Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3133302e302f32332d3233203d3e20323637363038.roa
File:                     34352e37312e3133302e302f32332d3233203d3e20323637363038.roa (raw, json)
Hash identifier:          uf7J7psKvd5pCyNhlzKOIDuxSVC/CGMOp13XEE+MuLU=
Subject key identifier:   6E:6A:A1:1F:3C:E9:C8:DC:31:8F:43:CA:10:3B:40:66:74:6A:DF:03
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       6E95B92996A4F76A05AE78CB9FA08B81515C15DC
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3133302e302f32332d3233203d3e20323637363038.roa
Signing time:             Fri 30 May 2025 23:25:56 +0000
ROA not before:           Fri 30 May 2025 23:20:56 +0000
ROA not after:            Fri 29 May 2026 23:25:56 +0000
asID:                     267608
IP address blocks:        45.71.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 03:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:95:b9:29:96:a4:f7:6a:05:ae:78:cb:9f:a0:8b:81:51:5c:15:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May 30 23:20:56 2025 GMT
            Not After : May 29 23:25:56 2026 GMT
        Subject: CN=6E6AA11F3CE9C8DC318F43CA103B4066746ADF03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7a:df:2a:81:4a:20:77:10:51:c9:f1:8e:ea:
                    43:d2:e9:0d:3d:ea:8d:79:c7:b1:6f:ec:5c:6a:dd:
                    20:4a:66:30:db:92:58:ef:b8:fb:59:4e:14:35:b8:
                    8d:d7:fd:30:74:2e:d9:63:b3:bf:d8:43:91:ec:0c:
                    c4:2b:0e:7d:5c:cf:74:ab:2a:e9:66:a4:c4:f7:a0:
                    7c:75:0e:ef:82:81:b0:53:5d:4b:0b:a0:da:70:5d:
                    2b:d8:31:7d:71:65:39:fa:c1:ae:31:8e:a0:6f:94:
                    4f:e1:6a:dd:4e:44:7e:70:80:70:4d:9b:4a:25:2b:
                    c1:22:69:12:20:1e:8c:88:b7:fd:cc:a9:83:b8:da:
                    48:fb:d1:ff:cc:05:dc:94:c3:35:77:77:e1:7c:7d:
                    67:fb:63:82:96:cb:67:b0:9d:df:28:36:ef:80:94:
                    85:48:77:86:17:4e:52:b9:15:81:6b:03:4e:89:5a:
                    55:cb:7a:70:cd:86:53:62:ba:9c:cf:b5:2b:52:f2:
                    0f:dd:99:64:1f:d8:3e:fd:23:36:8f:78:e4:c5:17:
                    98:c8:5e:a5:a6:f3:4a:f2:da:e2:85:c0:7f:e3:8c:
                    20:c1:25:93:ee:30:48:43:92:3e:b7:9c:78:8d:92:
                    42:40:3c:f5:bb:f3:e9:82:8e:3e:7d:a2:73:27:c3:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6A:A1:1F:3C:E9:C8:DC:31:8F:43:CA:10:3B:40:66:74:6A:DF:03
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3133302e302f32332d3233203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:36:3b:e4:51:86:ed:85:87:12:ec:be:29:75:14:c3:c0:0c:
