Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134302e302f32342d3234203d3e20323636393137.roa
File:                     34352e37312e3134302e302f32342d3234203d3e20323636393137.roa (raw, json)
Hash identifier:          1wPVwprSKkZQCEPw+12O+3UnCvZY8MsfCsdIvAB9W44=
Subject key identifier:   D0:79:B5:52:E1:14:C5:20:CA:15:EE:27:35:E3:8B:C8:02:BB:8C:BA
Certificate issuer:       /CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
Certificate serial:       32C5238E25E3B7BAFF6D693DE5B5C7A6666A0AFB
Authority key identifier: D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134302e302f32342d3234203d3e20323636393137.roa
Signing time:             Tue 08 Jul 2025 15:39:50 +0000
ROA not before:           Tue 08 Jul 2025 15:34:50 +0000
ROA not after:            Tue 07 Jul 2026 15:39:50 +0000
asID:                     266917
IP address blocks:        45.71.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl
                          rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 12:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c5:23:8e:25:e3:b7:ba:ff:6d:69:3d:e5:b5:c7:a6:66:6a:0a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
        Validity
            Not Before: Jul  8 15:34:50 2025 GMT
            Not After : Jul  7 15:39:50 2026 GMT
        Subject: CN=D079B552E114C520CA15EE2735E38BC802BB8CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:e2:f2:bd:fa:70:e7:38:db:0e:68:76:48:
                    80:a2:a4:1f:c2:2c:2b:41:ca:6e:6f:fb:83:09:8d:
                    70:10:d4:ca:7c:66:50:d1:dd:fd:05:e0:67:2c:8b:
                    91:85:0f:c6:04:f8:b7:7d:e6:63:0d:ac:42:c2:76:
                    6e:a1:b1:ac:62:ee:a4:a2:c5:0c:49:74:11:67:9a:
                    b2:5b:fc:25:1f:f9:a3:aa:76:7e:53:c7:af:d8:2c:
                    d2:99:39:8c:32:da:90:b0:50:10:96:92:a3:0a:0c:
                    78:c4:c3:d2:46:de:83:1e:8c:8b:0d:f0:fd:a0:fc:
                    6e:74:87:64:56:71:4f:b8:2f:1b:1d:e7:6f:a4:55:
                    d0:fa:80:eb:20:82:f8:f3:14:ca:66:22:36:a2:fb:
                    fd:7e:7c:86:61:e1:86:7b:a4:d8:da:01:b3:7b:6b:
                    64:b9:17:ab:27:26:6e:b6:1b:69:36:79:e6:8f:a3:
                    84:a8:54:fb:68:1d:be:8e:7a:c5:e6:94:53:17:94:
                    4f:89:0c:06:5d:59:ad:eb:04:cd:de:8e:2c:40:0b:
                    be:02:a5:7d:2a:56:76:57:ab:65:27:18:e4:3c:ee:
                    2f:5c:09:b7:ee:00:2d:26:e6:56:66:ef:a2:91:b2:
                    1c:63:3a:94:f5:61:9d:9b:47:a2:fb:0f:d1:b6:23:
                    46:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:79:B5:52:E1:14:C5:20:CA:15:EE:27:35:E3:8B:C8:02:BB:8C:BA
            X509v3 Authority Key Identifier:
                keyid:D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134302e302f32342d3234203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:f7:49:aa:80:07:48:e4:04:f2:96:d9:a2:0f:e9:47:a9:4d:
         b0:92:10:34:58:c6:7b:47:19:80:91:b1:2a:6c:89:42:8d:9f:
         aa:84:03:61:91:85:e8:32:c4:26:bc:e9:95:66:31:b5:ad:b0:
         9a:3a:08:fe:1a:8f:5b:4d:61:70:0c:f3:e4:4c:70:20:7e:03:
         a5:ed:9f:b2:63:c0:d0:3d:42:1a:4d:4c:17:1b:07:58:25:69:
         e1:fb:9f:c1:95:8d:c3:3b:5f:06:ac:87:22:49:92:d8:4a:e1:
         21:33:7c:6b:13:d1:04:0d:ff:75:53:50:30:07:e5:9a:53:bb:
         18:50:89:7d:22:9a:9b:4e:89:5f:ca:b3:95:02:09:8b:52:c5:
         be:09:8f:24:9b:21:14:dc:32:8f:42:1e:99:bf:82:7a:4c:91:
         29:86:37:b5:2b:79:2c:65:49:c6:e6:16:a0:2f:29:92:61:83:
         29:67:a1:d5:4c:1f:e8:5b:87:0d:b9:2a:a7:e3:0b:85:8e:2f:
         dc:64:cc:d9:fb:f1:58:2b:a8:9d:d7:8e:4e:b6:1e:b0:f9:01:
         3e:f5:99:3e:d6:57:53:ce:cd:20:71:11:61:70:65:73:93:b0:
         ee:8e:22:80:4a:43:a7:4d:1d:76:fa:fc:d7:03:15:23:3b:20:
         69:50:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:38:29 2025 by rpki-client