Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3132382e302f32322d3332203d3e20323639343636.roa
File:                     34352e3138372e3132382e302f32322d3332203d3e20323639343636.roa (raw, json)
Hash identifier:          6j6AKESoEVYm8WH+n5ZxuQNeycQoElrC2bKt7V8SDqA=
Subject key identifier:   34:76:2D:FB:0A:4C:71:4B:E1:20:66:9A:0B:86:2A:4D:96:CC:8B:65
Certificate issuer:       /CN=5B76E3AFE2960F32C3E4F7C7E44723E97E800A75
Certificate serial:       7B08DA363B3170D8B3EC45E2FF707D06153EF48D
Authority key identifier: 5B:76:E3:AF:E2:96:0F:32:C3:E4:F7:C7:E4:47:23:E9:7E:80:0A:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B76E3AFE2960F32C3E4F7C7E44723E97E800A75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3132382e302f32322d3332203d3e20323639343636.roa
Signing time:             Fri 30 May 2025 11:37:50 +0000
ROA not before:           Fri 30 May 2025 11:32:50 +0000
ROA not after:            Fri 29 May 2026 11:37:50 +0000
asID:                     269466
IP address blocks:        45.187.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/5B76E3AFE2960F32C3E4F7C7E44723E97E800A75.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/5B76E3AFE2960F32C3E4F7C7E44723E97E800A75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B76E3AFE2960F32C3E4F7C7E44723E97E800A75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 04:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:08:da:36:3b:31:70:d8:b3:ec:45:e2:ff:70:7d:06:15:3e:f4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B76E3AFE2960F32C3E4F7C7E44723E97E800A75
        Validity
            Not Before: May 30 11:32:50 2025 GMT
            Not After : May 29 11:37:50 2026 GMT
        Subject: CN=34762DFB0A4C714BE120669A0B862A4D96CC8B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:16:bf:96:92:cf:af:1a:35:4e:25:36:ca:
                    c0:be:ad:e9:9f:e0:ad:39:5c:7d:17:35:88:f9:30:
                    fc:cd:97:74:08:8e:f4:8f:3a:30:da:75:0f:6c:69:
                    2b:f8:a6:ae:f8:d4:b2:e1:09:32:6e:f0:c4:f0:7a:
                    a7:51:5e:b9:ec:fd:a5:e6:de:94:cc:d8:ad:87:34:
                    97:30:f6:5b:0e:9b:f6:50:d9:8d:93:f2:eb:82:6f:
                    ff:42:cf:6b:9a:84:22:3a:84:f1:f2:bd:d2:92:c1:
                    73:85:cd:2e:8a:cc:9e:c2:a7:51:1f:29:e9:9f:3b:
                    fe:bf:67:33:59:1d:44:2c:dc:a8:99:57:aa:69:da:
                    64:1f:f8:b3:5b:b3:3e:ba:c9:24:dd:78:0b:5d:d6:
                    aa:30:12:b8:a6:20:14:8e:a7:32:13:5f:49:01:41:
                    48:a2:ef:e7:e1:b5:93:6e:88:4e:4b:ac:ae:64:32:
                    7d:6a:be:5a:d9:f6:28:91:5a:8c:c0:b3:2f:1a:5c:
                    7e:7e:4b:20:b0:62:89:dd:00:cb:69:18:87:69:b6:
                    6e:6f:d7:3e:18:c5:b1:bf:35:2d:3a:4f:a4:59:32:
                    4b:1b:74:88:08:5c:1f:a7:08:3e:20:b3:27:74:64:
                    be:1d:4e:c1:1e:04:36:bf:d9:d6:dd:5a:f2:00:e4:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:76:2D:FB:0A:4C:71:4B:E1:20:66:9A:0B:86:2A:4D:96:CC:8B:65
            X509v3 Authority Key Identifier:
                keyid:5B:76:E3:AF:E2:96:0F:32:C3:E4:F7:C7:E4:47:23:E9:7E:80:0A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/5B76E3AFE2960F32C3E4F7C7E44723E97E800A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B76E3AFE2960F32C3E4F7C7E44723E97E800A75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3132382e302f32322d3332203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:52:31:c8:df:79:b7:88:e7:68:35:db:7a:06:6d:cd:b7:88:
         b6:1e:fb:6e:f3:05:ca:eb:a0:c5:89:5c:ed:16:dd:9b:e4:ca:
         4a:59:74:ca:bf:74:3a:3d:40:df:4a:1f:c1:97:f1:c6:80:a4:
         11:df:19:47:ca:a5:01:0f:4f:0f:cb:3f:64:da:6b:8e:8f:ac:
         8d:41:c1:11:94:c9:78:f9:8e:68:bc:b1:89:e7:c3:f0:50:11:
         92:be:70:5b:83:dc:e5:de:59:e4:97:03:0d:fe:ec:d8:a8:9a:
         ea:ef:55:d2:cb:da:24:75:46:4f:9e:dc:f6:39:c2:cb:78:1d:
         4d:9b:04:f5:8b:0d:d6:6c:3c:88:f5:51:8a:b4:63:5a:e0:05:
         f2:13:9d:e8:cf:b5:37:a9:ff:35:cf:47:b3:c2:a0:62:4d:16:
         f8:1f:8b:cd:75:bd:af:37:3b:99:bd:39:a5:ef:a6:70:28:ac:
         a1:c8:75:77:a6:19:10:da:a7:14:2c:30:f7:43:39:0b:c3:3c:
         ff:b6:35:17:bf:df:20:76:76:f4:86:6e:78:9f:0b:80:28:80:
         1c:c2:8b:8a:2b:fd:a8:28:6f:8a:d2:b0:85:97:34:d5:9b:a5:
         85:02:fc:76:1d:da:fe:df:4c:8f:58:61:ea:89:46:0d:10:bb:
         8c:4a:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:17:18 2025 by rpki-client