Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/34352e3232372e37322e302f32332d3233203d3e20323637303331.roa
File:                     34352e3232372e37322e302f32332d3233203d3e20323637303331.roa (raw, json)
Hash identifier:          xL4eCN9ul1sOkaNr10dTrr89dxuxnHuAvZaBgv3zO7U=
Subject key identifier:   65:6E:66:85:2A:BB:FD:E3:F3:E3:14:7C:7A:DB:BD:69:B3:B4:68:AF
Certificate issuer:       /CN=BF6C9EB2D557C51056477FE430CCDE31FD2D58E2
Certificate serial:       1489D6683D3623E0C6E8BFA91A1FB6F8345DD075
Authority key identifier: BF:6C:9E:B2:D5:57:C5:10:56:47:7F:E4:30:CC:DE:31:FD:2D:58:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/34352e3232372e37322e302f32332d3233203d3e20323637303331.roa
Signing time:             Thu 24 Jul 2025 17:44:18 +0000
ROA not before:           Thu 24 Jul 2025 17:39:18 +0000
ROA not after:            Thu 23 Jul 2026 17:44:18 +0000
asID:                     267031
IP address blocks:        45.227.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.crl
                          rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:89:d6:68:3d:36:23:e0:c6:e8:bf:a9:1a:1f:b6:f8:34:5d:d0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF6C9EB2D557C51056477FE430CCDE31FD2D58E2
        Validity
            Not Before: Jul 24 17:39:18 2025 GMT
            Not After : Jul 23 17:44:18 2026 GMT
        Subject: CN=656E66852ABBFDE3F3E3147C7ADBBD69B3B468AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:c9:0a:d1:3d:3f:62:9d:f9:ca:0f:ac:7b:
                    0c:1c:06:35:9c:ce:2f:e5:41:d5:08:fe:93:c3:13:
                    ed:8f:3e:9f:b9:39:65:db:52:c6:d0:97:f9:98:8d:
                    aa:67:5f:9f:8c:0a:49:6d:78:8f:78:b3:a9:27:f5:
                    7c:16:9c:fa:54:a0:f0:a0:88:e0:88:3c:ba:df:ac:
                    73:23:4b:3b:b7:b4:bc:a4:d0:bf:f0:1c:1b:55:d7:
                    d4:0b:e9:db:58:6e:27:aa:3d:5c:8d:02:59:0d:49:
                    8d:9f:df:5c:51:e1:05:67:d3:c7:54:36:a2:a3:55:
                    09:ad:0e:89:50:0c:d7:cc:fb:99:07:07:ad:db:41:
                    cb:d4:a4:05:05:b0:d9:ee:22:d0:31:5b:25:fe:fd:
                    16:2e:23:fb:e9:a9:ee:70:38:6c:f5:7d:d3:eb:bd:
                    6b:ce:59:2a:96:c4:07:dc:d2:db:9b:3f:25:00:1a:
                    42:a5:5a:3c:65:dd:bb:46:bc:06:85:8a:d1:29:59:
                    e6:fc:64:77:b7:af:4d:cd:17:cd:c7:e3:d2:2c:59:
                    e6:32:4b:07:8a:1c:00:71:25:ee:ac:1b:ce:0e:ed:
                    91:0f:29:ea:80:20:5c:6d:cc:06:31:55:e8:ca:4c:
                    b8:91:09:71:dc:53:e8:cd:87:30:2c:6b:c4:4d:71:
                    9a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6E:66:85:2A:BB:FD:E3:F3:E3:14:7C:7A:DB:BD:69:B3:B4:68:AF
            X509v3 Authority Key Identifier:
                keyid:BF:6C:9E:B2:D5:57:C5:10:56:47:7F:E4:30:CC:DE:31:FD:2D:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/34352e3232372e37322e302f32332d3233203d3e20323637303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:b8:f2:09:5f:95:b3:91:53:c2:8d:80:a5:c4:01:97:42:
         7b:6a:c0:bb:75:30:10:ac:38:55:15:ff:3d:bf:ae:3f:d1:38:
         e2:6b:09:64:b6:d5:05:5b:e8:0c:63:7a:7f:b9:d8:fd:af:b4:
         98:5c:32:b2:5f:aa:3e:ec:49:87:fb:03:a8:02:09:24:63:4d:
         bd:44:f1:e5:66:cc:69:5e:49:48:bd:43:c8:a4:9a:d2:51:4f:
         6a:24:a7:b8:ec:5f:8f:72:17:cc:91:2a:24:bd:42:99:69:6e:
         30:48:f6:f7:d0:82:69:08:eb:f0:c0:e9:83:8f:73:e2:16:d4:
         02:85:74:87:eb:19:43:1d:e6:ae:98:c8:a7:a6:c4:fb:60:57:
         e2:d5:d3:6b:5e:0c:4e:e6:de:9a:d8:c4:c8:e6:6a:5c:80:b8:
         3c:fb:08:98:3a:71:7f:2b:a1:21:97:b8:a4:5c:71:fa:b9:19:
         18:c0:33:a2:8d:a9:da:51:83:79:37:c4:32:d3:5d:05:7d:cd:
         1a:f6:49:0d:9e:e0:a4:5e:ee:98:42:2f:d2:23:23:37:06:63:
         fb:1f:f0:fc:33:a3:40:9e:8b:d7:c1:54:71:b8:43:28:91:f0:
         c1:84:af:8d:57:3d:40:8f:5f:3c:5c:6e:8d:3a:04:90:fd:57:
         4a:03:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:02:02 2025 by rpki-client