Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/34352e342e3132302e302f32322d3332203d3e20323636303731.roa
File:                     34352e342e3132302e302f32322d3332203d3e20323636303731.roa (raw, json)
Hash identifier:          Y4rlqM2UsFSr2ohMXETXTbaPUxNid9uarpbjzj3aa1g=
Subject key identifier:   C0:7D:52:EC:F1:FF:84:C2:10:77:BB:5D:A2:5B:00:6A:4F:46:A7:A2
Certificate issuer:       /CN=5704C8A4F0A08E97025D71F1C624C9280EDADDD4
Certificate serial:       5A6AA69C1552FDBD96F4CE56146CB7D8D22D5A10
Authority key identifier: 57:04:C8:A4:F0:A0:8E:97:02:5D:71:F1:C6:24:C9:28:0E:DA:DD:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/34352e342e3132302e302f32322d3332203d3e20323636303731.roa
Signing time:             Fri 04 Jul 2025 02:25:33 +0000
ROA not before:           Fri 04 Jul 2025 02:20:33 +0000
ROA not after:            Fri 03 Jul 2026 02:25:33 +0000
asID:                     266071
IP address blocks:        45.4.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.crl
                          rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 13:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6a:a6:9c:15:52:fd:bd:96:f4:ce:56:14:6c:b7:d8:d2:2d:5a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5704C8A4F0A08E97025D71F1C624C9280EDADDD4
        Validity
            Not Before: Jul  4 02:20:33 2025 GMT
            Not After : Jul  3 02:25:33 2026 GMT
        Subject: CN=C07D52ECF1FF84C21077BB5DA25B006A4F46A7A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:b3:54:74:6e:cb:e0:81:ab:63:41:46:b6:
                    58:b9:84:b4:20:71:d0:06:dc:ed:d3:8c:8f:d4:31:
                    a0:4b:06:89:74:44:6f:5f:e6:a0:df:ab:8f:29:cb:
                    99:45:5e:de:be:e5:7a:70:fa:4a:f4:f4:13:20:d9:
                    11:05:56:ef:23:c5:ec:1f:ed:52:c3:4e:d8:f6:3e:
                    b3:1b:14:35:87:e4:73:e7:70:24:22:aa:67:b9:33:
                    f0:cd:f0:17:f0:32:37:46:35:2e:e0:f3:7e:28:a0:
                    1a:a6:6a:92:70:e3:9e:1a:c9:15:e8:34:47:0f:cb:
                    1e:9b:f5:ef:8c:78:86:7e:2f:9d:aa:98:2d:30:d3:
                    f8:4c:37:1d:86:c6:fa:32:9e:f6:3a:ea:2f:95:fb:
                    5b:c8:1a:6b:b1:38:37:be:37:c9:ff:72:f4:fe:f0:
                    29:6f:64:5c:c0:e0:af:8c:14:af:1e:85:91:71:77:
                    9e:de:e4:79:d4:1b:a2:93:5c:20:a4:ec:74:a2:8e:
                    71:37:14:cb:b8:0e:21:60:f2:32:51:65:2f:03:93:
                    5d:94:f3:11:0d:73:25:17:f6:df:c3:23:4b:3f:d3:
                    72:b2:e2:dc:36:65:5b:2c:6b:41:84:36:d2:ec:1a:
                    94:87:c9:e8:80:9b:83:3d:5e:59:93:60:7f:d2:82:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7D:52:EC:F1:FF:84:C2:10:77:BB:5D:A2:5B:00:6A:4F:46:A7:A2
            X509v3 Authority Key Identifier:
