Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230342e302f32342d3234203d3e20323636353434.roa
File:                     34352e36352e3230342e302f32342d3234203d3e20323636353434.roa (raw, json)
Hash identifier:          ZDV9joO7pQJGZb3hNWZAfEIDaKavwNz5Ecx2KuR8oRA=
Subject key identifier:   C8:52:E6:1A:24:A5:D2:07:D0:49:3A:91:E9:47:C3:A3:7B:E9:2C:C9
Certificate issuer:       /CN=3806DB121C9269AE400CDA71100F88AF76F0469C
Certificate serial:       2906E2C4AD4A98943E9559789ED476317CFE8E
Authority key identifier: 38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230342e302f32342d3234203d3e20323636353434.roa
Signing time:             Thu 08 May 2025 19:04:25 +0000
ROA not before:           Thu 08 May 2025 18:59:25 +0000
ROA not after:            Thu 07 May 2026 19:04:25 +0000
asID:                     266544
IP address blocks:        45.65.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 00:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:06:e2:c4:ad:4a:98:94:3e:95:59:78:9e:d4:76:31:7c:fe:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3806DB121C9269AE400CDA71100F88AF76F0469C
        Validity
            Not Before: May  8 18:59:25 2025 GMT
            Not After : May  7 19:04:25 2026 GMT
        Subject: CN=C852E61A24A5D207D0493A91E947C3A37BE92CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:78:d3:c4:13:6c:b8:04:ff:a0:cc:6a:be:cf:
                    6c:db:21:55:cf:b3:ed:d7:02:1b:6b:d7:0a:af:37:
                    76:76:8b:14:eb:1d:4c:7b:ee:0b:68:38:cc:1e:98:
                    28:34:b9:5a:ee:12:7c:ac:39:0f:7d:1a:8d:cc:2b:
                    3e:08:02:93:f6:6c:e2:e4:65:52:47:56:1b:c1:2f:
                    c4:73:80:db:e5:28:52:1f:5b:68:3c:59:f3:05:dc:
                    52:dc:97:19:33:d2:03:e6:db:15:32:44:28:b2:bd:
                    dd:11:17:c4:8e:2a:05:1a:3b:2d:f4:94:39:34:5f:
                    a5:90:dd:e0:a8:b0:25:d7:bc:55:ef:d6:d3:3e:3e:
                    50:ab:42:93:5d:be:98:4b:a3:16:71:fc:85:7c:4a:
                    9f:50:b3:b7:b8:8b:66:5a:81:49:b7:47:1f:b2:15:
                    9e:1e:70:3f:a2:7e:d1:96:0b:bf:3f:0d:29:6b:5a:
                    14:be:7f:93:77:d9:e4:7f:09:ea:ed:de:66:e6:0f:
                    c8:66:6f:01:15:1f:d7:55:86:58:22:57:cb:0b:78:
                    ed:c6:08:88:e1:62:3c:5d:46:24:2a:63:12:20:92:
                    d3:2d:11:59:d5:66:65:5d:cc:01:63:6c:c9:b0:c7:
                    6c:a9:db:a3:12:4a:91:0d:17:1c:52:8d:57:79:a8:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:52:E6:1A:24:A5:D2:07:D0:49:3A:91:E9:47:C3:A3:7B:E9:2C:C9
            X509v3 Authority Key Identifier:
                keyid:38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230342e302f32342d3234203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:49:9b:88:e9:87:47:07:1a:05:ac:95:b0:f7:03:6c:df:
         d9:2d:36:35:34:02:90:87:94:9f:e1:f4:29:24:26:18:7c:5b:
         61:48:1b:64:56:cd:60:7a:84:ce:df:6b:f9:5d:3a:6c:29:c9:
         3a:e2:f3:69:70:29:03:87:3e:d5:db:3c:d1:8f:70:43:ed:72:
         0f:89:92:46:06:4c:3a:59:14:18:32:f7:96:5a:b7:20:a5:97:
         36:1c:5d:45:e3:05:43:61:b7:84:93:2a:c4:de:09:07:93:8e:
         d8:c4:db:b3:cf:c9:50:34:59:88:c9:7b:eb:11:e7:f0:a4:9c:
         6c:74:c0:58:24:ac:21:80:c3:d0:1f:55:dd:42:b0:44:28:fb:
         7d:08:ad:97:19:84:db:7b:67:6c:65:5b:5c:0c:ca:23:cd:fa:
         7c:f4:3b:86:65:dc:f4:15:95:b9:32:39:39:bc:f2:03:9d:bc:
         cc:71:8a:1a:bb:7a:4e:ae:0d:00:d5:5e:be:be:4c:dc:12:1c:
         4f:95:75:fb:fc:93:b9:43:00:c1:29:b9:eb:49:61:cd:b5:cc:
         e0:45:22:f0:a2:14:6d:59:76:31:36:b6:55:1b:6a:eb:00:16:
         40:f8:de:eb:ff:1f:e4:cc:73:62:1c:8c:88:4d:c7:28:6d:d5:
         e5:96:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:32:15 2025 by rpki-client