Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132342e302f32322d3332203d3e20323638373131.roa
File:                     34352e3137312e3132342e302f32322d3332203d3e20323638373131.roa (raw, json)
Hash identifier:          slv1WZYR+dAJxuvTG50zbmC87K+bKXZoVi2gjdh960M=
Subject key identifier:   35:C6:5B:B2:F2:FC:85:71:96:61:B6:A2:81:B2:D8:2B:E0:40:8C:B2
Certificate issuer:       /CN=C4A6466D9315F022152B2A75EF0E4E3680F9593C
Certificate serial:       0C3A89290FC94BF5BB4AE8519A3EFE3CCF82C4B8
Authority key identifier: C4:A6:46:6D:93:15:F0:22:15:2B:2A:75:EF:0E:4E:36:80:F9:59:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132342e302f32322d3332203d3e20323638373131.roa
Signing time:             Tue 27 May 2025 13:31:40 +0000
ROA not before:           Tue 27 May 2025 13:26:40 +0000
ROA not after:            Tue 26 May 2026 13:31:40 +0000
asID:                     268711
IP address blocks:        45.171.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.crl
                          rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 00:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3a:89:29:0f:c9:4b:f5:bb:4a:e8:51:9a:3e:fe:3c:cf:82:c4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4A6466D9315F022152B2A75EF0E4E3680F9593C
        Validity
            Not Before: May 27 13:26:40 2025 GMT
            Not After : May 26 13:31:40 2026 GMT
        Subject: CN=35C65BB2F2FC85719661B6A281B2D82BE0408CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:83:f6:cf:2c:8c:84:ab:1c:4c:ec:c5:65:
                    4a:0e:b0:f2:9b:3a:b3:bc:62:2d:aa:9d:ff:1b:c2:
                    37:1b:6e:85:53:1b:53:ad:cf:38:55:3a:b2:f8:0c:
                    02:f6:c8:c5:24:30:5a:ca:07:d8:b4:92:83:79:e9:
                    fd:27:fb:8c:f1:6b:d5:4d:a4:f7:1e:43:cd:8e:0d:
                    70:bd:fa:48:e9:d2:dd:dc:fa:7e:e1:0b:95:1e:22:
                    19:c4:4b:15:fc:01:5e:1d:ee:b3:9c:30:37:a9:88:
                    2e:5b:1b:63:5d:f0:e7:5d:fc:32:30:ce:c9:69:a3:
                    da:67:98:0b:dc:43:63:e7:6d:88:4b:8f:85:e8:b2:
                    a8:9d:e4:b4:47:44:a5:2f:c4:2e:6c:51:fd:19:ac:
                    aa:6d:ea:b2:4d:bd:1d:b0:51:ad:8c:92:86:46:ef:
                    1c:bd:55:e5:90:64:00:fc:20:f8:2c:1e:43:06:5d:
                    b5:78:c4:54:83:ad:6f:4a:b8:4e:f9:a0:19:a1:b6:
                    4c:92:a9:f9:94:2e:49:44:a1:b2:35:0a:ba:e8:e3:
                    bd:be:ef:d5:e9:c2:93:6e:90:9e:11:d3:04:e5:3b:
                    3e:ac:35:09:9f:fe:cc:f8:8f:91:08:14:15:c8:4f:
                    68:52:17:e1:55:a8:cf:f2:7a:fa:41:cd:28:ef:ab:
                    f0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C6:5B:B2:F2:FC:85:71:96:61:B6:A2:81:B2:D8:2B:E0:40:8C:B2
            X509v3 Authority Key Identifier:
                keyid:C4:A6:46:6D:93:15:F0:22:15:2B:2A:75:EF:0E:4E:36:80:F9:59:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132342e302f32322d3332203d3e20323638373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:f1:eb:69:33:13:6a:e3:39:d2:8d:6d:dc:fa:a7:21:82:
         98:5c:26:d3:a7:b2:59:f4:33:06:b4:db:fc:3e:d2:f4:08:17:
         b8:b9:03:0c:10:73:0a:46:90:07:7e:ea:35:d6:f6:32:79:17:
         b3:64:d6:88:50:4b:c0:90:49:77:4f:42:0e:b6:f1:4d:12:1b:
         ec:09:3c:0d:d1:71:4d:9c:0e:47:78:e4:85:fe:dd:90:f5:74:
         23:ad:d8:d3:32:72:e0:20:1b:01:f4:cb:1d:6e:99:2a:0a:6d:
         83:37:74:61:68:f5:be:d1:a2:48:cc:b9:f1:ec:fa:5c:4f:3b:
         c1:e0:e2:05:92:53:23:1e:59:11:bd:df:a7:5e:66:48:62:e9:
         45:32:93:6d:77:15:38:84:5f:77:03:cc:2a:c0:b0:b7:23:3e:
         b2:88:f3:a8:a5:c2:9e:14:4d:11:b5:84:c3:75:5b:d3:e4:96:
         56:33:33:fe:98:40:e0:0e:45:91:04:88:11:20:7c:c7:79:aa:
         f7:e9:0f:3c:6e:44:2d:40:7a:c4:7c:61:de:8e:ee:8b:60:09:
         4e:81:86:84:fa:e5:b8:9c:bf:3f:d1:8a:d9:ff:88:b9:fc:a1:
         6c:22:ab:b8:11:2b:6d:c9:04:1e:f8:c6:c5:0a:2e:1f:97:18:
         54:48:5c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:16:23 2025 by rpki-client