         9e:42:d2:58:8b:7c:30:26:71:a7:48:16:74:5f:cb:07:cd:83:
         08:f8:63:b5:31:94:15:76:0d:fb:2c:b1:9e:9f:b3:56:fe:f1:
         88:c9:d2:cf:56:97:c2:6e:8b:5f:a1:eb:ab:ea:ce:68:2e:11:
         ad:af:2c:63:12:2b:7e:a3:b5:46:15:a2:6d:93:61:35:6d:1b:
         1d:6e:e3:1a:3d:36:36:25:2c:d8:34:d5:13:68:fe:71:58:f8:
         37:b2:1c:59:79:8c:b0:a0:7d:b4:42:7c:f3:31:6b:08:3e:b8:
         b2:a1:14:ec:25:e8:dc:75:00:13:08:ee:4e:5c:7f:f8:35:4e:
         af:fb:ac:f6:50:01:51:2a:15:51:7c:95:70:ae:e3:b5:5e:ff:
         31:15:33:96:0c:56:42:cc:06:ec:1d:2a:e5:f8:71:25:ad:e3:
         a8:f3:b7:cd:72:18:49:3d:3d:0c:ff:5a:28:3f:72:45:08:92:
         d5:7e:83:66:21:d9:5a:3f:9e:ce:25:8d:71:71:c4:5c:24:5d:
         a2:64:25:e5:43:65:4a:a7:34:5b:09:ec:f3:d8:1a:dc:63:26:
         37:8a:2f:a2:0b:b5:97:92:44:9d:4c:ab:84:f9:0f:1c:a6:35:
         d1:4d:2d:c5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbpW5KZak92oFrnjLn6CLgVFcFdwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcxMDcwREIzQUY5NDg5QUMwNDRBMDE4OTRGN0YzREVB
NTAxNkMxRjAeFw0yNTA1MzAyMzIwNTZaFw0yNjA1MjkyMzI1NTZaMDMxMTAvBgNV
BAMTKDZFNkFBMTFGM0NFOUM4REMzMThGNDNDQTEwM0I0MDY2NzQ2QURGMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtet8qgUogdxBRyfGO6kPS6Q09
6o15x7Fv7Fxq3SBKZjDbkljvuPtZThQ1uI3X/TB0Ltljs7/YQ5HsDMQrDn1cz3Sr
KulmpMT3oHx1Du+CgbBTXUsLoNpwXSvYMX1xZTn6wa4xjqBvlE/hat1ORH5wgHBN
m0olK8EiaRIgHoyIt/3MqYO42kj70f/MBdyUwzV3d+F8fWf7Y4KWy2ewnd8oNu+A
lIVId4YXTlK5FYFrA06JWlXLenDNhlNiupzPtStS8g/dmWQf2D79IzaPeOTFF5jI
XqWm80ry2uKFwH/jjCDBJZPuMEhDkj63nHiNkkJAPPW78+mCjj59onMnw7jtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbmqhHzzpyNwxj0PKEDtAZnRq3wMwHwYDVR0j
BBgwFoAUNxBw2zr5SJrARKAYlPfz3qUBbB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZ6aTNEbll3aG8yOFZEbUtqUmFVWDUzZG1ldEs2eVB3ZFZ4REVVWDlO
TG8vMS8zNzEwNzBEQjNBRjk0ODlBQzA0NEEwMTg5NEY3RjNERUE1MDE2QzFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3MTA3MERCM0FGOTQ4OUFD
MDQ0QTAxODk0RjdGM0RFQTUwMTZDMUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmemkzRG5Zd2hvMjhWRG1LalJhVVg1M2RtZXRLNnlQd2RWeERFVVg5TkxvLzEv
MzQzNTJlMzczMTJlMzEzMzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzYzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLUeCMA0GCSqGSIb3DQEBCwUAA4IBAQAmNjvkUYbt
hYcS7L4pdRTDwAyeQtJYi3wwJnGnSBZ0X8sHzYMI+GO1MZQVdg37LLGen7NW/vGI
ydLPVpfCbotfoeur6s5oLhGtryxjEit+o7VGFaJtk2E1bRsdbuMaPTY2JSzYNNUT
aP5xWPg3shxZeYywoH20QnzzMWsIPriyoRTsJejcdQATCO5OXH/4NU6v+6z2UAFR
KhVRfJVwruO1Xv8xFTOWDFZCzAbsHSrl+HElreOo87fNchhJPT0M/1ooP3JFCJLV
foNmIdlaP57OJY1xccRcJF2iZCXlQ2VKpzRbCezz2BrcYyY3ii+iC7WXkkSdTKuE
+Q8cpjXRTS3F
-----END CERTIFICATE-----
Generated at Sat Jun 21 07:41:51 2025 by rpki-client