Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3137392e302e302f32322d3234203d3e20323637343834.roa
File:                     34352e3137392e302e302f32322d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          0QqMAq4xhwJ3PKADTKxGuCbm6DydHLgBBeHSRPZTwRA=
Subject key identifier:   F7:ED:3E:FC:D5:97:33:15:99:D7:9B:27:8B:16:54:61:85:78:7B:E2
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       5CE6A5EE7332F15672CDDEE55583761A5B460D9F
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3137392e302e302f32322d3234203d3e20323637343834.roa
Signing time:             Tue 03 Jun 2025 13:55:13 +0000
ROA not before:           Tue 03 Jun 2025 13:50:13 +0000
ROA not after:            Tue 02 Jun 2026 13:55:13 +0000
asID:                     267484
IP address blocks:        45.179.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e6:a5:ee:73:32:f1:56:72:cd:de:e5:55:83:76:1a:5b:46:0d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jun  3 13:50:13 2025 GMT
            Not After : Jun  2 13:55:13 2026 GMT
        Subject: CN=F7ED3EFCD597331599D79B278B16546185787BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2b:bd:3e:e4:a3:c4:8a:e8:d5:e1:af:f9:b3:
                    81:d2:2b:de:9b:22:c5:22:e9:98:24:f1:ae:87:44:
                    ec:5d:22:03:76:65:dd:1a:3a:21:ed:dd:da:e5:c9:
                    94:cb:a8:77:0b:fc:95:83:b1:57:79:ea:1e:2b:41:
                    c4:08:60:87:28:37:75:9d:88:4a:ea:18:2d:d7:b1:
                    0c:97:49:d7:70:2c:1b:46:c1:fb:56:f3:ad:63:71:
                    37:38:b0:b6:9b:35:71:88:75:46:3d:4f:a1:3e:cc:
                    eb:34:cd:94:6d:77:cf:21:d4:e5:4a:f1:c8:44:e0:
                    77:76:4a:86:b8:08:8f:6b:48:b3:a7:b1:ee:a1:6b:
                    a5:6e:0c:11:07:e4:0f:cf:3d:f5:e1:b3:73:4a:7c:
                    f2:fb:d7:2e:60:e5:bd:96:63:5e:90:7a:bc:78:fb:
                    f1:28:90:fc:30:2f:12:8a:a8:c4:7d:47:61:04:72:
                    8f:35:f5:6b:c9:72:27:87:1e:e4:81:d1:52:fa:0e:
                    8b:da:e7:bc:16:0e:06:ac:6e:96:04:52:d3:3f:f7:
                    05:bc:31:65:94:47:ea:14:1e:3e:74:dc:15:c6:dc:
                    a5:9b:5c:28:22:85:f3:3d:fa:9f:cd:9d:d2:9e:0a:
                    b7:91:8e:43:50:4f:34:43:c2:ce:d1:01:d2:fd:6c:
                    b4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:ED:3E:FC:D5:97:33:15:99:D7:9B:27:8B:16:54:61:85:78:7B:E2
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3137392e302e302f32322d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:d8:fc:e3:58:44:ef:1d:89:8c:07:9e:f1:0f:45:0d:bc:93:
         11:99:7f:e4:06:e4:73:e0:31:4f:d8:03:73:6a:54:16:3b:c1:
         c9:33:9c:1f:f8:4a:5c:42:18:b3:10:08:c1:c7:ca:2b:ae:e4:
         12:00:4b:3f:55:dd:74:52:61:dd:67:67:1b:60:70:f6:e3:37:
         15:11:01:0a:90:1d:c2:4b:12:67:0b:23:2d:5f:53:e7:79:b8:
         97:03:f5:db:1f:1d:fd:39:6e:0e:2e:44:4b:ab:05:7b:27:45:
         86:b0:e2:37:ef:45:37:53:e2:ff:bc:6d:1a:64:4b:ed:e4:14:
         60:5a:d8:bc:00:28:b3:4e:2d:d0:fc:af:75:69:2f:5d:d5:8a:
         9a:6f:c4:c4:a3:98:c9:76:96:3f:d5:d9:b2:d8:d0:89:55:33:
         c0:e9:79:71:16:7b:e9:69:95:0d:7a:62:e5:2e:59:cc:f2:43:
         14:7c:0c:f6:5a:fc:7c:c1:30:52:3d:49:19:39:e0:01:f1:4f:
         12:66:0e:12:4f:15:10:53:a9:c3:28:f3:f9:b8:aa:cf:2f:64:
         2f:df:15:72:15:c7:46:23:d8:6d:bc:e9:05:af:bb:66:6d:34:
         a7:26:aa:5c:70:16:24:f0:85:fc:8d:58:54:dd:fc:1e:ee:92:
         2e:69:da:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:08:05 2025 by rpki-client