Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230352e302f32342d3234203d3e20323636353434.roa
File:                     34352e36352e3230352e302f32342d3234203d3e20323636353434.roa (raw, json)
Hash identifier:          K/OR4CMDl8MGm0NCL5xsoeDPOZ5RPjzWr+x0ljdAQJg=
Subject key identifier:   3C:DF:89:2C:7B:79:6A:23:94:41:DA:79:E1:06:87:CB:1D:AD:90:63
Certificate issuer:       /CN=3806DB121C9269AE400CDA71100F88AF76F0469C
Certificate serial:       3E81F582A20551BFD482D687028C6B15C364C1BB
Authority key identifier: 38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230352e302f32342d3234203d3e20323636353434.roa
Signing time:             Thu 08 May 2025 19:04:24 +0000
ROA not before:           Thu 08 May 2025 18:59:24 +0000
ROA not after:            Thu 07 May 2026 19:04:24 +0000
asID:                     266544
IP address blocks:        45.65.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 00:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:81:f5:82:a2:05:51:bf:d4:82:d6:87:02:8c:6b:15:c3:64:c1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3806DB121C9269AE400CDA71100F88AF76F0469C
        Validity
            Not Before: May  8 18:59:24 2025 GMT
            Not After : May  7 19:04:24 2026 GMT
        Subject: CN=3CDF892C7B796A239441DA79E10687CB1DAD9063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:a2:d0:f8:ec:1c:87:40:28:7a:f1:3e:2f:
                    3b:75:e5:2b:58:b7:b7:fa:a5:be:8d:31:15:a9:a4:
                    9e:df:f3:28:85:26:9c:f6:90:4a:3d:3e:3d:62:0d:
                    50:13:a8:b7:a8:07:60:2b:9f:2b:dc:68:4d:c4:f2:
                    c9:d4:96:fe:4a:83:79:8a:88:f7:da:ef:bd:55:dd:
                    76:bc:bf:af:12:24:44:fc:f9:16:3a:8a:0d:21:ae:
                    0f:55:63:27:7a:61:2a:50:33:56:6e:a9:af:57:d0:
                    b4:f1:0c:d3:e8:17:62:59:67:cd:12:5e:49:ff:56:
                    15:3e:af:4a:94:cc:fe:b8:b2:01:d8:1b:ed:55:cb:
                    92:02:2d:1c:73:25:fb:16:42:cc:bd:6d:d7:43:1a:
                    95:5e:34:ac:50:f1:7a:7b:c5:e8:9d:54:df:d7:f0:
                    a1:d1:47:a9:54:62:eb:1e:16:4a:77:d3:8b:a8:7b:
                    36:97:ab:f5:40:22:a6:a4:91:8f:51:35:6e:60:43:
                    84:2f:b4:5e:df:cd:05:49:5c:d9:22:f6:6c:52:6d:
                    d1:a7:26:48:5d:ad:56:d5:92:73:d6:a1:67:eb:20:
                    f1:ac:41:65:e8:1c:cb:66:98:2a:58:c3:87:8a:74:
                    30:a7:fe:2b:72:de:60:75:75:2a:4d:29:6f:d6:59:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DF:89:2C:7B:79:6A:23:94:41:DA:79:E1:06:87:CB:1D:AD:90:63
            X509v3 Authority Key Identifier:
                keyid:38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230352e302f32342d3234203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:77:fc:bd:9b:cb:07:04:97:8b:b2:a9:ab:cb:eb:c9:af:
         62:c5:ae:29:79:84:76:11:6b:20:d1:5e:84:48:b1:c0:b7:9c:
         a7:11:1f:c4:7a:e1:ac:3e:c3:44:21:de:d8:51:db:13:50:59:
         3d:bb:be:b0:a2:be:63:99:6d:49:c4:b8:3d:50:70:db:6e:36:
         75:51:75:ef:3b:f5:05:a3:d1:ae:d0:a8:b8:32:c6:ad:2d:5a:
         14:52:06:3e:5e:9e:2d:c2:44:81:48:fe:80:62:30:a5:bf:49:
         eb:42:62:4c:b6:c0:74:41:fd:c0:4e:41:d6:24:b1:b4:b3:9f:
         cf:5e:90:65:0d:a9:e9:0a:a6:d4:b7:16:92:6e:ce:e0:82:c9:
         68:1a:79:50:f9:0e:3c:82:5c:e3:c8:a2:e5:d4:77:55:b9:14:
         20:58:8c:c1:f0:9f:6c:07:19:bd:02:fe:2f:10:6c:df:9d:b3:
         2b:02:de:f4:48:fd:0b:aa:66:4c:f9:e6:fc:61:8a:02:51:e5:
         9d:10:53:10:43:5a:91:9e:22:a0:e9:03:95:f6:6e:c5:b6:3c:
         30:94:7d:18:c2:c7:31:4c:52:a4:ce:89:db:d8:e5:19:f1:9f:
         9e:74:9b:d7:fc:55:30:82:92:9f:b2:5d:8f:9f:84:35:91:a1:
         f5:f8:87:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:14:14 2025 by rpki-client