Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e33312e302f32342d3234203d3e20323637313435.roa
File:                     34352e3233302e33312e302f32342d3234203d3e20323637313435.roa (raw, json)
Hash identifier:          WM3UE/aleCwA2X4QZQpV09N15uiKdGc4NjOTrLav7mY=
Subject key identifier:   00:93:3E:03:A3:54:FE:F1:3F:9E:62:C0:CE:A0:0E:CD:DC:1B:CA:35
Certificate issuer:       /CN=3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED
Certificate serial:       29937D86A11187EEB66F735A652C39AAF171B35E
Authority key identifier: 3A:CA:CB:0D:E5:9E:3F:7F:5D:3F:B4:9A:B3:DF:C4:C9:80:8D:CA:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e33312e302f32342d3234203d3e20323637313435.roa
Signing time:             Mon 23 Jun 2025 18:28:44 +0000
ROA not before:           Mon 23 Jun 2025 18:23:44 +0000
ROA not after:            Mon 22 Jun 2026 18:28:44 +0000
asID:                     267145
IP address blocks:        45.230.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 06:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:93:7d:86:a1:11:87:ee:b6:6f:73:5a:65:2c:39:aa:f1:71:b3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED
        Validity
            Not Before: Jun 23 18:23:44 2025 GMT
            Not After : Jun 22 18:28:44 2026 GMT
        Subject: CN=00933E03A354FEF13F9E62C0CEA00ECDDC1BCA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0b:5a:45:8b:44:89:6c:89:4c:ed:ff:fb:c4:
                    ae:74:46:2b:fb:9e:c7:06:fd:87:8c:c1:2a:ab:01:
                    cc:d3:d8:2b:ad:56:46:dc:05:44:54:58:11:6f:76:
                    2b:aa:e8:5f:6e:87:b4:2b:11:15:b3:9c:28:c4:76:
                    33:ff:9c:17:64:24:9d:74:7c:02:50:a5:86:8d:41:
                    9d:c9:e7:96:f5:4f:7a:cc:3b:85:7d:6a:1c:0b:91:
                    d7:3b:f2:d6:a3:d4:ec:65:d4:1d:ca:0d:1c:b8:f6:
                    96:0b:48:33:26:92:8c:95:b3:95:3d:86:4c:76:ad:
                    e6:09:1e:45:c5:b4:68:73:5f:92:ca:c9:a5:7c:2e:
                    2c:a1:6d:8b:d8:85:98:57:31:9d:b8:f6:19:e1:83:
                    2c:b1:79:1f:f8:d9:d2:ce:67:a1:e0:d0:ed:1f:43:
                    be:ba:7a:ad:86:2a:ad:20:4d:30:5b:2b:39:47:a9:
                    47:c4:b5:7a:c9:2c:b9:81:70:db:b5:e9:34:64:ed:
                    ae:67:44:6e:0e:7b:5c:d2:f6:66:2a:57:37:f0:55:
                    a4:de:cf:41:4c:e7:bc:77:50:e6:0c:7f:59:10:c1:
                    fa:2f:7f:1c:79:09:d5:72:fe:dc:53:ea:0c:80:d7:
                    59:ef:c4:52:f0:eb:80:05:3c:9f:01:60:a5:69:b4:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:93:3E:03:A3:54:FE:F1:3F:9E:62:C0:CE:A0:0E:CD:DC:1B:CA:35
            X509v3 Authority Key Identifier:
                keyid:3A:CA:CB:0D:E5:9E:3F:7F:5D:3F:B4:9A:B3:DF:C4:C9:80:8D:CA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e33312e302f32342d3234203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:4a:f4:86:29:26:a2:cd:a1:c6:68:c5:ca:ad:fb:f4:58:0a:
         a2:17:1d:8b:42:48:84:17:71:e8:66:1b:df:cd:fa:d2:e7:9d:
         b2:b0:95:14:9e:19:ea:14:20:69:0c:f0:2b:54:84:be:e3:0f:
         09:ca:48:f1:02:6c:fb:2b:c8:e4:3c:15:d7:33:eb:c1:26:fa:
         c4:64:e2:f0:ab:54:3c:ed:07:c2:4d:e6:fd:c8:d7:d8:52:a6:
         07:ae:c1:51:b6:40:be:da:cc:a3:82:fb:94:ca:90:63:ff:98:
         6b:5a:b5:ce:ff:22:ce:db:59:9d:d4:1c:aa:0b:c0:6d:bd:07:
         74:39:0d:e8:39:4b:b7:21:b9:02:93:d5:96:70:84:0e:bb:8d:
         5d:5b:d2:79:a9:8c:7e:b3:90:f6:f8:ee:93:28:35:b5:80:11:
         c4:de:a2:c4:84:5f:2d:d2:f1:26:ba:5b:76:32:61:c9:b8:45:
         9e:d1:32:7e:5f:f2:a1:83:5c:90:da:9f:01:74:d3:61:47:43:
         c8:9f:03:ad:7e:b2:aa:ac:63:9a:8a:1f:69:66:24:53:08:07:
         ed:e0:77:eb:05:ae:e9:45:37:13:35:1f:7f:3e:4c:c1:a8:c2:
         9d:29:9e:0b:34:33:b2:09:33:d1:be:8c:8a:56:2b:37:f6:5d:
         2d:b5:56:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:30:28 2025 by rpki-client