Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa
File:                     34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa (raw, json)
Hash identifier:          WqWvvXxEMcH7dvYEg93PUod8ZwoKJ9VzHY5o8JA76kU=
Subject key identifier:   45:EE:C4:0F:62:9F:31:60:7A:F4:6D:97:5D:D0:F5:90:3A:DC:69:41
Certificate issuer:       /CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
Certificate serial:       4E4BBE7A9BBE1A4CDC16D0E99C71A2C1B812E6E7
Authority key identifier: D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa
Signing time:             Tue 29 Apr 2025 17:45:27 +0000
ROA not before:           Tue 29 Apr 2025 17:40:27 +0000
ROA not after:            Tue 28 Apr 2026 17:45:27 +0000
asID:                     267027
IP address blocks:        45.227.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 05:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4b:be:7a:9b:be:1a:4c:dc:16:d0:e9:9c:71:a2:c1:b8:12:e6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
        Validity
            Not Before: Apr 29 17:40:27 2025 GMT
            Not After : Apr 28 17:45:27 2026 GMT
        Subject: CN=45EEC40F629F31607AF46D975DD0F5903ADC6941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:d3:8d:b3:49:db:3d:51:70:49:70:36:1a:
                    f6:89:72:1d:f2:f0:15:4d:3c:53:b7:b2:2e:04:91:
                    af:2d:f7:da:c4:98:c9:e4:0a:65:e9:85:63:ee:64:
                    b5:a8:c3:33:1e:bb:50:dc:83:1c:21:ce:f1:92:31:
                    da:79:75:03:01:ad:cc:6d:78:9d:fc:d3:21:c8:43:
                    2e:8f:16:91:7a:76:11:f0:72:b8:be:ac:a5:29:7f:
                    3e:d0:ce:e3:de:e0:d6:f1:88:42:98:27:58:61:19:
                    09:42:7b:29:5c:8b:51:cc:a4:0a:7f:e6:e8:10:68:
                    9c:b2:44:bd:5f:55:76:5a:93:db:47:f7:04:29:84:
                    6f:73:0c:0b:81:51:be:7b:bb:6f:bc:0c:89:52:8e:
                    ba:c9:cf:df:eb:9e:41:ae:fc:ba:d3:57:09:27:7c:
                    2e:bd:e0:ea:f6:d2:7f:02:8f:c8:c6:08:8b:ac:3d:
                    1c:d4:07:a6:58:c8:11:6a:85:37:e0:5f:e0:4d:4b:
                    2a:72:8d:5d:96:2e:42:29:f0:12:36:23:14:fa:1a:
                    f4:38:db:02:30:de:e1:f3:f5:93:f2:9d:23:0e:a5:
                    e4:6f:e3:22:3f:84:23:f3:26:4d:45:03:10:4e:0a:
                    ee:d4:f6:c1:92:52:65:c3:68:ed:18:5c:c4:5d:d8:
                    77:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EE:C4:0F:62:9F:31:60:7A:F4:6D:97:5D:D0:F5:90:3A:DC:69:41
            X509v3 Authority Key Identifier:
                keyid:D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:d8:89:09:ad:73:87:e6:d1:b1:e0:69:0c:54:a4:a3:ef:b8:
         9c:cd:72:5e:55:4b:e1:cd:46:f1:8c:58:7f:55:f7:51:ec:58:
         22:d3:63:e0:a8:33:cb:4b:39:ee:7b:54:b4:5e:e7:b7:69:75:
         f5:ce:2b:8d:c7:ee:a9:fd:26:25:bb:67:de:1c:5d:1f:f2:93:
         23:e4:6e:c9:af:3e:34:7c:71:79:4d:7c:e1:a3:3c:0c:bd:e0:
         80:a2:4b:74:72:8f:b1:c9:d8:12:3b:a3:58:27:82:d7:3c:f1:
         2d:ce:e8:12:30:73:c5:90:89:37:89:cb:2f:9d:91:91:d9:b8:
         ae:d8:17:8d:88:7a:0a:3a:25:ca:92:22:7a:0f:06:63:cc:55:
         b8:bb:b2:22:d6:8d:a3:bb:3e:e7:03:1d:fd:2a:bf:3a:33:d1:
         61:b7:93:1d:ea:c5:fd:b0:c5:a7:8c:dc:20:08:d3:95:13:b2:
         27:31:05:a9:1f:21:32:17:7d:76:ae:6a:e5:68:bb:a6:08:63:
         a7:11:a7:7a:18:46:f1:8f:71:59:85:15:7e:3d:fb:44:ef:32:
         43:0c:7e:3b:d9:ad:71:46:35:0e:2d:e4:19:3c:f1:74:7b:3a:
         01:fa:58:6b:63:91:b2:fe:dd:fb:63:9e:53:9e:2d:b0:36:e0:
         05:65:33:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:43:16 2025 by rpki-client