Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/34352e3233312e3137322e302f32322d3234203d3e20323637323136.roa
File:                     34352e3233312e3137322e302f32322d3234203d3e20323637323136.roa (raw, json)
Hash identifier:          hyY2W6Ll4NzqY6UfGPEMkMjEtSDFpOv8+dqaMkLetYI=
Subject key identifier:   D8:DC:F0:1A:30:5D:EE:34:8E:80:7B:08:20:66:36:84:09:DE:5F:9A
Certificate issuer:       /CN=3FFE15782BD94F0739D4F13B603819B73D5FE247
Certificate serial:       5D3EC95E24C7EE284AED93CB5CF8D5BD897914CE
Authority key identifier: 3F:FE:15:78:2B:D9:4F:07:39:D4:F1:3B:60:38:19:B7:3D:5F:E2:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/34352e3233312e3137322e302f32322d3234203d3e20323637323136.roa
Signing time:             Fri 11 Jul 2025 16:11:56 +0000
ROA not before:           Fri 11 Jul 2025 16:06:56 +0000
ROA not after:            Fri 10 Jul 2026 16:11:56 +0000
asID:                     267216
IP address blocks:        45.231.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.crl
                          rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 01:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3e:c9:5e:24:c7:ee:28:4a:ed:93:cb:5c:f8:d5:bd:89:79:14:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FFE15782BD94F0739D4F13B603819B73D5FE247
        Validity
            Not Before: Jul 11 16:06:56 2025 GMT
            Not After : Jul 10 16:11:56 2026 GMT
        Subject: CN=D8DCF01A305DEE348E807B082066368409DE5F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:89:fe:8b:f4:bd:e4:b7:69:ad:be:46:52:
                    ec:1d:1b:18:3e:e4:22:98:81:64:25:09:3f:9d:2d:
                    1a:72:f8:5c:47:4b:fb:d7:71:9c:ac:f6:dd:81:dc:
                    79:50:4c:01:c9:f1:27:44:0b:17:86:68:f1:ee:5e:
                    ae:df:c0:4e:74:2e:80:f7:c4:4e:ad:77:3e:95:47:
                    3e:b4:3a:9c:79:6b:2c:d8:51:31:19:a3:54:37:27:
                    6a:0c:58:c3:14:40:e9:8a:fb:c4:51:d7:41:0d:86:
                    ed:17:77:97:34:96:25:08:7e:be:11:6d:30:eb:6d:
                    ca:cb:b1:cf:b5:aa:25:1f:78:28:e8:46:9e:42:83:
                    24:75:6f:99:73:83:1a:e6:6e:54:d1:14:fa:97:fe:
                    f0:bc:d6:55:a8:74:10:b2:6b:5e:3b:90:ec:25:bc:
                    83:b4:b3:9f:8e:91:32:f6:b2:f4:e9:be:f5:1b:3d:
                    d2:ef:52:3a:97:95:fe:3a:e4:0b:fa:25:d5:97:0b:
                    4d:12:ae:f7:17:78:a7:cf:cd:6e:1f:fc:3c:ae:40:
                    ee:bf:fa:90:9e:23:45:05:5f:4d:c0:50:3d:26:20:
                    e9:5c:32:67:77:cb:5c:c0:71:39:f7:51:6f:43:8e:
                    04:75:8f:c5:43:02:2d:11:15:d0:9f:c5:15:bc:9c:
                    22:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DC:F0:1A:30:5D:EE:34:8E:80:7B:08:20:66:36:84:09:DE:5F:9A
            X509v3 Authority Key Identifier:
                keyid:3F:FE:15:78:2B:D9:4F:07:39:D4:F1:3B:60:38:19:B7:3D:5F:E2:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/34352e3233312e3137322e302f32322d3234203d3e20323637323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:5c:da:3b:68:a4:ff:5d:5b:26:41:c7:da:49:b8:c9:e7:
         6d:a3:38:93:73:4d:e0:93:20:e5:8c:f0:72:4b:e2:07:24:31:
         61:72:ac:80:35:14:04:82:90:bb:27:69:51:b6:e9:c6:1c:88:
         ac:9a:2c:48:08:d6:ca:a3:e8:da:e2:f4:98:fb:75:2a:9f:8c:
         db:3a:ea:53:49:2c:b9:42:69:c3:fb:b4:a5:af:9e:66:a3:64:
         a2:3d:d9:bd:ba:35:28:dd:1b:59:70:93:3d:eb:fa:50:57:5a:
         df:ca:54:75:4f:98:5f:6a:4f:89:85:2a:a4:59:84:08:a4:94:
         0d:a6:a0:a5:cf:d4:c3:db:71:8f:77:7d:5a:ee:64:bf:89:99:
         57:f2:16:49:6a:3b:d3:3a:d7:2f:82:21:d8:74:b7:82:1f:2f:
         dd:70:11:08:55:a8:ae:0f:86:5a:fc:42:6f:0f:33:bd:53:61:
         be:d1:24:05:34:4c:5b:e5:d2:22:ad:5a:82:2a:a4:73:56:7d:
         e5:4f:4f:e6:9c:fd:66:72:b4:01:92:cf:2d:02:3d:7a:54:94:
         c6:85:e7:1a:a0:91:77:2c:05:b3:95:29:07:bf:ce:00:ff:88:
         d9:ca:84:5b:91:d2:b3:24:05:e5:52:00:3b:98:db:d4:2a:ef:
         f6:a9:6e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:47:35 2025 by rpki-client