Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134322e302f32342d3234203d3e20323636393137.roa
File:                     34352e37312e3134322e302f32342d3234203d3e20323636393137.roa (raw, json)
Hash identifier:          5NOkDSI5yvAZF1D90N+kbNjavisOOv7HAcNi0logJrY=
Subject key identifier:   83:67:D2:17:B9:99:92:DC:77:A5:46:DD:D5:46:3C:D5:C8:CA:7D:05
Certificate issuer:       /CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
Certificate serial:       3F344DAF9164E5B22A8993B584440221425FCAA4
Authority key identifier: D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134322e302f32342d3234203d3e20323636393137.roa
Signing time:             Tue 08 Jul 2025 15:39:49 +0000
ROA not before:           Tue 08 Jul 2025 15:34:49 +0000
ROA not after:            Tue 07 Jul 2026 15:39:49 +0000
asID:                     266917
IP address blocks:        45.71.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl
                          rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 12:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:34:4d:af:91:64:e5:b2:2a:89:93:b5:84:44:02:21:42:5f:ca:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
        Validity
            Not Before: Jul  8 15:34:49 2025 GMT
            Not After : Jul  7 15:39:49 2026 GMT
        Subject: CN=8367D217B99992DC77A546DDD5463CD5C8CA7D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:b8:3a:5d:f6:b2:b3:2b:a0:1b:ad:48:4e:
                    c9:cf:75:07:e8:53:d5:d0:0c:51:a2:1e:a2:ce:06:
                    0c:7f:62:d5:d3:45:da:64:64:89:c9:d6:98:65:61:
                    04:6a:dd:3e:07:cd:40:27:2b:57:56:43:10:36:f5:
                    02:3a:57:74:8a:9e:49:0e:f0:06:73:33:79:c2:93:
                    44:74:02:b6:d3:3f:8a:2f:f8:c1:a6:44:25:47:9a:
                    d2:18:a3:40:d4:db:01:77:01:2b:ed:3b:b4:96:0c:
                    e5:5c:3a:f9:fe:32:75:4a:96:21:23:57:d3:e5:bc:
                    f4:ad:c0:4e:03:05:d7:73:f6:ed:2c:f3:61:56:ba:
                    72:1f:0d:36:03:28:b6:15:d1:fb:3b:27:74:c5:7b:
                    5a:92:02:59:6c:a5:c7:ae:96:76:80:fd:34:2e:c7:
                    08:c2:34:6c:41:b9:64:b2:99:61:f7:f2:9c:ee:01:
                    ea:32:da:a2:a3:44:16:89:5e:bb:33:c7:16:07:69:
                    f4:22:16:04:5c:0b:67:6b:4e:cf:b2:2c:76:b9:29:
                    27:76:4a:0c:1f:3a:a1:de:fe:1c:41:84:21:85:9e:
                    98:d7:60:1e:31:5d:db:e3:9d:72:b9:3c:68:11:4f:
                    d9:67:92:07:e9:ac:d4:85:be:6d:8f:ac:09:bd:96:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:67:D2:17:B9:99:92:DC:77:A5:46:DD:D5:46:3C:D5:C8:CA:7D:05
            X509v3 Authority Key Identifier:
                keyid:D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134322e302f32342d3234203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:a4:bf:bb:1c:bb:e5:c1:b8:15:e7:8d:0c:5f:d6:d0:a3:
         75:79:4d:36:39:52:25:a5:86:06:78:0c:26:dd:ed:20:01:7d:
         00:3a:cc:0d:8f:6f:cc:ec:9f:34:0d:c6:bf:d7:01:de:63:f8:
         70:f5:f1:4d:14:bd:8e:e4:73:e5:6b:a8:0b:c3:d6:39:a9:b2:
         ad:48:01:4b:c6:47:64:e1:be:eb:37:45:f3:48:79:64:f3:db:
         ef:5f:14:5c:be:4b:d0:bc:40:28:f2:17:73:ac:49:17:c4:e1:
         75:eb:8f:91:2c:22:c3:99:4c:84:8e:1a:7c:2e:1e:ae:27:2d:
         b0:f9:e9:10:f9:27:4c:db:e8:3d:88:87:c3:f2:df:47:7e:b9:
         9b:1f:8f:19:20:76:84:43:bf:a4:fe:40:18:79:63:4f:76:79:
         86:a6:22:0b:b5:ac:26:5b:6a:a8:76:96:6a:27:dd:d4:b9:94:
         7f:e2:9f:42:70:fe:60:23:e3:92:ae:c9:8f:71:20:8e:2a:da:
         ad:b7:89:ef:d4:4e:30:0c:f9:a3:c5:fe:9c:03:c9:32:5d:0c:
         23:09:a0:81:29:74:18:50:fc:66:45:01:9e:63:ca:7b:92:15:
         2d:35:66:11:e4:2a:1c:6c:59:93:a3:af:a9:62:bf:c6:1c:a9:
         b1:cc:18:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:38:36 2025 by rpki-client