Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139362e302f32322d3232203d3e20323637323138.roa
File:                     34352e3233312e3139362e302f32322d3232203d3e20323637323138.roa (raw, json)
Hash identifier:          eSOEnZsEgSy3DAB3PmWodhMBtPql8QfL9Tl8ax9aniE=
Subject key identifier:   F6:5F:B8:FF:03:98:7F:18:E2:C2:D7:D0:24:6B:D3:0A:3F:A4:52:7C
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       6A44E031BE30C4D97BD5EFC0EB301C48502189D1
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139362e302f32322d3232203d3e20323637323138.roa
Signing time:             Thu 06 Mar 2025 08:27:14 +0000
ROA not before:           Thu 06 Mar 2025 08:22:14 +0000
ROA not after:            Thu 05 Mar 2026 08:27:14 +0000
asID:                     267218
IP address blocks:        45.231.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl
                          rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:44:e0:31:be:30:c4:d9:7b:d5:ef:c0:eb:30:1c:48:50:21:89:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Mar  6 08:22:14 2025 GMT
            Not After : Mar  5 08:27:14 2026 GMT
        Subject: CN=F65FB8FF03987F18E2C2D7D0246BD30A3FA4527C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:04:a0:4f:d1:d3:14:b0:bd:c8:cb:cc:1f:
                    27:a4:ee:ab:f1:70:e9:e7:58:bc:b8:5a:8f:ed:70:
                    c4:30:6e:12:40:ab:2d:4b:47:d7:0e:bb:01:9c:c6:
                    ad:71:4f:1e:45:63:20:ca:17:87:9b:fe:7c:4f:f4:
                    40:f4:9a:57:aa:bd:5c:1f:48:15:ae:b4:3a:db:77:
                    29:d6:ca:39:d4:b6:14:de:e5:99:6d:06:ff:45:65:
                    f3:b0:5c:02:14:83:10:82:7e:08:08:19:eb:d1:ba:
                    ec:95:64:9b:7d:91:44:5c:7a:89:b8:55:e4:c2:e9:
                    d2:29:46:f9:6e:38:1f:ae:a8:d5:bb:34:49:34:76:
                    5c:e8:47:8d:41:f5:19:e6:05:21:f7:19:8a:a9:f2:
                    4f:d9:58:00:50:98:a8:9a:d3:a9:77:07:58:1f:ab:
                    34:56:fb:60:60:6b:63:d7:01:cc:14:27:42:22:43:
                    36:11:d5:bf:ed:9e:31:d2:a9:43:59:d3:47:b9:a0:
                    08:b3:71:3d:32:08:28:ee:6b:7f:70:fe:d1:e0:29:
                    74:41:e7:7b:4b:3a:a7:32:a9:8e:e3:ae:38:e0:19:
                    93:9b:a3:e7:06:e3:d4:b6:cc:60:6c:2c:ee:76:d9:
                    ae:65:59:ed:8c:ab:fa:04:eb:b4:e8:83:db:75:4a:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5F:B8:FF:03:98:7F:18:E2:C2:D7:D0:24:6B:D3:0A:3F:A4:52:7C
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139362e302f32322d3232203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:eb:a7:0d:e0:b1:5e:62:3f:f5:ed:b5:1e:7e:82:43:3b:7f:
         c1:b1:d6:5c:f3:6f:16:3a:05:ba:de:25:c4:cf:ad:e3:8b:3d:
         a5:11:75:46:6a:73:97:6c:8a:7e:e6:ec:26:cc:85:a1:a2:fb:
         ed:b7:47:ab:eb:ff:d9:51:da:3e:0e:99:38:7f:d4:25:f4:9b:
         bc:13:4f:02:c7:86:60:c7:76:6e:8e:9b:fe:0d:1d:da:bc:50:
         4d:7d:b7:a4:e2:b3:48:aa:b8:79:9a:8a:e8:e3:12:ed:48:07:
         56:94:13:dd:98:4f:1c:24:8f:21:e4:34:4a:15:ee:10:60:51:
         5f:c7:7a:80:ff:43:b7:f6:c1:58:89:ea:66:35:e0:08:a4:de:
         36:44:dd:40:06:b7:5b:cc:e5:cb:3b:da:7e:bb:0d:e4:16:b2:
         d3:5b:a6:9a:f6:34:08:7b:78:8d:49:3d:23:da:1a:ec:71:20:
         c3:ed:47:d1:95:6d:e9:72:2b:97:6a:68:0a:c1:e7:84:08:42:
         a1:ea:8c:be:59:8a:fa:e2:d2:b8:8a:44:2b:4d:fd:ca:05:ea:
         c6:35:54:4b:bb:f6:a5:53:c1:a7:17:5d:ff:c4:34:dc:53:74:
         46:a6:5a:d1:81:15:5c:20:29:cf:ac:6f:fa:20:be:40:8b:03:
         ba:ff:db:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:32:31 2025 by rpki-client