Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3133302e302f32342d3234203d3e20323637363038.roa
File:                     34352e37312e3133302e302f32342d3234203d3e20323637363038.roa (raw, json)
Hash identifier:          r1lnJW+EB5CfPBugk54Iwu6hjb9HmQwL98ykHnhR3/s=
Subject key identifier:   E5:75:9E:2A:B5:1F:F2:AA:BE:A0:69:66:31:DD:7A:24:84:31:B8:ED
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       368625105E53BED09877C196D8FB5C98F113539B
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3133302e302f32342d3234203d3e20323637363038.roa
Signing time:             Fri 30 May 2025 23:27:34 +0000
ROA not before:           Fri 30 May 2025 23:22:34 +0000
ROA not after:            Fri 29 May 2026 23:27:34 +0000
asID:                     267608
IP address blocks:        45.71.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 00:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:86:25:10:5e:53:be:d0:98:77:c1:96:d8:fb:5c:98:f1:13:53:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May 30 23:22:34 2025 GMT
            Not After : May 29 23:27:34 2026 GMT
        Subject: CN=E5759E2AB51FF2AABEA0696631DD7A248431B8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f8:1a:43:e1:37:8e:ea:e3:d9:36:8b:f1:5b:
                    52:c3:96:5b:0a:5f:73:21:25:af:78:6b:66:8e:16:
                    0b:91:67:32:5f:b9:8e:06:3e:b9:5d:ff:48:e3:b9:
                    a5:da:ed:e6:ee:ec:5c:3d:e3:e9:7a:d0:b4:30:b8:
                    d8:f0:33:a5:c9:bb:53:52:b4:96:22:10:4a:26:1d:
                    ac:e8:d4:eb:a4:16:7f:c4:36:9a:9c:ec:e7:38:63:
                    88:c8:76:42:ef:33:1e:f1:4a:76:75:9a:21:d5:36:
                    34:b4:cb:91:9e:8d:c3:ca:01:2f:90:32:77:6d:0c:
                    91:1f:df:bb:fd:f1:23:8d:a5:f3:ce:65:0e:79:7e:
                    d9:1f:3f:66:68:d6:48:06:8a:38:c2:3e:86:7c:af:
                    04:18:53:1f:81:94:4c:0a:84:13:fb:f5:59:af:e5:
                    ab:12:81:01:d7:a3:d6:3c:6f:0a:6a:f3:03:ba:ec:
                    5e:13:3d:04:3a:9f:87:9f:0d:36:3a:1f:00:55:ec:
                    91:f5:38:00:18:3c:23:3a:4f:c6:8d:57:36:0c:02:
                    cb:23:e2:8c:1f:9c:4e:8b:c2:8e:bc:92:2b:12:a7:
                    f8:0d:d1:9f:7e:b0:e5:04:3b:0e:f1:8a:d3:41:76:
                    a2:c7:c2:3c:27:e6:d7:02:3e:28:6c:bb:a3:f9:a6:
                    bf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:75:9E:2A:B5:1F:F2:AA:BE:A0:69:66:31:DD:7A:24:84:31:B8:ED
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3133302e302f32342d3234203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:06:fc:90:73:0b:dc:17:33:65:97:39:9c:83:e2:68:1f:c2:
         6a:67:94:49:4a:53:e2:ac:da:2a:79:a3:08:49:1b:bb:90:4e:
         93:f0:39:99:bf:64:a8:97:6b:1a:4e:40:87:db:b7:7c:fa:17:
         2d:c3:38:fc:b4:d2:d3:be:5d:49:81:fc:4d:8e:96:a9:18:a4:
         5a:e0:be:04:a9:04:3a:ab:a6:15:61:83:b3:60:f2:ee:39:e5:
         79:23:36:a8:a6:0f:86:5e:ab:52:08:aa:2d:46:e7:1b:33:25:
         d6:07:41:5f:b4:1e:04:44:44:9c:e9:28:39:bf:9b:27:e7:8d:
         e4:a4:e9:ed:e0:75:18:f6:ac:7d:42:9c:45:52:71:be:7c:00:
         77:ce:3d:1b:d2:7a:3f:8b:ff:d4:0a:db:23:40:10:52:59:d0:
         e0:e0:ae:49:a3:dc:32:36:7d:5f:ab:4b:2a:33:70:04:e5:ea:
         55:6e:ad:bc:ea:72:c4:a6:af:cd:a3:62:71:d3:77:79:e5:a5:
         69:aa:c5:5a:dd:ed:05:d7:31:5a:ba:cf:2f:a7:63:bb:76:e1:
         39:39:b9:9b:7a:6b:f5:70:89:7a:a1:8c:ec:a1:81:ed:3f:54:
         50:e3:04:3b:1d:8e:e6:88:a0:97:25:d0:65:e6:29:6e:21:f1:
         52:5e:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:02:20 2025 by rpki-client