Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34362e302f32342d3234203d3e20323637303739.roa
File:                     34352e3232372e34362e302f32342d3234203d3e20323637303739.roa (raw, json)
Hash identifier:          1l05BMPGyLhjssj6zv2fmrs/3X2U29IMJ8V2i8DbT3I=
Subject key identifier:   CA:D9:39:07:74:FC:44:43:8A:7E:0F:4A:D5:04:5A:34:87:E1:5F:1D
Certificate issuer:       /CN=C37DFCAC064562FA9CAB960E045B7E0BCF2F2872
Certificate serial:       45BB8F36973D73FC0927CA40CC0481002A6DAFE5
Authority key identifier: C3:7D:FC:AC:06:45:62:FA:9C:AB:96:0E:04:5B:7E:0B:CF:2F:28:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37DFCAC064562FA9CAB960E045B7E0BCF2F2872.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34362e302f32342d3234203d3e20323637303739.roa
Signing time:             Fri 01 Aug 2025 19:12:00 +0000
ROA not before:           Fri 01 Aug 2025 19:07:00 +0000
ROA not after:            Fri 31 Jul 2026 19:12:00 +0000
asID:                     267079
IP address blocks:        45.227.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/C37DFCAC064562FA9CAB960E045B7E0BCF2F2872.crl
                          rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/C37DFCAC064562FA9CAB960E045B7E0BCF2F2872.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37DFCAC064562FA9CAB960E045B7E0BCF2F2872.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bb:8f:36:97:3d:73:fc:09:27:ca:40:cc:04:81:00:2a:6d:af:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37DFCAC064562FA9CAB960E045B7E0BCF2F2872
        Validity
            Not Before: Aug  1 19:07:00 2025 GMT
            Not After : Jul 31 19:12:00 2026 GMT
        Subject: CN=CAD9390774FC44438A7E0F4AD5045A3487E15F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:12:f7:58:9e:75:4c:50:e6:be:0d:e5:0f:ab:
                    53:8a:7b:94:79:c5:4f:c1:93:6c:0c:20:8f:cb:fd:
                    b2:e9:26:6f:5d:70:72:e4:d0:86:95:20:0f:93:9a:
                    24:c5:a2:1d:2f:f0:d1:60:99:67:7f:c9:9e:27:8a:
                    79:c0:15:f8:d4:91:49:fe:78:f6:b6:05:8e:2c:07:
                    e3:40:f0:26:d9:91:27:82:e7:a5:4d:b6:a7:1f:a4:
                    3c:ab:ca:a8:85:bd:41:fa:f6:b9:21:e0:da:b4:24:
                    b0:71:94:ac:33:f0:92:ac:e3:fd:e5:a9:34:83:4f:
                    8b:b6:bb:cd:a1:be:81:d8:bc:9b:ad:58:c6:00:54:
                    b4:f0:81:02:09:ee:7b:ac:17:46:74:24:e7:f0:99:
                    1e:97:18:74:3a:fe:15:3b:bb:95:d7:ad:b7:bb:80:
                    3f:b8:7c:e0:38:90:e9:24:43:3d:01:a4:97:cc:4b:
                    e5:51:01:92:bf:9a:d7:a6:c1:f5:79:4b:96:a0:a3:
                    96:42:e8:63:24:41:d4:16:e6:15:66:c3:dc:16:14:
                    d4:37:26:c8:1e:c6:05:99:4c:84:74:4a:13:a7:de:
                    aa:0d:79:f4:a2:c5:4e:2d:3f:73:18:13:d5:98:52:
                    67:85:22:6a:4b:95:87:d0:35:3c:87:59:20:41:ab:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D9:39:07:74:FC:44:43:8A:7E:0F:4A:D5:04:5A:34:87:E1:5F:1D
            X509v3 Authority Key Identifier:
                keyid:C3:7D:FC:AC:06:45:62:FA:9C:AB:96:0E:04:5B:7E:0B:CF:2F:28:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/C37DFCAC064562FA9CAB960E045B7E0BCF2F2872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37DFCAC064562FA9CAB960E045B7E0BCF2F2872.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34362e302f32342d3234203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d9:6c:d8:04:68:c2:b5:cc:c6:2a:f8:00:66:9b:2b:23:41:
         65:b9:b1:82:4f:e3:7a:32:fc:03:bc:f3:e6:e9:b2:48:68:ec:
         55:8a:3a:c8:26:96:83:88:24:96:53:d4:dd:ea:c0:98:81:e0:
         ff:7f:cd:04:e5:5a:ef:f6:15:9d:43:cf:56:88:d6:4b:9e:a0:
         5f:0c:1a:e8:f3:8b:d4:3d:cc:f1:f4:ba:1e:a1:6f:05:cb:56:
         3b:a1:2c:f9:cb:d8:c4:35:e9:b7:83:cc:35:c6:fb:d1:7e:69:
         bc:98:38:2e:65:aa:33:85:b7:65:6a:27:83:4c:5c:97:6a:e5:
         f3:4e:34:15:cc:a6:16:41:cd:cb:36:ea:d2:2e:fe:e4:56:8b:
         af:73:fa:9a:65:4e:0d:c9:18:0b:c7:5c:a8:01:a2:4e:72:5c:
         d6:d7:ad:7b:21:0f:a8:61:1a:a5:67:95:5e:9a:1b:d0:ff:20:
         b9:37:45:8f:d5:52:c4:f4:5f:a4:be:13:bc:a6:c0:30:bd:68:
         b1:60:cf:be:01:b7:98:e3:c2:f0:47:70:c4:9a:3c:0c:8b:f4:
         58:75:c6:81:7e:43:66:e1:3e:07:1f:29:86:0a:0e:8f:23:78:
         e4:55:ca:cc:05:54:64:e5:88:1e:13:27:b9:ca:9a:e0:5c:9e:
         87:71:d1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:36 2025 by rpki-client