Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/34352e3232372e37322e302f32342d3234203d3e20323637303331.roa
File:                     34352e3232372e37322e302f32342d3234203d3e20323637303331.roa (raw, json)
Hash identifier:          w5ovtBzu7Z0KlHqpNI4u+ZsEKHIpNXKgP4ziFqPQmZQ=
Subject key identifier:   D7:B6:43:C3:68:44:5B:69:B9:8E:72:1A:58:F5:4A:5F:05:78:FD:95
Certificate issuer:       /CN=BF6C9EB2D557C51056477FE430CCDE31FD2D58E2
Certificate serial:       7C9C4D8A32B12C37DF1088E5135E3F25AADB6FA3
Authority key identifier: BF:6C:9E:B2:D5:57:C5:10:56:47:7F:E4:30:CC:DE:31:FD:2D:58:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/34352e3232372e37322e302f32342d3234203d3e20323637303331.roa
Signing time:             Thu 24 Jul 2025 17:44:18 +0000
ROA not before:           Thu 24 Jul 2025 17:39:18 +0000
ROA not after:            Thu 23 Jul 2026 17:44:18 +0000
asID:                     267031
IP address blocks:        45.227.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.crl
                          rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9c:4d:8a:32:b1:2c:37:df:10:88:e5:13:5e:3f:25:aa:db:6f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF6C9EB2D557C51056477FE430CCDE31FD2D58E2
        Validity
            Not Before: Jul 24 17:39:18 2025 GMT
            Not After : Jul 23 17:44:18 2026 GMT
        Subject: CN=D7B643C368445B69B98E721A58F54A5F0578FD95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:89:e8:a3:c4:22:28:7d:50:d4:58:00:4f:b0:
                    81:2a:85:ba:3b:02:e8:fb:d1:b6:ec:f6:dd:97:30:
                    20:70:85:ca:23:f3:82:d2:80:83:da:5b:9c:82:a7:
                    18:5f:a8:9a:52:f6:51:3d:1a:fe:d1:b0:0d:ba:7d:
                    1a:38:29:01:b3:66:ac:61:be:00:df:83:76:11:bb:
                    50:8b:1d:46:12:ce:db:7f:76:2a:13:48:bf:05:b1:
                    66:2b:80:a0:6e:d3:e4:20:04:9b:38:fa:18:1f:65:
                    fd:a8:b2:61:41:0b:01:0a:0f:05:6d:68:2b:8a:66:
                    6d:fc:27:fa:c6:bd:2e:db:1b:ec:69:13:9f:d0:05:
                    15:ac:9f:c6:dd:12:fb:1f:32:f7:ce:d6:f1:df:5b:
                    65:ac:0e:c3:90:72:19:8f:46:11:bb:3e:14:cb:20:
                    c6:d6:ae:1d:58:3a:88:51:2d:95:c0:0e:48:0c:e7:
                    e0:7b:18:bf:e9:69:27:3b:d0:9a:41:7d:1d:72:1d:
                    38:41:24:34:1b:60:bc:17:6d:cd:47:e6:c0:f5:f2:
                    44:48:e6:5c:87:5f:61:d5:45:91:dc:cd:b2:70:6f:
                    12:71:17:bf:16:be:34:bc:75:8b:7e:d2:cf:b9:f4:
                    4b:df:fd:b3:41:37:45:01:98:c5:b2:ea:89:d1:60:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B6:43:C3:68:44:5B:69:B9:8E:72:1A:58:F5:4A:5F:05:78:FD:95
            X509v3 Authority Key Identifier:
