Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/34352e3232372e37322e302f32332d3233203d3e20323637303331.roa
File:                     34352e3232372e37322e302f32332d3233203d3e20323637303331.roa (raw, json)
Hash identifier:          x8mo8V6F/S3U1iId5scZalJatBMt2LCJ4d2LSmLNYq4=
Subject key identifier:   10:C4:07:89:80:62:66:CA:CB:D6:7A:CD:59:C2:B7:29:9C:2A:22:70
Certificate issuer:       /CN=4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0
Certificate serial:       2A689AC68D62BD5C86AD1F7102053645816E6FD8
Authority key identifier: 4A:A9:5A:E7:3A:B9:5B:D0:3B:1B:2A:AF:88:00:57:D0:8E:C2:3A:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/34352e3232372e37322e302f32332d3233203d3e20323637303331.roa
Signing time:             Tue 17 Jun 2025 20:35:22 +0000
ROA not before:           Tue 17 Jun 2025 20:30:22 +0000
ROA not after:            Tue 16 Jun 2026 20:35:22 +0000
asID:                     267031
IP address blocks:        45.227.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.crl
                          rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 07:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:68:9a:c6:8d:62:bd:5c:86:ad:1f:71:02:05:36:45:81:6e:6f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0
        Validity
            Not Before: Jun 17 20:30:22 2025 GMT
            Not After : Jun 16 20:35:22 2026 GMT
        Subject: CN=10C40789806266CACBD67ACD59C2B7299C2A2270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:07:ba:29:f3:c8:8a:b0:e3:fd:4d:1e:86:
                    92:d1:0a:c9:38:76:0c:41:5f:36:28:89:d3:9f:04:
                    75:f7:1b:7d:75:28:ae:3c:62:57:c9:1a:89:a3:a6:
                    8d:a2:c9:bc:0d:4e:a5:34:d9:29:9b:b0:4d:ce:72:
                    6c:0f:10:df:ca:90:9e:8b:35:cb:52:8d:90:32:6c:
                    95:60:4a:a9:a8:72:ed:86:30:8f:38:fa:e9:02:bb:
                    82:26:c8:1b:76:97:2f:5e:7f:0b:49:89:8e:61:23:
                    9f:88:d2:82:18:52:7a:7a:ee:d6:2c:d1:0d:b8:45:
                    24:5e:b0:4f:e0:8d:8e:49:7b:4a:f5:7c:84:58:46:
                    9b:73:36:83:88:cc:f8:e9:e2:a3:ce:12:dd:4a:9e:
                    95:7d:b1:4f:6b:c1:31:36:e0:b6:6a:80:b4:52:38:
                    77:e6:86:08:cd:d7:89:78:e2:92:24:b7:34:5d:ba:
                    53:0a:b1:28:ab:4e:5b:f2:80:05:43:2d:fa:4a:3e:
                    53:99:ee:b9:aa:c6:99:f3:cf:79:f0:96:bb:9c:62:
                    6a:57:4e:8b:6e:4a:39:1f:3a:3a:9a:c5:45:44:79:
                    cb:9a:47:ed:aa:31:ff:9d:bf:17:6b:84:0d:06:02:
                    40:8d:28:e3:d8:da:2d:e0:1d:6c:41:2e:82:f8:c1:
                    fc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C4:07:89:80:62:66:CA:CB:D6:7A:CD:59:C2:B7:29:9C:2A:22:70
            X509v3 Authority Key Identifier:
                keyid:4A:A9:5A:E7:3A:B9:5B:D0:3B:1B:2A:AF:88:00:57:D0:8E:C2:3A:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/34352e3232372e37322e302f32332d3233203d3e20323637303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:fb:3c:dc:a9:d1:42:ab:c3:de:a6:e3:53:6b:30:73:31:83:
         b4:eb:81:b0:a6:7e:5b:68:bb:4f:9b:39:dc:10:32:7c:3e:af:
         a5:9f:8b:ce:ce:f1:64:21:45:18:fe:02:3e:a1:ea:0f:e0:9d:
         07:25:db:24:7c:58:dc:f6:7d:29:79:94:df:8f:f7:60:a9:23:
         df:3b:4d:41:1a:0e:16:77:66:59:e2:b0:03:d5:6b:8d:62:b4:
         70:82:cd:21:4a:6e:55:06:c6:28:87:5a:13:62:cf:41:01:13:
         d9:59:a4:0a:fb:3f:d5:88:ca:13:ce:87:ac:ec:bd:6b:39:1f:
         24:28:99:81:60:47:73:94:97:99:66:ec:ed:45:62:22:53:56:
         53:90:11:d3:85:9b:4a:c2:e1:b8:94:98:9a:e1:be:24:4b:d0:
         a2:2c:1e:8e:90:5c:52:30:02:28:f1:3c:9c:53:fa:c4:19:7a:
         d3:e3:32:70:0c:8a:ab:30:27:c9:89:68:00:d7:9d:4f:2d:33:
         31:68:79:d5:75:81:ea:be:99:ce:b1:df:d0:6f:7c:8b:11:b7:
         e4:3f:55:fa:39:67:75:2d:04:a2:b9:f9:7f:10:3d:e9:7a:9e:
         be:1d:b2:16:80:66:80:b3:99:0a:fc:4a:f3:3d:61:1f:a2:51:
         88:b4:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:26:33 2025 by rpki-client