Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230362e302f32332d3233203d3e20323636353434.roa
File:                     34352e36352e3230362e302f32332d3233203d3e20323636353434.roa (raw, json)
Hash identifier:          y+QEhouUhOoETai0OImI1nXkg8+POCGmWct0GlhGcQw=
Subject key identifier:   99:6D:18:10:48:F8:9E:90:B1:95:6B:DF:A2:20:AD:9A:82:07:C6:92
Certificate issuer:       /CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
Certificate serial:       448A892394ED8F1A7001926873DE30FB7A0C7499
Authority key identifier: 2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230362e302f32332d3233203d3e20323636353434.roa
Signing time:             Fri 14 Feb 2025 17:48:32 +0000
ROA not before:           Fri 14 Feb 2025 17:43:32 +0000
ROA not after:            Fri 13 Feb 2026 17:48:32 +0000
asID:                     266544
IP address blocks:        45.65.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8a:89:23:94:ed:8f:1a:70:01:92:68:73:de:30:fb:7a:0c:74:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
        Validity
            Not Before: Feb 14 17:43:32 2025 GMT
            Not After : Feb 13 17:48:32 2026 GMT
        Subject: CN=996D181048F89E90B1956BDFA220AD9A8207C692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:75:eb:7c:37:66:c4:0c:1d:2e:1c:0a:98:
                    b8:2e:f4:76:c9:05:16:32:d2:d2:8b:c6:d2:4d:8e:
                    b2:2d:e0:4f:14:41:2f:f7:08:55:64:55:6f:cc:e8:
                    d8:9e:d6:6f:ca:dd:6e:8d:24:ce:57:c6:77:3d:98:
                    d2:89:46:6d:ef:22:a2:5f:cc:3a:10:38:7b:7c:ee:
                    4f:e1:9c:bc:67:86:17:74:95:ba:b6:69:b7:f2:08:
                    c6:29:d4:1d:79:31:fd:11:13:10:e5:98:08:c0:56:
                    55:8a:88:99:3f:cf:9b:8e:7d:7e:1c:47:c9:e7:8b:
                    25:e8:69:9a:21:db:e0:5b:2b:ae:4e:a4:73:d7:e4:
                    c1:6e:43:0d:57:10:a9:5d:17:54:db:77:c7:b3:56:
                    bb:be:4a:7c:87:0a:96:b2:21:66:24:b3:53:f9:34:
                    19:12:75:f2:71:48:18:50:44:59:2e:89:28:f1:c9:
                    fc:01:cf:4c:24:e8:67:12:ef:2b:b0:14:d5:e5:7f:
                    56:6c:33:3f:77:8f:0e:ae:37:a7:d9:f0:d8:47:72:
                    c2:eb:c5:ac:24:1d:7f:a1:e6:ee:22:14:44:b5:a9:
                    de:f3:75:8b:32:cf:de:be:6e:23:43:d1:97:fd:c8:
                    c9:ec:3c:ba:3c:41:14:ba:fe:0e:a4:6c:ee:8d:a3:
                    05:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6D:18:10:48:F8:9E:90:B1:95:6B:DF:A2:20:AD:9A:82:07:C6:92
            X509v3 Authority Key Identifier:
                keyid:2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230362e302f32332d3233203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:ea:0a:b8:f7:e7:58:a1:19:6b:5c:e2:fd:ff:c0:e1:7e:fe:
         28:44:c3:d0:d5:6a:cf:75:cd:fa:ef:64:f1:da:94:7f:4d:f0:
         60:d5:18:f8:43:43:85:da:31:2b:54:1b:10:58:bc:c7:6c:97:
         a5:cc:e7:1d:d2:ad:f1:ef:26:07:d8:a0:50:32:9d:a8:00:8f:
         f6:4d:2a:fa:6f:1f:ce:12:b8:b5:c8:45:ea:21:ba:ec:b4:3a:
         00:16:da:12:1c:c9:b6:a8:5c:07:00:ec:05:36:20:00:f1:07:
         8a:a5:15:05:aa:36:99:41:4c:1a:5e:58:3b:b0:6d:1c:bf:9c:
         17:7f:fc:9e:5f:59:65:15:eb:4a:3a:79:72:e9:4b:9c:7d:ab:
         4c:83:8a:b3:a6:ae:04:6a:ed:7c:d9:41:fd:d7:04:97:f7:50:
         dd:2b:9b:46:2c:4f:c1:3c:80:05:17:18:80:94:35:6a:41:5b:
         55:13:d2:9a:dc:b0:ab:76:de:7b:b2:66:a7:99:65:c9:6b:1b:
         3f:19:cc:47:bc:c5:02:62:06:15:bf:a3:69:47:53:e8:a3:ba:
         bf:86:20:58:c3:d1:32:a6:dd:f7:a2:1e:a3:4a:a6:0e:43:13:
         d0:62:4b:f4:a7:ed:8c:d6:7f:63:c4:69:ac:b0:72:79:d4:3c:
         2a:df:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:33:49 2025 by rpki-client