Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32332d3233203d3e20323637363038.roa
File:                     34352e37312e3132382e302f32332d3233203d3e20323637363038.roa (raw, json)
Hash identifier:          9qWl4hwMibeKAiZpIyVI1iM3J7skBh7jywpg7D0opeg=
Subject key identifier:   23:1B:F3:2F:49:5C:1A:15:9A:D7:B2:0D:DD:E1:F0:BD:30:91:E8:51
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       5CD27ED49F2644077A31BB74AEC2F447BF5179E7
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32332d3233203d3e20323637363038.roa
Signing time:             Fri 30 May 2025 23:25:31 +0000
ROA not before:           Fri 30 May 2025 23:20:31 +0000
ROA not after:            Fri 29 May 2026 23:25:31 +0000
asID:                     267608
IP address blocks:        45.71.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 11:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d2:7e:d4:9f:26:44:07:7a:31:bb:74:ae:c2:f4:47:bf:51:79:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May 30 23:20:31 2025 GMT
            Not After : May 29 23:25:31 2026 GMT
        Subject: CN=231BF32F495C1A159AD7B20DDDE1F0BD3091E851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:39:7b:79:ff:a2:60:c2:eb:f6:60:a1:99:
                    ca:28:8d:e9:d1:09:bf:1e:0a:ef:13:13:23:6c:35:
                    36:d4:05:99:07:a4:97:c4:ca:fe:8d:08:81:70:dc:
                    86:f2:f7:8d:d1:1b:1a:51:91:c3:63:f2:d4:1e:d3:
                    67:89:36:3a:47:fc:49:b7:a2:c2:49:d7:ee:d0:a4:
                    dc:52:44:ca:a2:bc:61:5f:57:6f:dc:0e:8b:75:a5:
                    cb:18:ce:f0:93:64:48:df:9b:70:53:0c:41:8c:99:
                    ac:9b:b0:5e:aa:75:95:c7:58:27:29:06:e6:bc:dd:
                    9e:66:5f:b5:95:a4:05:99:c4:0c:b3:7a:2e:38:38:
                    04:e6:a9:19:4a:3d:cf:ad:88:db:bd:4e:b4:45:8a:
                    c9:93:d7:0e:42:48:00:af:e2:25:21:6d:4c:33:51:
                    ee:ea:7b:54:89:fb:97:ca:39:7c:a2:02:99:29:db:
                    ae:bb:3e:f3:73:19:7b:bb:6c:5a:ce:93:be:bf:16:
                    3c:37:c2:95:d0:75:3f:33:3a:3c:e9:93:4e:b0:79:
                    c4:b3:f7:b6:de:99:43:eb:f8:d1:7d:95:70:f4:b3:
                    b7:21:d3:90:97:50:91:36:18:cf:c3:89:5c:de:be:
                    86:44:c9:a4:2a:d2:32:48:83:ca:4f:0b:5c:0f:da:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1B:F3:2F:49:5C:1A:15:9A:D7:B2:0D:DD:E1:F0:BD:30:91:E8:51
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/34352e37312e3132382e302f32332d3233203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:5e:08:96:f6:b5:81:68:f8:65:e8:01:27:14:36:e3:c5:b4:
         14:f1:3d:d7:3f:5d:75:71:51:38:12:20:1e:ca:5c:28:9e:69:
         fc:0f:d2:da:ca:3b:fc:dd:b7:78:4f:a6:49:e3:ca:b4:da:c4:
         48:2a:28:d4:ef:17:f2:8b:6a:91:9c:03:83:63:93:12:d9:37:
         da:06:32:7d:2a:41:1f:f5:d4:63:30:b1:3f:d0:42:13:e6:ab:
         a1:b7:4f:0e:50:a8:36:82:4e:fc:42:44:9b:e7:d1:cc:be:fe:
         e9:88:22:67:46:59:7c:f4:d6:bf:ed:93:39:e7:83:2e:62:9e:
         44:a2:6e:f7:b7:59:ae:ca:7f:7e:d6:2a:69:4f:5e:ee:03:1e:
         cc:75:40:df:fd:f8:3b:26:21:6f:cb:c3:d5:83:f6:0d:e4:26:
         ad:c2:d2:82:35:3e:20:eb:c7:23:d5:ae:5b:8a:a5:dd:ab:10:
         19:d5:32:87:c2:5c:e6:52:74:21:28:a6:f1:b9:1e:78:d2:5c:
         49:ec:5f:90:80:18:df:e8:ae:24:ff:4f:20:56:d9:e1:4d:9c:
         32:5b:ad:ea:ef:9c:07:6d:3b:3a:f4:89:1b:63:ea:ac:6e:ad:
         c0:e3:95:4d:44:23:b1:27:d6:9f:b8:a4:7f:2d:d3:55:75:4c:
         e7:e0:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 22:22:55 2025 by rpki-client