Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
File:                     34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          ZfM83HfKeKzzsIlJvLRkpTey+TNllfkHWy25NrM+coc=
Subject key identifier:   42:8D:97:70:EA:70:5D:7A:A1:CC:48:3D:45:D9:84:BF:D5:EF:24:E5
Certificate issuer:       /CN=67A81E20D9B7972AADDB1C394778320F56BE023B
Certificate serial:       65619293B203F66AC26999DC1E712D54FA7B7BAE
Authority key identifier: 67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
Signing time:             Mon 26 May 2025 13:53:53 +0000
ROA not before:           Mon 26 May 2025 13:48:53 +0000
ROA not after:            Mon 25 May 2026 13:53:53 +0000
asID:                     53107
IP address blocks:        45.171.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl
                          rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 16:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:61:92:93:b2:03:f6:6a:c2:69:99:dc:1e:71:2d:54:fa:7b:7b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67A81E20D9B7972AADDB1C394778320F56BE023B
        Validity
            Not Before: May 26 13:48:53 2025 GMT
            Not After : May 25 13:53:53 2026 GMT
        Subject: CN=428D9770EA705D7AA1CC483D45D984BFD5EF24E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:39:f5:29:ad:f2:a0:e2:47:fe:3e:bf:21:
                    28:8a:87:e1:56:e6:84:7c:75:ad:89:5e:02:3f:76:
                    7f:49:8d:61:21:35:ac:f3:c1:0a:09:c3:22:c2:a6:
                    ee:3c:04:e6:e7:91:91:ee:d8:db:da:24:1c:e3:38:
                    4d:83:c0:f1:c0:80:de:25:5e:8e:e6:3f:fc:98:ed:
                    f9:69:78:9f:cc:33:e8:8c:60:e4:c7:03:4f:b5:77:
                    f7:3a:a4:ea:d4:fe:03:22:89:80:ad:5b:4b:09:5f:
                    a2:a7:8a:d5:6c:81:0a:8a:f5:77:f8:96:fc:4a:09:
                    12:1b:96:ec:15:86:f7:9c:bf:b6:f9:b6:2f:1c:11:
                    50:43:58:19:d6:e7:2e:ab:41:20:95:56:f7:40:84:
                    35:04:b5:a2:93:65:f5:48:ba:c7:39:67:ca:98:64:
                    b6:47:a6:a8:82:80:c5:16:7b:5c:92:d6:be:c7:ed:
                    c6:1e:e2:c1:ed:8e:58:9f:16:26:27:05:bd:6d:6e:
                    b7:39:2d:94:66:98:58:b8:8c:b5:76:b4:49:97:71:
                    af:68:be:8b:a6:85:f4:2b:a0:b6:0c:fe:9c:b3:42:
                    9e:d0:05:7f:84:e4:0e:0d:d6:15:c3:c9:c4:c6:e3:
                    c6:ae:9d:88:ae:0a:a8:e6:39:63:a7:66:49:f6:80:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8D:97:70:EA:70:5D:7A:A1:CC:48:3D:45:D9:84:BF:D5:EF:24:E5
            X509v3 Authority Key Identifier:
                keyid:67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:7b:ca:6b:df:ca:6c:7b:ec:77:5b:c5:c3:a9:24:e0:cc:ac:
         a5:a1:48:a5:e2:38:4a:42:a6:1a:19:0f:1a:ec:55:a3:1a:c8:
         29:85:7e:5a:b4:48:b3:74:37:a3:52:17:12:2b:d9:3f:7a:3b:
         19:9f:92:83:7e:7e:f0:f9:f0:f7:8d:24:0f:92:5c:7f:00:5f:
         6f:b7:58:a1:c5:8d:ea:ce:39:10:01:9a:c4:ed:45:83:a3:66:
         18:8b:bc:2d:ec:a2:e9:cd:f7:76:6a:b0:6f:2b:36:24:48:45:
         d7:01:ac:32:60:16:c7:72:80:88:7a:b3:05:e0:a3:03:fa:93:
         0a:48:67:1a:dd:37:e3:27:5b:13:5c:7a:9f:11:4a:ab:62:9e:
         85:57:f7:e1:8f:31:c9:1d:89:4d:a6:97:33:6d:12:9d:ce:09:
         4a:39:6b:72:4a:7d:03:3a:83:90:44:9a:93:5c:88:8b:a4:6c:
         54:92:52:cd:89:bf:46:a9:45:30:3b:5b:04:b8:c6:71:84:5a:
         0d:1b:c7:13:62:39:53:92:a0:fc:73:67:ff:31:66:42:e0:02:
         20:be:08:77:da:23:c4:f0:38:1a:7b:ad:86:ef:ad:31:b0:62:
         d4:eb:2f:8b:53:e5:ac:2e:01:2e:d0:32:61:9a:1d:ee:7f:2d:
         a7:40:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 03:27:17 2025 by rpki-client