Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e33302e302f32332d3233203d3e20323637313435.roa
File:                     34352e3233302e33302e302f32332d3233203d3e20323637313435.roa (raw, json)
Hash identifier:          P9E4CSTIzR8ub3UjYPuD3ojXiSHsSzq/hJMmZe1qwVs=
Subject key identifier:   4F:AE:6B:52:59:BE:D3:16:0F:3F:5D:08:15:B0:D7:51:77:C3:BB:E6
Certificate issuer:       /CN=3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED
Certificate serial:       3CE87D7322FCC42ADF64BDFA13F77F29DFF9A1F6
Authority key identifier: 3A:CA:CB:0D:E5:9E:3F:7F:5D:3F:B4:9A:B3:DF:C4:C9:80:8D:CA:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e33302e302f32332d3233203d3e20323637313435.roa
Signing time:             Mon 23 Jun 2025 18:28:45 +0000
ROA not before:           Mon 23 Jun 2025 18:23:45 +0000
ROA not after:            Mon 22 Jun 2026 18:28:45 +0000
asID:                     267145
IP address blocks:        45.230.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 17:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e8:7d:73:22:fc:c4:2a:df:64:bd:fa:13:f7:7f:29:df:f9:a1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED
        Validity
            Not Before: Jun 23 18:23:45 2025 GMT
            Not After : Jun 22 18:28:45 2026 GMT
        Subject: CN=4FAE6B5259BED3160F3F5D0815B0D75177C3BBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9f:e6:c6:84:56:56:b4:fc:86:57:aa:79:80:
                    07:09:46:17:73:f6:11:38:e4:a3:2a:77:68:15:2a:
                    1d:d7:49:b8:47:61:de:81:c5:9e:38:75:2f:88:83:
                    0b:90:d4:2c:c6:ac:b8:f0:13:4a:5a:cb:59:85:5e:
                    4f:ac:d2:82:99:54:7f:37:72:02:cc:8f:31:3e:da:
                    96:9f:18:8d:4a:dc:d6:f8:79:2f:64:ec:b8:de:fd:
                    68:85:3c:47:4d:56:38:63:17:15:ae:b0:5a:53:d8:
                    dd:9d:47:f8:85:76:72:9b:be:79:1b:71:9e:cd:43:
                    2d:6e:a3:f8:ca:49:b2:ba:33:8f:38:47:84:f9:56:
                    66:16:36:c6:c2:b2:ce:48:52:ee:d8:35:b8:60:67:
                    3a:3c:8e:36:52:b8:cd:58:55:0b:9b:43:ef:46:0e:
                    f4:aa:14:1b:67:3b:23:cf:9f:c2:68:6b:57:41:7c:
                    d7:23:b0:8d:f0:05:f2:c9:4f:d4:e5:24:20:5f:ff:
                    02:46:6d:fa:66:8e:b0:6b:bf:94:56:d4:ed:3a:4e:
                    bd:62:4b:53:c1:10:a7:8d:27:d5:1c:74:46:91:a8:
                    84:e6:8e:3b:ba:fd:0d:c3:8d:89:ac:f3:c4:9e:90:
                    5e:8f:e2:27:d9:3b:44:71:bc:90:9f:64:c5:0e:5f:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AE:6B:52:59:BE:D3:16:0F:3F:5D:08:15:B0:D7:51:77:C3:BB:E6
            X509v3 Authority Key Identifier:
                keyid:3A:CA:CB:0D:E5:9E:3F:7F:5D:3F:B4:9A:B3:DF:C4:C9:80:8D:CA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e33302e302f32332d3233203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:65:07:ad:6a:17:1e:64:8c:14:da:8d:7e:e7:24:5e:6a:e8:
         f7:cb:eb:a0:13:92:72:08:f3:a5:2d:6c:dc:d6:22:0f:d9:6e:
         ae:c4:30:4c:c1:d5:ec:5d:bd:68:62:bf:2d:cf:16:62:4f:50:
         a2:54:3f:4d:3f:04:10:78:0f:d7:dc:78:9f:3e:4b:8e:c0:e9:
         80:46:66:ae:c6:12:97:40:16:62:bb:c3:a2:22:a0:ae:2f:03:
         6c:ba:bb:cc:84:de:70:b9:f4:29:20:17:0e:5e:20:20:81:e5:
         42:e5:b3:2f:84:0b:be:cc:b4:a1:ac:29:32:64:c5:c1:56:d1:
         7c:a1:b5:16:86:1e:b7:29:4e:8a:47:67:88:d3:4d:65:36:3d:
         7a:fd:d0:1c:ca:38:66:59:cb:e6:60:70:d3:fe:da:ef:ad:17:
         2c:d0:b1:a9:81:9d:7c:cc:e2:06:a5:bd:f2:84:ab:35:24:86:
         db:5f:de:e3:87:07:a6:5a:65:ce:ac:48:cd:25:1f:bb:72:20:
         b7:b9:d0:42:1b:6d:b4:a4:f3:8b:83:fb:83:14:02:6c:72:f6:
         5c:87:e0:ee:1b:c5:56:0b:5f:6a:c0:89:6f:5e:7f:75:4b:9b:
         4a:60:7a:49:fc:ac:10:5c:ee:2c:08:fb:fc:db:5f:06:79:31:
         f2:ff:cb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:58:52 2025 by rpki-client