Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134302e302f32322d3232203d3e20323636393137.roa
File:                     34352e37312e3134302e302f32322d3232203d3e20323636393137.roa (raw, json)
Hash identifier:          3bjHZCHLQFDqPYWaKixG2ZGmvkHd6l78R1aM4JCvzG4=
Subject key identifier:   E7:B4:82:4D:17:AA:AE:E0:DE:74:E3:7B:32:35:3F:4A:0E:BB:63:15
Certificate issuer:       /CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
Certificate serial:       531B9E5CE50F4B2B22623FA764A34FFF678B0107
Authority key identifier: D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134302e302f32322d3232203d3e20323636393137.roa
Signing time:             Tue 08 Jul 2025 15:39:49 +0000
ROA not before:           Tue 08 Jul 2025 15:34:49 +0000
ROA not after:            Tue 07 Jul 2026 15:39:49 +0000
asID:                     266917
IP address blocks:        45.71.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl
                          rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 12:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1b:9e:5c:e5:0f:4b:2b:22:62:3f:a7:64:a3:4f:ff:67:8b:01:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
        Validity
            Not Before: Jul  8 15:34:49 2025 GMT
            Not After : Jul  7 15:39:49 2026 GMT
        Subject: CN=E7B4824D17AAAEE0DE74E37B32353F4A0EBB6315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:be:bd:09:35:a3:5e:ed:a1:92:18:87:15:f8:
                    f7:60:90:fe:46:76:dd:ee:80:a3:77:a9:83:13:70:
                    02:80:56:19:14:8e:40:67:3c:8f:79:bb:ce:d7:11:
                    67:fc:71:78:a4:8c:5a:81:c2:26:46:78:c1:50:61:
                    42:05:68:9b:da:50:f2:ef:9e:6c:b2:ae:4e:5c:20:
                    24:65:63:5c:af:55:39:dc:bd:a5:75:d9:6c:3e:34:
                    96:7c:fb:45:3a:99:36:d6:92:01:9b:42:38:27:f6:
                    02:b3:79:b6:24:56:fb:52:c1:19:3f:0c:ad:bb:99:
                    95:f8:c7:40:8b:37:ab:ce:3e:d1:35:25:39:50:30:
                    69:5b:1f:66:27:25:c2:c7:90:41:b2:f9:87:51:8a:
                    1e:65:e1:1b:13:44:d7:a0:76:c4:16:52:6a:16:19:
                    8f:00:3d:27:7e:4b:c5:ad:48:3f:01:8d:95:ff:80:
                    a0:36:99:10:99:5f:0e:bb:84:09:5b:9e:5a:4b:ab:
                    13:c0:73:c5:00:96:ab:bd:26:8d:94:4d:66:b4:52:
                    28:b6:e3:f3:29:d2:0f:e7:01:8f:21:ab:66:ee:ca:
                    eb:a5:e3:7e:a8:f3:8e:64:0a:43:5b:21:96:ab:0d:
                    56:a0:c4:83:bc:18:3a:15:54:45:b0:1d:d6:9b:da:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B4:82:4D:17:AA:AE:E0:DE:74:E3:7B:32:35:3F:4A:0E:BB:63:15
            X509v3 Authority Key Identifier:
                keyid:D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134302e302f32322d3232203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:1c:61:57:18:ab:ed:2b:ff:ff:56:6d:cc:45:53:a4:66:7a:
         17:37:27:ef:89:8d:86:ff:ff:b8:06:56:11:cf:0a:9c:2c:b3:
         07:7d:a4:77:a7:d5:e5:3d:cc:86:f7:82:f7:f9:06:da:b6:6a:
         db:5a:43:31:70:54:ae:16:1d:8d:43:16:7d:05:de:e6:47:bd:
         35:0c:e5:8c:c5:9f:cc:2c:ab:75:f1:e8:80:39:26:c8:06:c7:
         a3:33:07:17:3b:e8:4c:28:26:1f:db:21:15:7d:cc:5d:90:95:
         7d:7a:30:f0:7a:99:e2:57:c4:3c:9c:ab:c4:f4:49:57:b0:b3:
         20:59:a9:c4:5e:22:2e:99:d5:82:9e:e3:e7:d8:af:83:fd:1e:
         29:64:ed:05:1e:f9:db:9a:21:89:a2:8b:37:52:82:8d:75:6c:
         c1:8f:73:3c:3e:c5:f5:fc:00:6a:06:06:5c:87:29:55:82:b1:
         36:bd:24:39:a5:ea:f3:a0:b6:a2:26:b6:a7:a9:76:27:b4:81:
         38:5e:45:4e:77:33:02:f8:14:53:17:5f:37:3c:d4:15:88:50:
         7b:cc:b1:5f:b2:23:b7:e3:0c:6c:f7:a2:b5:8c:b8:06:e5:64:
         a2:ea:0c:25:5d:cc:65:b0:90:e0:4e:f4:2c:dc:9c:b7:90:91:
         f9:b2:6d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:37:05 2025 by rpki-client