Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/34352e342e3134382e302f32322d3332203d3e20323636303733.roa
File:                     34352e342e3134382e302f32322d3332203d3e20323636303733.roa (raw, json)
Hash identifier:          tOqA7PwI8jI1/JRBwcgxuEwnTIf95AbSIW+yp2qqq6Q=
Subject key identifier:   AE:04:24:27:67:15:61:7C:F3:4B:C6:F9:79:1A:C7:57:A3:89:51:84
Certificate issuer:       /CN=5B7D870D6963A99CEA26E65A39708E332A94F7FC
Certificate serial:       39971FE692044EB4AD6E4992589CA1F7D8BB9BC8
Authority key identifier: 5B:7D:87:0D:69:63:A9:9C:EA:26:E6:5A:39:70:8E:33:2A:94:F7:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7D870D6963A99CEA26E65A39708E332A94F7FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/34352e342e3134382e302f32322d3332203d3e20323636303733.roa
Signing time:             Sun 22 Jun 2025 17:26:52 +0000
ROA not before:           Sun 22 Jun 2025 17:21:52 +0000
ROA not after:            Sun 21 Jun 2026 17:26:52 +0000
asID:                     266073
IP address blocks:        45.4.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/5B7D870D6963A99CEA26E65A39708E332A94F7FC.crl
                          rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/5B7D870D6963A99CEA26E65A39708E332A94F7FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7D870D6963A99CEA26E65A39708E332A94F7FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 16:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:97:1f:e6:92:04:4e:b4:ad:6e:49:92:58:9c:a1:f7:d8:bb:9b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B7D870D6963A99CEA26E65A39708E332A94F7FC
        Validity
            Not Before: Jun 22 17:21:52 2025 GMT
            Not After : Jun 21 17:26:52 2026 GMT
        Subject: CN=AE0424276715617CF34BC6F9791AC757A3895184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:0a:7d:af:27:ab:72:92:31:13:5c:0f:2d:
                    dc:6d:1d:b7:3a:a8:43:13:a3:81:bb:46:5d:4e:ca:
                    01:50:a6:dd:2a:9a:80:1f:8f:63:59:aa:ac:70:be:
                    79:4d:dc:8a:e2:06:b9:95:cc:00:4c:99:71:fc:3b:
                    c6:d0:b5:b1:fa:38:cd:59:be:53:20:ef:e1:8d:6f:
                    77:65:ec:2f:5b:9b:17:85:e7:b0:65:21:2f:8d:bc:
                    52:6b:86:6a:c7:2a:f2:5f:89:ae:b7:e5:bb:d2:b4:
                    91:f1:94:62:7a:a1:68:9a:a7:ed:ba:80:fc:5d:19:
                    8a:3b:b0:12:36:e0:ab:d0:5b:12:9c:de:a8:31:cb:
                    a3:32:68:f0:a3:14:0d:09:9b:ef:44:d0:f1:91:58:
                    4b:92:5c:00:53:78:0d:b9:81:ba:b2:0f:50:63:ad:
                    b9:24:42:52:d0:41:18:c8:7b:28:6a:e9:68:9a:9d:
                    32:95:fa:78:e0:4a:92:7d:8b:a9:36:8e:89:a5:1b:
                    e3:e7:ae:2f:3f:d0:b4:b0:09:fb:38:19:40:da:ce:
                    4c:77:82:fb:62:e1:12:fa:72:67:19:2d:67:74:60:
                    d0:ac:d0:0b:f6:d7:c2:40:8a:dd:03:03:33:c1:a1:
                    10:6d:fc:82:f4:c4:d1:94:b3:46:fd:8c:b7:51:9d:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:04:24:27:67:15:61:7C:F3:4B:C6:F9:79:1A:C7:57:A3:89:51:84
            X509v3 Authority Key Identifier:
                keyid:5B:7D:87:0D:69:63:A9:9C:EA:26:E6:5A:39:70:8E:33:2A:94:F7:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/5B7D870D6963A99CEA26E65A39708E332A94F7FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7D870D6963A99CEA26E65A39708E332A94F7FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/34352e342e3134382e302f32322d3332203d3e20323636303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:5d:4a:9f:27:5e:1d:a7:08:d0:12:c6:00:63:d2:f2:54:f7:
         72:61:33:e4:4e:c0:94:61:5a:48:c8:c1:68:17:a7:96:0a:f1:
         da:19:d8:67:9a:1f:9f:db:9a:d4:9b:23:3c:e1:d5:68:be:e6:
         3b:d2:7a:3a:df:ab:d4:2d:d2:a3:c3:4f:19:a8:5a:20:f4:32:
         db:c3:eb:46:82:01:53:f2:42:76:80:74:40:c9:75:b1:b7:87:
         87:7e:72:cc:04:90:14:68:53:42:fc:05:9b:a2:ce:7c:30:1a:
         8a:22:4c:a6:ef:94:6d:50:34:28:59:f1:8b:1a:94:1f:a2:6e:
         be:7f:fc:ba:6f:c2:3f:cf:14:83:79:b2:33:e2:34:5d:ba:24:
         36:aa:34:6d:56:b7:2f:95:ae:f8:9c:9f:23:b6:73:f6:a0:61:
         3d:e2:50:e5:81:ae:e4:ee:4e:13:98:51:f8:7f:72:48:ec:9b:
         c7:99:ff:0c:80:73:08:29:ef:72:49:61:44:eb:bb:57:d6:a7:
         43:63:6f:fa:53:5c:a4:cb:8a:82:1c:7c:54:ae:c6:8f:4c:c4:
         b4:e7:94:d8:36:d0:c3:96:39:09:e2:65:fd:20:36:32:a8:20:
         87:a4:a4:ac:78:92:df:91:dc:7c:23:09:00:8d:d5:39:4d:ec:
         1f:91:69:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:44:15 2025 by rpki-client