                keyid:57:04:C8:A4:F0:A0:8E:97:02:5D:71:F1:C6:24:C9:28:0E:DA:DD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/34352e342e3132302e302f32322d3332203d3e20323636303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:66:db:ba:47:7c:6c:ec:35:ac:7d:6a:1b:f6:2a:8a:9e:6f:
         11:93:eb:02:7f:46:ba:83:8f:93:92:1f:77:1b:33:84:80:7b:
         54:92:43:f9:5e:67:2d:6f:8f:aa:32:7f:ef:1a:76:39:05:4c:
         ef:11:a5:50:23:51:a4:10:2b:17:47:2d:a9:2c:69:3e:8d:17:
         d8:0d:bc:c7:a6:20:c3:b8:bd:f8:3c:34:8f:8e:9d:b3:df:a2:
         37:f9:fa:42:95:3e:64:cb:71:77:57:55:e5:65:78:92:8b:57:
         b8:b3:88:45:be:98:c1:59:3d:ed:23:77:94:79:64:8c:a6:e5:
         07:72:de:31:dc:e3:0c:30:92:29:dc:ba:71:6a:47:bd:90:c3:
         58:b1:87:08:2f:7d:eb:22:40:55:04:f8:f3:27:85:74:c8:71:
         d8:34:97:8a:bd:62:a0:06:c6:d4:d6:d0:0c:9c:22:4d:c3:4e:
         c9:2c:e2:e5:9e:6a:82:2f:cf:02:18:75:89:45:20:9d:36:e0:
         b7:53:d8:2d:f2:50:18:cd:1b:d5:6d:3a:61:45:f6:8b:4a:f3:
         e1:ae:13:ca:5c:4e:c1:f0:b4:52:3b:d8:2f:5a:af:34:71:d1:
         6f:b9:59:75:0b:55:2d:c4:e1:68:5c:31:7d:47:a6:57:91:0a:
         2f:af:9c:a8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWmqmnBVS/b2W9M5WFGy32NItWhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTcwNEM4QTRGMEEwOEU5NzAyNUQ3MUYxQzYyNEM5Mjgw
RURBRERENDAeFw0yNTA3MDQwMjIwMzNaFw0yNjA3MDMwMjI1MzNaMDMxMTAvBgNV
BAMTKEMwN0Q1MkVDRjFGRjg0QzIxMDc3QkI1REEyNUIwMDZBNEY0NkE3QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLLNUdG7L4IGrY0FGtli5hLQg
cdAG3O3TjI/UMaBLBol0RG9f5qDfq48py5lFXt6+5Xpw+kr09BMg2REFVu8jxewf
7VLDTtj2PrMbFDWH5HPncCQiqme5M/DN8BfwMjdGNS7g834ooBqmapJw454ayRXo
NEcPyx6b9e+MeIZ+L52qmC0w0/hMNx2GxvoynvY66i+V+1vIGmuxODe+N8n/cvT+
8ClvZFzA4K+MFK8ehZFxd57e5HnUG6KTXCCk7HSijnE3FMu4DiFg8jJRZS8Dk12U
8xENcyUX9t/DI0s/03Ky4tw2ZVssa0GENtLsGpSHyeiAm4M9XlmTYH/SgvmjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUwH1S7PH/hMIQd7tdolsAak9Gp6IwHwYDVR0j
BBgwFoAUVwTIpPCgjpcCXXHxxiTJKA7a3dQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2ZFVjNHUngyQU5OY2lWOVJoTXhiUlM5YU5VdXBwTkdmV0htbmoycWhy
dlcvMS81NzA0QzhBNEYwQTA4RTk3MDI1RDcxRjFDNjI0QzkyODBFREFEREQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MDRDOEE0RjBBMDhFOTcw
MjVENzFGMUM2MjRDOTI4MEVEQURERDQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdmRVYzR1J4MkFOTmNpVjlSaE14YlJTOWFOVXVwcE5HZldIbW5qMnFocnZXLzEv
MzQzNTJlMzQyZTMxMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjMw
MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0EeDANBgkqhkiG9w0BAQsFAAOCAQEAJmbbukd8bOw1
rH1qG/Yqip5vEZPrAn9GuoOPk5IfdxszhIB7VJJD+V5nLW+PqjJ/7xp2OQVM7xGl
UCNRpBArF0ctqSxpPo0X2A28x6Ygw7i9+Dw0j46ds9+iN/n6QpU+ZMtxd1dV5WV4
kotXuLOIRb6YwVk97SN3lHlkjKblB3LeMdzjDDCSKdy6cWpHvZDDWLGHCC996yJA
VQT48yeFdMhx2DSXir1ioAbG1NbQDJwiTcNOySzi5Z5qgi/PAhh1iUUgnTbgt1PY
LfJQGM0b1W06YUX2i0rz4a4TylxOwfC0UjvYL1qvNHHRb7lZdQtVLcThaFwxfUem
V5EKL6+cqA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 05:41:15 2025 by rpki-client