Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32342d3234203d3e20323637363038.roa
File:                     34352e37312e3132382e302f32342d3234203d3e20323637363038.roa (raw, json)
Hash identifier:          qf/ifLxO4i/OIstnGGhG3v1/EFKyXmACRVL6r47Afoc=
Subject key identifier:   44:04:A1:B9:D5:69:D1:7A:65:BA:9C:89:43:3E:FC:6C:4D:11:EF:E8
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       303FB095126F522A389FD231010E0E7E952BB676
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32342d3234203d3e20323637363038.roa
Signing time:             Fri 30 May 2025 23:26:31 +0000
ROA not before:           Fri 30 May 2025 23:21:31 +0000
ROA not after:            Fri 29 May 2026 23:26:31 +0000
asID:                     267608
IP address blocks:        45.71.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 16:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3f:b0:95:12:6f:52:2a:38:9f:d2:31:01:0e:0e:7e:95:2b:b6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May 30 23:21:31 2025 GMT
            Not After : May 29 23:26:31 2026 GMT
        Subject: CN=4404A1B9D569D17A65BA9C89433EFC6C4D11EFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7b:8e:f8:df:6f:7e:93:cf:c9:95:a0:b9:2d:
                    7f:c3:51:d5:f1:b5:28:32:65:46:d7:8f:91:59:37:
                    d6:0b:8c:ea:16:67:38:ba:d3:27:fe:47:97:6d:21:
                    a1:e4:40:fc:64:32:85:53:ed:27:26:f3:11:8a:80:
                    72:5a:a6:26:7e:fe:8b:40:a9:f5:13:c0:3f:6a:b1:
                    ae:4b:3a:e1:cc:c5:47:c4:aa:e7:ef:27:9f:c9:eb:
                    8b:52:16:bf:c0:b4:7c:27:53:d9:32:d7:6a:35:3c:
                    d9:54:39:a2:f7:5e:0b:29:3d:a1:f4:94:d5:f7:11:
                    e6:ec:57:4f:33:0c:aa:83:18:78:ea:17:cc:e0:4e:
                    9d:2a:b4:85:71:97:82:84:37:c8:01:44:8e:33:ed:
                    25:b0:dd:0a:5e:67:f3:f2:f5:ea:8a:80:dd:ab:d7:
                    c0:68:3d:4b:b4:e9:c3:1f:bf:43:91:80:48:5f:0d:
                    ae:eb:eb:de:75:04:3e:d3:c7:5d:e7:ee:fb:48:68:
                    d6:ae:e2:7c:c4:d9:f5:6f:da:6e:20:46:42:a8:51:
                    80:2b:34:96:06:21:be:bd:85:12:95:47:39:51:15:
                    eb:b6:d0:19:3e:1d:ce:74:1c:4d:8a:8a:ef:ca:0a:
                    d1:7d:d6:38:a5:de:4b:8b:9c:71:80:79:d7:68:da:
                    ed:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:A1:B9:D5:69:D1:7A:65:BA:9C:89:43:3E:FC:6C:4D:11:EF:E8
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32342d3234203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:ac:11:2d:ca:dd:67:d3:76:19:62:98:8b:dd:6a:9a:88:
         60:a2:d3:16:3b:73:1b:c8:0a:52:6b:74:7f:07:1c:06:87:dc:
         86:2d:d5:cb:1b:9f:74:d9:33:2b:79:bc:3b:40:c7:77:10:7c:
         9d:b9:df:c4:77:b1:ac:11:c8:11:f5:cc:57:49:bd:a8:c8:19:
         83:e8:e7:1a:d1:de:ff:89:ad:5e:98:80:c5:85:ed:72:ad:0b:
         20:68:92:9d:93:db:02:54:a8:82:14:32:51:18:5e:83:54:82:
         26:06:f2:87:4e:fa:4d:04:cb:c6:89:39:6c:42:e0:14:e3:b3:
         74:2c:99:ac:c7:ee:69:6f:83:54:87:ac:41:7c:d4:b3:73:ad:
         30:3e:cf:16:41:4d:f7:f0:50:fc:59:69:f3:78:76:32:00:0b:
         78:26:e8:a6:a1:46:f3:9b:e2:dc:96:97:04:13:5c:e9:76:73:
         50:99:e8:15:9f:d8:99:10:ee:03:53:76:6e:a1:da:45:59:7c:
         a0:3c:33:61:d7:1e:a1:df:f4:74:46:b0:0d:00:2c:f5:d4:53:
         cf:db:95:e6:cb:da:a1:ad:63:f5:21:62:57:54:60:80:66:4e:
         72:70:ed:78:42:85:b2:f6:4e:5d:10:bf:f0:b7:3a:3c:7e:bd:
         fd:6c:9f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:54:05 2025 by rpki-client