Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3332203d3e20323635343437.roa
File:                     34352e37302e37322e302f32322d3332203d3e20323635343437.roa (raw, json)
Hash identifier:          40qerWBD1Yjw0lBKw8HGlG9bKFhMM3lROwmhDkLbIBA=
Subject key identifier:   C3:48:94:4E:8A:58:C2:9F:BD:B2:98:7A:98:09:94:43:AB:E6:80:AA
Certificate issuer:       /CN=37898D289E6CB57451BCE99712B6273334A80F13
Certificate serial:       052C1D4451C24D943B94FB740F4AED38316F5869
Authority key identifier: 37:89:8D:28:9E:6C:B5:74:51:BC:E9:97:12:B6:27:33:34:A8:0F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37898D289E6CB57451BCE99712B6273334A80F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3332203d3e20323635343437.roa
Signing time:             Wed 30 Apr 2025 20:09:21 +0000
ROA not before:           Wed 30 Apr 2025 20:04:21 +0000
ROA not after:            Wed 29 Apr 2026 20:09:21 +0000
asID:                     265447
IP address blocks:        45.70.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/37898D289E6CB57451BCE99712B6273334A80F13.crl
                          rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/37898D289E6CB57451BCE99712B6273334A80F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37898D289E6CB57451BCE99712B6273334A80F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 22:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2c:1d:44:51:c2:4d:94:3b:94:fb:74:0f:4a:ed:38:31:6f:58:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37898D289E6CB57451BCE99712B6273334A80F13
        Validity
            Not Before: Apr 30 20:04:21 2025 GMT
            Not After : Apr 29 20:09:21 2026 GMT
        Subject: CN=C348944E8A58C29FBDB2987A98099443ABE680AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:a4:23:63:46:d8:11:f7:22:d6:08:ae:b4:
                    de:9e:66:d1:ab:c8:37:20:d3:7e:19:cf:d8:f0:58:
                    c4:2b:b5:a8:39:af:17:5e:10:be:2a:9d:2f:dd:6b:
                    6c:2e:83:57:77:07:1a:4b:71:8a:e3:2a:58:80:4b:
                    91:e4:89:a9:a3:18:9e:80:ee:bc:1f:4a:b7:d1:3f:
                    38:ef:bc:eb:47:81:c9:41:0f:51:63:8b:0c:6a:f8:
                    7f:63:35:1a:3b:06:64:e7:a4:67:00:2c:b2:98:8d:
                    40:4c:fb:f5:be:ea:7c:c9:98:66:b9:ed:31:f2:ea:
                    a3:4e:12:6c:1c:4f:03:7f:8e:54:f5:36:0d:51:f4:
                    a8:6c:9e:8c:37:e9:de:4c:ec:33:c6:cb:1f:0b:f3:
                    e2:b7:1c:12:bf:2f:ed:b1:41:b2:82:52:6b:f1:25:
                    99:75:7f:9a:4f:53:e9:82:96:80:f3:5b:53:79:24:
                    c9:05:ae:90:cd:40:91:6d:26:df:cc:e1:ee:a5:eb:
                    ec:a8:ec:d5:ef:39:dd:64:73:08:6f:d9:ea:51:54:
                    3a:de:2c:ae:5e:af:fe:0f:db:ad:25:15:89:62:e3:
                    86:65:82:35:69:ff:96:48:83:45:ae:2d:da:f5:45:
                    37:f0:b8:19:5b:27:79:04:e8:4c:05:7b:e2:58:5d:
                    03:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:94:4E:8A:58:C2:9F:BD:B2:98:7A:98:09:94:43:AB:E6:80:AA
            X509v3 Authority Key Identifier:
                keyid:37:89:8D:28:9E:6C:B5:74:51:BC:E9:97:12:B6:27:33:34:A8:0F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/37898D289E6CB57451BCE99712B6273334A80F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37898D289E6CB57451BCE99712B6273334A80F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3332203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:d8:32:da:7d:58:36:7c:01:b7:79:72:88:7b:a0:f5:56:5c:
         87:77:b2:b2:2b:d1:b3:a1:2d:39:fc:3b:fa:5c:c0:78:a9:1e:
         f3:98:a8:22:b5:51:f5:a2:b8:fd:32:64:ce:bd:29:0c:17:3f:
         e2:67:f2:e2:a2:31:f8:90:a7:47:52:46:2a:f1:e1:70:96:85:
         1b:85:f3:7f:da:94:12:6b:d8:cc:ff:51:ac:26:52:c5:a4:d9:
         db:d9:4b:d8:79:50:88:28:ee:fd:a5:97:de:3a:c8:d0:fd:79:
         ac:ad:1f:39:7c:25:c5:b7:8b:24:e4:1f:79:3c:dd:24:1e:06:
         28:5c:57:84:a3:5a:c0:b2:9d:48:34:e6:67:01:50:1c:e3:80:
         d0:19:cb:71:eb:cb:7c:f5:7a:22:d2:6a:e0:94:2f:f6:e7:69:
         7d:ee:64:e3:3d:6a:b2:69:9f:51:74:ad:a1:5e:b7:2f:0b:4c:
         7e:da:6c:e2:a9:6b:f5:84:dc:1d:f8:3b:6c:ca:21:5b:70:8e:
         00:a3:dc:bf:d7:77:2a:f7:38:7c:ed:27:35:f5:f7:6e:92:1c:
         5f:a2:c8:49:b6:e2:d7:d5:bb:44:f9:ad:0a:6f:14:d9:d6:54:
         c2:44:84:8d:84:91:73:37:26:a8:c7:68:ad:d1:53:00:bd:70:
         bd:c9:3c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:19:30 2025 by rpki-client