Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e33302e302f32342d3234203d3e20323637313435.roa
File:                     34352e3233302e33302e302f32342d3234203d3e20323637313435.roa (raw, json)
Hash identifier:          HtF4NuFnVBsi6nCSys4LOtR3ffP/O1dMnNM3cO2FUxs=
Subject key identifier:   BE:7F:A2:BE:C7:58:E9:04:58:35:31:A8:66:DF:F0:BA:8F:F9:40:81
Certificate issuer:       /CN=3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED
Certificate serial:       5A0156B92FADC20C19210FF0A0E706E81E059B3C
Authority key identifier: 3A:CA:CB:0D:E5:9E:3F:7F:5D:3F:B4:9A:B3:DF:C4:C9:80:8D:CA:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e33302e302f32342d3234203d3e20323637313435.roa
Signing time:             Mon 23 Jun 2025 18:28:44 +0000
ROA not before:           Mon 23 Jun 2025 18:23:44 +0000
ROA not after:            Mon 22 Jun 2026 18:28:44 +0000
asID:                     267145
IP address blocks:        45.230.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 06:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:01:56:b9:2f:ad:c2:0c:19:21:0f:f0:a0:e7:06:e8:1e:05:9b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED
        Validity
            Not Before: Jun 23 18:23:44 2025 GMT
            Not After : Jun 22 18:28:44 2026 GMT
        Subject: CN=BE7FA2BEC758E904583531A866DFF0BA8FF94081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:82:59:6c:c7:67:7d:94:b1:30:e0:f5:74:
                    85:78:66:bd:bb:a2:75:f1:cf:2d:0f:3c:92:ee:dd:
                    38:77:84:c0:8f:75:8a:6d:b6:0a:07:e0:3c:59:dd:
                    8b:3c:99:85:7b:17:46:81:1d:83:05:1a:fd:35:71:
                    ed:51:5f:85:e2:3a:df:d0:3b:c5:26:62:4b:64:6a:
                    a0:f9:34:7b:6f:6c:96:53:19:eb:62:f3:8c:f1:c4:
                    3b:15:f9:51:73:4c:9c:df:80:43:45:f3:ec:59:3e:
                    1d:6c:93:92:d3:9b:ff:ac:95:3b:9c:0b:9b:82:9e:
                    f1:ed:ed:c6:5d:e8:e4:33:b2:11:dd:16:7a:fb:d6:
                    3e:37:a5:de:bb:3b:c1:43:0c:6c:62:bf:19:6d:b5:
                    04:9e:ee:6d:d3:b9:05:02:43:27:93:9b:5d:12:45:
                    81:f2:4f:57:3c:3d:c0:ba:fe:4e:4b:78:e7:7a:92:
                    85:6b:3f:0a:23:b2:f7:ee:43:a1:c8:5f:ba:fc:f2:
                    be:a6:4c:50:5e:0d:f9:98:ef:a2:99:fe:fc:84:1c:
                    4a:5c:52:8d:b0:f0:1b:56:d1:d0:eb:53:6e:ff:ee:
                    6c:8b:3b:db:65:06:16:c8:80:c1:99:a1:d5:3e:21:
                    59:d5:16:90:96:28:56:40:6d:10:76:f3:13:2a:d1:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7F:A2:BE:C7:58:E9:04:58:35:31:A8:66:DF:F0:BA:8F:F9:40:81
            X509v3 Authority Key Identifier:
                keyid:3A:CA:CB:0D:E5:9E:3F:7F:5D:3F:B4:9A:B3:DF:C4:C9:80:8D:CA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e33302e302f32342d3234203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:a4:dd:68:3a:68:ed:83:bc:45:61:67:41:28:9e:4f:63:36:
         09:c0:9c:a8:5c:0a:b7:2f:5e:e3:51:f0:4b:64:f9:01:4c:89:
         3a:3c:3f:18:8c:7f:fb:4d:a0:f3:a5:fa:da:c8:af:3d:e3:c2:
         85:60:cd:20:36:0b:e9:07:ce:67:f6:0b:84:f2:7e:ab:92:fa:
         ca:46:87:14:e2:b7:9d:d1:2c:9f:7d:f5:b7:e6:b9:c2:18:38:
         fe:b7:db:9d:39:e5:55:01:b7:58:51:e2:f1:3e:d1:39:c7:e3:
         e2:a0:c1:e4:8d:aa:fa:6d:20:16:8d:15:26:5f:08:99:9f:be:
         9f:69:3e:91:01:4f:08:66:f6:0f:b7:e0:77:e5:19:34:de:64:
         bf:07:ef:ef:7d:f9:ab:b8:19:a5:df:c1:1a:ff:56:19:a9:c2:
         a4:7d:c7:d5:8b:d4:81:7f:72:4a:1a:16:c6:b6:12:f6:f5:6a:
         f3:58:18:c1:4b:d8:9f:3b:eb:26:e3:5e:fe:58:c4:e0:f8:be:
         7a:35:06:00:dc:d4:92:d1:64:98:b2:92:28:1f:b9:25:6a:24:
         82:0e:96:db:e1:3b:5d:aa:b9:69:af:28:3b:fd:ec:a8:56:05:
         5b:37:3e:f4:5b:03:6c:4d:7b:ea:bc:49:12:53:a3:d2:68:4a:
         3e:17:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:34:19 2025 by rpki-client