Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230362e302f32342d3234203d3e20323636353434.roa
File:                     34352e36352e3230362e302f32342d3234203d3e20323636353434.roa (raw, json)
Hash identifier:          bGj38jL+Tux3Y1yhw7HwcPOr+f1DOFIlXdpjWhxceck=
Subject key identifier:   6F:13:EF:97:16:EE:A1:4F:98:88:0A:66:BB:D8:D3:0C:A8:E5:81:1D
Certificate issuer:       /CN=3806DB121C9269AE400CDA71100F88AF76F0469C
Certificate serial:       45E665940632CCFF29823E1329A4B275AFB1DFE9
Authority key identifier: 38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230362e302f32342d3234203d3e20323636353434.roa
Signing time:             Thu 08 May 2025 19:04:25 +0000
ROA not before:           Thu 08 May 2025 18:59:25 +0000
ROA not after:            Thu 07 May 2026 19:04:25 +0000
asID:                     266544
IP address blocks:        45.65.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e6:65:94:06:32:cc:ff:29:82:3e:13:29:a4:b2:75:af:b1:df:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3806DB121C9269AE400CDA71100F88AF76F0469C
        Validity
            Not Before: May  8 18:59:25 2025 GMT
            Not After : May  7 19:04:25 2026 GMT
        Subject: CN=6F13EF9716EEA14F98880A66BBD8D30CA8E5811D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:73:31:d5:05:cd:2a:8c:0f:4d:be:d5:b8:82:
                    0d:53:b9:16:00:6e:4e:d1:22:02:28:ab:28:2a:22:
                    3b:02:ea:6b:b3:bf:d3:4c:4b:c5:a5:5c:67:6d:06:
                    80:7e:94:af:87:1d:41:b7:9a:21:56:32:0d:bf:45:
                    bb:39:b5:c0:26:0d:21:39:35:a6:bf:67:0c:f1:18:
                    7c:63:75:eb:3b:cc:b8:6a:2d:ed:03:08:1c:9b:4e:
                    8f:8b:5e:2f:e0:70:f2:0e:10:de:d5:79:2f:8a:72:
                    84:46:55:5c:9e:5a:53:7a:ed:6d:00:f8:00:8b:2a:
                    8a:dd:64:56:a7:a7:5e:89:9c:07:bd:7a:49:a1:bb:
                    73:14:a1:29:d3:c4:9f:2d:41:f8:cb:9e:73:df:b3:
                    9c:57:db:f5:27:e5:b9:5c:8d:1c:5a:d0:72:dc:9f:
                    c2:e6:8c:01:28:3b:78:8e:f8:4a:85:ce:69:86:ed:
                    da:86:ad:0a:4e:1a:55:7a:b1:0c:66:00:13:3a:19:
                    9c:c4:95:17:c1:de:58:35:b3:74:ae:be:6b:64:79:
                    43:d9:23:6d:0d:55:82:7a:d8:e9:71:05:c0:7a:81:
                    fc:df:4f:f3:e1:ab:b5:a1:80:a5:f5:34:b3:67:28:
                    52:6b:42:b6:17:59:21:6e:25:01:4f:de:0a:29:95:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:13:EF:97:16:EE:A1:4F:98:88:0A:66:BB:D8:D3:0C:A8:E5:81:1D
            X509v3 Authority Key Identifier:
                keyid:38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230362e302f32342d3234203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:8e:72:d7:57:71:76:de:0b:94:9d:82:f2:23:91:8c:1a:34:
         bb:91:a4:4e:46:60:be:8e:c5:8a:24:26:4e:83:5d:e4:d4:3d:
         97:24:d6:61:0d:cd:6b:60:d0:58:83:c5:b3:74:56:02:b7:eb:
         98:86:2d:1b:37:b7:4a:e3:6e:85:2d:e2:0a:80:c1:90:34:73:
         96:5c:d5:32:36:ce:ec:b5:16:bf:d1:c4:29:74:be:1a:26:41:
         67:54:4d:fd:20:61:3a:72:2f:93:3d:22:d4:ff:c5:ea:1c:72:
         19:1d:3f:d6:a3:00:e9:b5:d0:29:5c:85:0d:c1:cc:a4:02:7f:
         e1:b0:b1:7e:83:42:88:aa:b4:98:0c:d9:a0:53:b4:04:c5:3c:
         a3:fd:3a:62:a7:0d:df:b2:67:47:29:db:b7:34:f0:3b:e8:4c:
         e6:31:99:63:53:20:dd:bd:93:df:90:dd:78:af:cc:1d:1f:1a:
         77:5c:39:d1:28:26:4e:4b:4f:77:1f:ec:6b:59:4b:1b:60:1f:
         02:47:e9:7e:6e:41:54:3c:96:4f:fa:41:15:39:2c:a0:9c:ec:
         15:5c:8d:3d:2d:b7:63:91:82:6a:dc:cc:ba:12:10:13:c0:e8:
         f1:ec:03:19:c3:7a:6e:ec:d8:55:20:14:81:82:7d:c4:c7:79:
         c1:12:62:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:01:46 2025 by rpki-client