Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134322e302f32332d3233203d3e20323636393137.roa
File:                     34352e37312e3134322e302f32332d3233203d3e20323636393137.roa (raw, json)
Hash identifier:          yanoIMqmRhopM7JHBf2S3U5nTGkyvjhVrnCMMK/I5Ys=
Subject key identifier:   23:C3:06:45:CC:B0:AF:DA:DA:C4:83:53:DB:73:42:81:59:D5:41:AC
Certificate issuer:       /CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
Certificate serial:       3357D11F81E8B12C8FFD22314151AE34A3E92696
Authority key identifier: D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134322e302f32332d3233203d3e20323636393137.roa
Signing time:             Tue 08 Jul 2025 15:39:45 +0000
ROA not before:           Tue 08 Jul 2025 15:34:45 +0000
ROA not after:            Tue 07 Jul 2026 15:39:45 +0000
asID:                     266917
IP address blocks:        45.71.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl
                          rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 12:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:57:d1:1f:81:e8:b1:2c:8f:fd:22:31:41:51:ae:34:a3:e9:26:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
        Validity
            Not Before: Jul  8 15:34:45 2025 GMT
            Not After : Jul  7 15:39:45 2026 GMT
        Subject: CN=23C30645CCB0AFDADAC48353DB73428159D541AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:34:79:e3:6b:de:a2:e0:d7:fb:c6:82:4d:
                    c5:5e:22:a3:6c:37:31:26:d8:bd:67:13:10:73:0f:
                    5d:40:d9:80:bb:21:2b:16:03:9a:76:43:18:37:6d:
                    eb:31:bd:31:a7:c3:cb:bd:14:c6:0f:b3:9f:ed:b0:
                    4a:ec:3f:63:4b:99:55:83:0e:b4:ee:5b:62:b6:da:
                    0a:88:75:10:bb:75:fa:59:26:4a:92:2d:ce:45:0b:
                    cf:2a:7a:47:b0:a2:3c:7a:a9:bd:fd:85:1b:df:ca:
                    95:34:ca:e4:68:e8:bb:6f:c7:7d:64:f0:46:ef:45:
                    33:54:3c:d5:71:16:2c:88:d1:2e:c4:9a:b0:5d:dc:
                    67:2b:5d:ce:1e:e0:fb:75:5c:bc:77:7a:31:c8:5f:
                    0d:ac:ac:8e:85:16:d0:41:43:f2:6a:70:93:96:27:
                    51:7b:55:d4:94:c4:12:ba:55:51:44:03:21:72:2f:
                    d3:91:19:9e:16:62:3a:7e:25:26:bf:8d:78:94:f8:
                    2d:d6:85:b1:26:fa:fd:2c:55:fd:49:0d:d8:a0:67:
                    3f:75:d5:aa:3e:ad:25:d3:d2:d0:16:af:9a:f7:6f:
                    d7:7a:f1:d6:db:06:19:0e:dc:d1:50:78:b7:38:04:
                    3c:7f:8d:8d:9e:c9:e0:24:9a:69:0f:99:ba:ac:6c:
                    6c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C3:06:45:CC:B0:AF:DA:DA:C4:83:53:DB:73:42:81:59:D5:41:AC
            X509v3 Authority Key Identifier:
                keyid:D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134322e302f32332d3233203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:c2:84:30:4e:bb:0c:89:3c:f0:19:03:b5:c9:59:b1:ab:53:
         68:e8:7a:3f:f2:45:3c:de:17:de:31:80:12:9c:af:50:86:a2:
         3f:4a:89:ee:0a:53:a8:de:6d:2d:16:26:18:02:95:6a:93:be:
         bd:68:66:3e:5d:c1:e4:dc:c1:85:c2:02:0d:66:7b:99:f3:ce:
         94:69:08:fe:8b:56:84:81:53:3e:d2:1a:33:a2:52:23:c0:7a:
         51:fe:1e:c8:bd:b0:fb:ca:6d:6d:c2:4f:fc:2a:8f:21:b4:c4:
         70:e8:ed:05:d7:db:21:a2:d3:23:c3:42:2e:39:c4:b0:e1:60:
         cb:85:7d:92:a4:6e:33:cf:34:02:e8:36:a3:bc:78:62:96:a2:
         91:22:fb:07:a5:8d:7d:0a:5e:42:2a:b4:dd:a2:4b:07:f9:a1:
         80:4d:c1:20:bb:5a:72:e7:e3:fb:80:05:41:23:84:5d:65:77:
         cc:8c:df:7b:6b:3f:65:96:f2:84:3b:a1:08:52:d1:f3:a9:35:
         06:0f:21:f0:0d:17:cd:cd:26:b0:39:d7:8c:35:8c:27:a7:82:
         ca:22:ee:ec:35:5d:2f:aa:3b:b0:9f:73:cd:62:cc:f8:8e:f1:
         21:66:bb:c2:36:b4:5c:6f:af:a9:83:35:7c:cd:e8:01:b9:c8:
         79:e1:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:37:06 2025 by rpki-client