:fe:92:f0:7b:
                    1f:0e:53:0f:54:5d:72:bd:39:d3:04:6e:1a:84:35:
                    cd:69:9e:6f:7c:56:c8:37:54:8a:46:33:b9:0d:c2:
                    1d:91:9e:8b:9b:67:7d:ab:3b:98:61:14:78:ef:b9:
                    10:12:91:b0:08:12:94:bc:65:3e:d5:c9:eb:c7:9b:
                    3a:88:f8:24:f5:ae:54:fc:df:00:5d:24:b5:a7:36:
                    e2:25:71:73:f5:b1:63:78:3e:5b:74:e6:bb:3e:6e:
                    a2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D1:A0:6E:4A:34:9F:4B:3B:09:DB:31:0E:F2:F5:2D:55:70:02:21
            X509v3 Authority Key Identifier:
                keyid:B5:8A:53:5D:FA:3C:C3:40:9F:5D:6F:92:07:54:12:F2:03:C2:9C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/34352e3233352e38302e302f32322d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:c1:c0:27:eb:8f:7b:da:a9:82:6e:53:0a:f6:89:c0:81:
         72:3b:14:c9:32:95:e4:b0:60:b8:60:32:5d:d4:4a:0d:42:de:
         71:18:de:9e:ec:34:2b:da:16:e4:a1:0b:8f:69:0b:80:40:1a:
         38:4f:22:a3:06:05:42:27:a5:33:1e:3d:17:03:e3:a9:b0:55:
         45:a1:be:bc:83:e3:1a:a0:63:80:d9:88:35:ea:28:e9:f6:33:
         e7:21:ee:5b:36:1e:8d:52:9b:9b:05:e4:c8:d3:30:6f:c5:d6:
         0c:66:f4:04:ae:cf:4c:f7:15:a7:82:69:98:3d:e3:8a:cd:d4:
         4d:91:4d:82:80:08:68:d5:45:f6:43:e4:d1:61:85:f2:37:3a:
         6e:e7:97:44:60:fd:c4:5f:f7:b0:89:fd:20:1b:e0:d7:35:8b:
         97:9f:1f:88:dd:e8:df:74:eb:05:4c:fa:9c:18:b6:b9:ba:0a:
         d9:11:bd:5b:51:79:4f:48:5f:8c:f3:54:6b:a6:23:f9:a9:f2:
         2e:aa:57:55:4f:d9:ca:2e:e8:14:00:47:0a:d1:5f:cb:66:e6:
         45:c0:89:3f:7d:2e:10:82:fc:d2:c9:8c:06:05:52:57:1f:24:
         27:26:19:2b:1e:5d:d8:00:b4:84:d0:0f:0c:02:36:ff:3f:eb:
         91:fa:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:55:20 2025 by rpki-client