                keyid:BF:6C:9E:B2:D5:57:C5:10:56:47:7F:E4:30:CC:DE:31:FD:2D:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6C9EB2D557C51056477FE430CCDE31FD2D58E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/34352e3232372e37322e302f32342d3234203d3e20323637303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:5c:df:05:c7:79:09:00:eb:08:7f:be:97:bd:e1:0a:0f:
         9b:da:5f:2d:38:4a:69:65:bc:73:4f:15:65:8a:28:0d:50:03:
         c1:73:35:f7:74:01:39:30:82:76:e8:c8:25:75:7b:31:d6:28:
         8d:a9:b6:ac:0e:f4:5b:3b:6a:cb:3d:5b:08:23:ab:af:85:38:
         c8:4b:35:80:39:37:d2:e0:51:88:b2:15:bd:53:ef:4a:ea:a4:
         3b:93:a0:08:e5:c8:13:87:94:1e:29:4d:05:7e:3e:aa:26:0b:
         5b:96:32:18:9c:19:0f:be:6f:15:ed:43:23:10:eb:d3:c2:d3:
         49:0d:1c:c1:81:b0:11:22:c1:0c:43:1e:26:89:42:97:c4:27:
         10:f6:bf:f1:2a:dc:ec:29:df:19:ab:ea:42:04:2c:3c:57:d8:
         a5:f9:2c:8c:8e:fc:0f:3d:3e:ea:b4:b4:e7:cf:de:10:ac:12:
         04:22:96:6d:ce:d9:bb:de:25:db:1f:28:55:fb:c4:7a:7a:40:
         e6:5f:90:6b:be:25:ee:7a:8b:08:49:39:93:b2:54:53:8b:5a:
         8b:54:76:c6:95:54:86:4d:56:d7:f5:d5:65:65:19:65:97:62:
         23:82:7b:81:f2:50:b5:df:29:3e:c4:e0:f4:75:a4:cf:30:a8:
         b2:a9:40:ca
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfJxNijKxLDffEIjlE14/Jarbb6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY2QzlFQjJENTU3QzUxMDU2NDc3RkU0MzBDQ0RFMzFG
RDJENThFMjAeFw0yNTA3MjQxNzM5MThaFw0yNjA3MjMxNzQ0MThaMDMxMTAvBgNV
BAMTKEQ3QjY0M0MzNjg0NDVCNjlCOThFNzIxQTU4RjU0QTVGMDU3OEZEOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSieijxCIofVDUWABPsIEqhbo7
Auj70bbs9t2XMCBwhcoj84LSgIPaW5yCpxhfqJpS9lE9Gv7RsA26fRo4KQGzZqxh
vgDfg3YRu1CLHUYSztt/dioTSL8FsWYrgKBu0+QgBJs4+hgfZf2osmFBCwEKDwVt
aCuKZm38J/rGvS7bG+xpE5/QBRWsn8bdEvsfMvfO1vHfW2WsDsOQchmPRhG7PhTL
IMbWrh1YOohRLZXADkgM5+B7GL/paSc70JpBfR1yHThBJDQbYLwXbc1H5sD18kRI
5lyHX2HVRZHczbJwbxJxF78WvjS8dYt+0s+59Evf/bNBN0UBmMWy6onRYJ+nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU17ZDw2hEW2m5jnIaWPVKXwV4/ZUwHwYDVR0j
BBgwFoAUv2yestVXxRBWR3/kMMzeMf0tWOIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNpenJBNzlpRFVhVWhyaVlOSG8yc0x0ODhndDlBekgzSEtiMTd0dlVO
WEwvMC9CRjZDOUVCMkQ1NTdDNTEwNTY0NzdGRTQzMENDREUzMUZEMkQ1OEUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNkM5RUIyRDU1N0M1MTA1
NjQ3N0ZFNDMwQ0NERTMxRkQyRDU4RTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzaXpyQTc5aURVYVVocmlZTkhvMnNMdDg4Z3Q5QXpIM0hLYjE3dHZVTlhMLzAv
MzQzNTJlMzIzMjM3MmUzNzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeNIMA0GCSqGSIb3DQEBCwUAA4IBAQBm+lzfBcd5
CQDrCH++l73hCg+b2l8tOEppZbxzTxVliigNUAPBczX3dAE5MIJ26MgldXsx1iiN
qbasDvRbO2rLPVsII6uvhTjISzWAOTfS4FGIshW9U+9K6qQ7k6AI5cgTh5QeKU0F
fj6qJgtbljIYnBkPvm8V7UMjEOvTwtNJDRzBgbARIsEMQx4miUKXxCcQ9r/xKtzs
Kd8Zq+pCBCw8V9il+SyMjvwPPT7qtLTnz94QrBIEIpZtztm73iXbHyhV+8R6ekDm
X5BrviXueosISTmTslRTi1qLVHbGlVSGTVbX9dVlZRlll2IjgnuB8lC13yk+xOD0
daTPMKiyqUDK
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:33:32 2025 by rpki-client