Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135322e302f32322d3332203d3e20323638373231.roa
File:                     34352e3137312e3135322e302f32322d3332203d3e20323638373231.roa (raw, json)
Hash identifier:          67TkLQvuNeX0EJcGTk+hsnRInHM72KsPsKkIJBBFBMw=
Subject key identifier:   E7:D6:21:7F:3D:15:3A:2B:80:6B:07:43:18:80:F9:F0:D2:65:A6:3F
Certificate issuer:       /CN=905E0ACD3548A57B3861824FB67B35DA2DD0B922
Certificate serial:       6A5C5FA573E5C94835830C83421BE4860AE82220
Authority key identifier: 90:5E:0A:CD:35:48:A5:7B:38:61:82:4F:B6:7B:35:DA:2D:D0:B9:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/905E0ACD3548A57B3861824FB67B35DA2DD0B922.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135322e302f32322d3332203d3e20323638373231.roa
Signing time:             Mon 30 Jun 2025 13:28:37 +0000
ROA not before:           Mon 30 Jun 2025 13:23:37 +0000
ROA not after:            Mon 29 Jun 2026 13:28:37 +0000
asID:                     268721
IP address blocks:        45.171.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/905E0ACD3548A57B3861824FB67B35DA2DD0B922.crl
                          rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/905E0ACD3548A57B3861824FB67B35DA2DD0B922.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/905E0ACD3548A57B3861824FB67B35DA2DD0B922.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 10:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5c:5f:a5:73:e5:c9:48:35:83:0c:83:42:1b:e4:86:0a:e8:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905E0ACD3548A57B3861824FB67B35DA2DD0B922
        Validity
            Not Before: Jun 30 13:23:37 2025 GMT
            Not After : Jun 29 13:28:37 2026 GMT
        Subject: CN=E7D6217F3D153A2B806B07431880F9F0D265A63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:d7:e8:cf:6d:68:f5:91:2a:5b:cb:be:46:
                    00:8f:d7:e6:72:f0:1a:8d:65:4e:dd:0f:74:82:47:
                    6f:e0:46:38:96:30:3f:f1:c7:ba:9a:64:ee:6e:cb:
                    33:1c:f4:31:e3:08:32:14:18:51:9d:78:50:9d:5d:
                    fe:eb:27:35:98:93:f0:48:47:2a:1e:8a:53:93:3e:
                    8d:04:3e:02:ca:28:ec:8d:85:96:0f:60:04:e6:0b:
                    c1:6e:ba:2d:06:20:9a:eb:6b:17:5d:d8:3b:ed:6f:
                    1d:b4:df:49:fe:cf:b4:a6:af:93:b6:90:6d:b8:4e:
                    4d:9b:17:fb:32:c2:ff:98:74:a3:56:d7:fc:97:74:
                    a8:2c:56:48:c9:f8:93:2b:22:59:a6:92:ba:78:9a:
                    0b:c9:57:1d:37:bb:65:c9:58:1e:a0:25:92:99:b4:
                    e0:1f:31:f8:1f:e1:e1:4e:8d:a6:6f:e6:76:0d:7a:
                    1d:3d:2e:95:e3:34:8e:9f:e3:e1:4f:f2:a9:39:ba:
                    bb:d0:c0:64:13:99:43:5e:be:ce:9e:38:cb:c1:2f:
                    5f:b4:3e:83:f3:3d:be:ee:b3:0a:8d:71:94:7a:cd:
                    4a:79:bb:0c:b5:df:f2:64:a8:c8:0e:c8:0b:87:10:
                    7d:04:26:fc:87:37:ee:f2:51:3b:c5:d9:a4:ee:01:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D6:21:7F:3D:15:3A:2B:80:6B:07:43:18:80:F9:F0:D2:65:A6:3F
            X509v3 Authority Key Identifier:
                keyid:90:5E:0A:CD:35:48:A5:7B:38:61:82:4F:B6:7B:35:DA:2D:D0:B9:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/905E0ACD3548A57B3861824FB67B35DA2DD0B922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/905E0ACD3548A57B3861824FB67B35DA2DD0B922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135322e302f32322d3332203d3e20323638373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:86:e8:f4:56:ac:9b:9e:3a:7b:a5:b9:27:73:57:c4:96:2e:
         a0:bb:b1:ba:3c:05:9c:43:2b:c5:b7:84:5b:96:11:26:62:6a:
         b2:73:ef:d0:6a:14:29:67:09:79:28:10:f6:c5:8a:0b:22:86:
         a3:71:de:be:18:4b:61:53:24:6a:60:a3:d8:52:4a:e0:67:6e:
         8d:6a:ac:c6:9f:38:b4:2a:2b:4e:ee:9e:55:bc:02:a1:09:cd:
         1a:0b:ba:aa:28:7d:4a:cd:3d:25:e0:4d:1c:44:31:dd:d5:2d:
         8d:72:cf:59:65:3d:af:d3:7d:90:b6:f7:5e:81:8b:72:18:12:
         a8:bf:5a:59:cf:cf:79:62:30:78:b0:71:57:5a:4f:b2:8b:7c:
         5c:d3:ad:43:c0:a1:9f:70:27:6a:ee:d8:14:74:b2:05:f6:79:
         16:30:b3:fe:d9:6f:2d:c8:57:84:9e:33:a7:8a:46:35:ab:f4:
         16:94:33:4b:28:e0:e1:1d:fd:32:04:d7:8c:b1:11:f7:9c:72:
         03:f8:6b:db:2a:35:37:87:4e:1e:4f:1f:86:47:39:3a:1c:a7:
         7b:0d:45:02:dd:4c:76:47:0e:07:be:27:69:0b:d4:cd:09:9e:
         e2:03:9e:17:a5:26:cc:f9:ad:1a:52:a1:a9:7f:af:0f:e3:cc:
         42:7c:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 20:05:08 2025 by rpki-client