Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231342e302f32332d3233203d3e20323639313131.roa
File:                     34352e3137382e3231342e302f32332d3233203d3e20323639313131.roa (raw, json)
Hash identifier:          Dlip+aLUZZg8ws0XGJTSh7d7kBNHAURhyTZ13xNU048=
Subject key identifier:   C8:D7:48:F8:3A:21:6C:EA:74:C4:A8:4F:89:2F:46:52:5B:50:6C:D1
Certificate issuer:       /CN=6B5D42D93E58C00245A6501E9C01C833BB782217
Certificate serial:       01975EC9D319B2C42A5D9FCCA0C1725914B590D6
Authority key identifier: 6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231342e302f32332d3233203d3e20323639313131.roa
Signing time:             Tue 08 Jul 2025 19:39:29 +0000
ROA not before:           Tue 08 Jul 2025 19:34:29 +0000
ROA not after:            Tue 07 Jul 2026 19:39:29 +0000
asID:                     269111
IP address blocks:        45.178.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl
                          rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 21:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:c9:d3:19:b2:c4:2a:5d:9f:cc:a0:c1:72:59:14:b5:90:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5D42D93E58C00245A6501E9C01C833BB782217
        Validity
            Not Before: Jul  8 19:34:29 2025 GMT
            Not After : Jul  7 19:39:29 2026 GMT
        Subject: CN=C8D748F83A216CEA74C4A84F892F46525B506CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5e:36:77:02:12:c5:03:b4:5e:90:62:89:d5:
                    46:87:32:f0:e6:9e:f3:b5:7d:92:ec:a8:1a:b6:aa:
                    b6:cf:c0:32:ef:03:8d:4a:8b:cf:89:00:8e:da:60:
                    11:8e:92:8e:9f:78:90:cb:8c:c4:96:9f:97:02:a5:
                    3c:d1:74:d1:5e:19:41:5c:9e:13:8a:e3:ee:d0:27:
                    1c:5d:a9:15:aa:f1:e4:d5:75:4b:1e:57:35:dd:9b:
                    6d:50:ab:19:d3:ca:a7:ba:0d:70:31:c7:69:c7:f4:
                    5e:a1:f5:b9:1a:35:d7:23:22:da:cb:82:c7:a0:1e:
                    74:e9:df:02:b4:8c:e5:d6:80:43:39:29:8c:ce:07:
                    63:87:24:28:a8:00:eb:9f:b5:03:e8:07:d1:bb:99:
                    de:52:90:6e:46:6c:47:45:a8:e0:94:2b:e5:70:ce:
                    07:50:a6:30:48:8c:f0:ea:79:f9:f1:78:79:8d:68:
                    7c:6a:fa:c6:ac:3a:cb:ae:e9:7a:ae:09:53:f1:bc:
                    2b:85:5b:1d:00:29:8c:3d:75:03:fa:23:6b:e6:d3:
                    28:e6:6f:cf:a5:c5:a3:3d:8b:ab:3c:7c:86:9e:75:
                    6a:e8:f9:41:ec:55:7a:b9:5d:5d:74:ad:2d:9f:9e:
                    ca:e7:62:ae:58:64:a4:0e:f6:82:d0:b8:f3:6b:42:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D7:48:F8:3A:21:6C:EA:74:C4:A8:4F:89:2F:46:52:5B:50:6C:D1
            X509v3 Authority Key Identifier:
                keyid:6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231342e302f32332d3233203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:42:66:c3:f1:2d:ad:b5:ec:07:1c:5d:e1:39:14:ef:73:07:
         31:7e:b1:20:43:02:5f:81:5e:37:69:51:3f:9d:c7:b4:0c:4d:
         19:eb:2e:27:67:e3:1b:3d:f4:3f:67:08:9c:5e:9a:26:37:bf:
         f0:d2:78:57:40:45:5b:2d:89:ba:32:0b:5a:cf:b5:19:d7:5c:
         f1:20:57:de:c3:29:33:a2:16:f7:ee:e5:6a:ef:18:dd:14:8d:
         4f:c4:7e:69:97:75:31:78:15:86:35:5c:43:4d:0d:47:e9:71:
         c8:dc:ca:d0:83:86:2b:56:cd:e4:cd:80:3b:19:ba:64:a7:c7:
         77:db:e4:07:1f:03:4d:15:5d:46:fa:3e:c6:b6:aa:c1:42:2b:
         ec:eb:b7:e9:a9:6c:1f:e4:26:12:59:1e:cb:83:0e:90:0c:ae:
         54:07:10:c8:3e:c3:d6:30:f2:f4:98:b7:16:68:dd:df:03:b1:
         c8:ef:09:56:bf:21:71:b5:47:2f:6e:cf:48:41:e7:2b:00:70:
         cb:be:e1:a8:8f:a5:83:bf:ed:e7:1c:10:0d:d2:22:ed:2d:25:
         14:68:2d:46:5c:ab:25:3c:a5:65:04:8d:e9:5b:ba:ef:38:89:
         fd:51:92:b3:7b:9f:4b:13:7e:7d:92:fb:05:b5:58:d7:d5:90:
         d8:73:35:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:53:18 2025 by rpki-client