Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/34352e3233362e312e302f32342d3234203d3e20323638323135.roa
File:                     34352e3233362e312e302f32342d3234203d3e20323638323135.roa (raw, json)
Hash identifier:          QmYPv8f8/bWk+YxY1qxPZlnqB2r+dXZvDRst3oGxM3c=
Subject key identifier:   A5:E7:1A:2C:4A:1D:9E:85:C0:91:A1:C6:54:DE:FC:AC:65:31:94:F6
Certificate issuer:       /CN=777F5EB1AB6BF554B838F847ED60E71F6A109C4F
Certificate serial:       31D4C7C6E894F7B20AFE274A775030F64ED96C7B
Authority key identifier: 77:7F:5E:B1:AB:6B:F5:54:B8:38:F8:47:ED:60:E7:1F:6A:10:9C:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/34352e3233362e312e302f32342d3234203d3e20323638323135.roa
Signing time:             Tue 03 Jun 2025 16:26:28 +0000
ROA not before:           Tue 03 Jun 2025 16:21:28 +0000
ROA not after:            Tue 02 Jun 2026 16:26:28 +0000
asID:                     268215
IP address blocks:        45.236.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.crl
                          rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d4:c7:c6:e8:94:f7:b2:0a:fe:27:4a:77:50:30:f6:4e:d9:6c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777F5EB1AB6BF554B838F847ED60E71F6A109C4F
        Validity
            Not Before: Jun  3 16:21:28 2025 GMT
            Not After : Jun  2 16:26:28 2026 GMT
        Subject: CN=A5E71A2C4A1D9E85C091A1C654DEFCAC653194F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:9d:62:16:e5:8f:f5:c7:53:cf:97:ca:7d:
                    9c:4e:5d:15:f4:c3:9a:d4:e0:5a:27:aa:8d:c4:98:
                    43:a9:15:14:3a:ed:44:69:61:97:3a:5f:6f:b9:d7:
                    55:8c:25:65:65:55:fd:98:55:92:41:50:4a:98:5c:
                    f0:c2:e6:a6:2b:25:52:6b:8b:9f:a9:1e:43:b9:78:
                    a4:7c:e9:ed:16:31:6f:e3:4d:a7:87:13:c5:ed:3d:
                    2c:f5:ab:c1:70:0a:9d:09:f5:19:c4:5c:b7:67:c4:
                    50:d0:fc:24:ee:cd:f2:6f:ba:72:54:b0:1f:79:76:
                    b9:6a:df:b4:7c:86:a2:16:19:98:48:67:73:51:24:
                    df:77:5c:89:2d:0e:39:da:04:11:34:6e:bb:c5:ff:
                    c5:78:32:44:76:38:cd:ad:35:99:3d:04:bc:f4:3e:
                    0f:1d:e6:f0:0b:53:b5:c9:ff:a2:06:a6:3f:88:10:
                    93:12:8f:4f:d6:53:6c:52:ca:33:9f:58:a7:28:ff:
                    f6:9f:d1:75:bd:c4:87:fb:0a:08:b2:4c:f9:8f:32:
                    b4:4c:a2:3e:4d:dd:a1:9b:61:43:47:46:c0:09:69:
                    c7:63:4d:43:43:e1:a1:ec:44:2e:44:44:4b:96:8e:
                    e6:73:68:b0:8f:41:88:0d:20:49:d0:1f:e9:07:5f:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E7:1A:2C:4A:1D:9E:85:C0:91:A1:C6:54:DE:FC:AC:65:31:94:F6
            X509v3 Authority Key Identifier:
                keyid:77:7F:5E:B1:AB:6B:F5:54:B8:38:F8:47:ED:60:E7:1F:6A:10:9C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/34352e3233362e312e302f32342d3234203d3e20323638323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:de:29:08:48:c0:c7:6d:15:6f:2b:e7:94:96:0e:53:25:0a:
         71:a6:ac:65:ee:a8:de:9e:b9:40:80:86:6a:1a:7b:b1:8b:3d:
         32:4b:69:63:17:58:40:3f:2d:25:2f:e7:e2:72:a9:6b:ec:0f:
         23:89:33:f3:06:82:ae:13:10:78:b4:4b:68:9d:e3:68:d5:67:
         55:58:dd:38:10:78:cd:d6:66:be:af:75:8f:d9:8e:b8:37:76:
         aa:55:5d:f3:32:80:8d:36:cb:f8:f1:44:b9:18:99:44:eb:38:
         9d:ee:3f:ec:b1:35:ec:ff:e7:22:cc:38:d8:37:28:e8:73:11:
         62:a4:78:58:fd:c8:62:d1:6d:26:91:04:b9:3e:22:68:f2:80:
         18:ca:f2:b9:e5:43:79:5e:fe:16:0e:a1:7d:95:9b:04:d3:85:
         12:cc:7c:ed:62:86:9a:89:71:87:7f:08:3e:f5:09:85:91:e8:
         ec:56:b8:67:93:6a:1d:67:5d:09:b0:bd:d3:0d:55:3e:b5:50:
         3d:28:86:c1:a4:e5:9b:13:16:54:c3:b2:86:11:4f:9a:1c:ad:
         69:a4:b0:a1:eb:23:1b:b9:12:ab:7a:a4:46:6d:bc:25:fa:eb:
         28:8c:5c:67:7e:6b:25:f4:ac:34:c3:67:0c:0f:8e:6f:09:f9:
         ac:c9:c3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:42:09 2025 by rpki-client