Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32342d3234203d3e20323639363730.roa
File:                     34352e3139312e36342e302f32342d3234203d3e20323639363730.roa (raw, json)
Hash identifier:          et2d5C1LvbVi+3HziuMqUpcdHLCkSTbuGOUrlOTo/FI=
Subject key identifier:   43:47:5B:94:0E:FD:1B:AE:18:64:0C:72:CA:DA:61:DB:8C:8A:17:DF
Certificate issuer:       /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial:       63C43A9A754A0E9B26E56F61DD83D41EFD22EF07
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32342d3234203d3e20323639363730.roa
Signing time:             Wed 05 Mar 2025 20:00:24 +0000
ROA not before:           Wed 05 Mar 2025 19:55:24 +0000
ROA not after:            Wed 04 Mar 2026 20:00:24 +0000
asID:                     269670
IP address blocks:        45.191.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl
                          rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c4:3a:9a:75:4a:0e:9b:26:e5:6f:61:dd:83:d4:1e:fd:22:ef:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
        Validity
            Not Before: Mar  5 19:55:24 2025 GMT
            Not After : Mar  4 20:00:24 2026 GMT
        Subject: CN=43475B940EFD1BAE18640C72CADA61DB8C8A17DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:7f:79:2e:f2:b9:11:83:fe:4c:53:14:d9:
                    8c:b1:8a:b8:6f:4a:81:f1:a6:96:3a:ff:93:63:f2:
                    e4:63:de:f4:cf:01:e6:92:c2:c4:e4:6e:43:2d:dd:
                    36:f0:f3:9a:26:12:a1:31:b7:90:32:95:70:2a:7c:
                    1b:a1:87:ed:eb:bb:7b:16:e3:0e:ae:19:db:5c:5d:
                    53:9a:7d:31:e8:e9:02:97:28:4f:35:b6:9c:65:59:
                    76:7a:71:e4:3b:70:56:c6:d1:ce:4e:67:84:51:12:
                    cf:7a:3f:5d:2d:08:35:50:4d:b7:c6:d9:3e:5c:a8:
                    b9:c9:d8:03:a1:2f:82:f2:df:0b:0d:6e:1a:44:60:
                    a6:59:97:95:e0:02:76:72:c7:aa:41:84:53:d5:f3:
                    d5:4d:f7:a9:6d:76:cd:c8:ce:c0:42:82:c7:79:a8:
                    07:5b:4f:d7:9c:61:b7:fd:8d:15:7d:ce:9c:6a:15:
                    a2:e8:69:bf:d3:26:b6:e2:c9:99:39:84:4e:8b:f3:
                    4f:4b:d0:9a:4e:bd:79:66:38:0b:0e:73:00:1c:20:
                    66:c0:6d:b5:06:74:d9:eb:57:f3:f2:ba:3c:3a:f7:
                    93:d7:3d:01:c0:b8:0f:0c:c6:74:24:a3:c5:7b:dc:
                    2b:5c:45:e6:df:90:92:8e:4c:28:3c:f2:bd:b8:70:
                    b6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:47:5B:94:0E:FD:1B:AE:18:64:0C:72:CA:DA:61:DB:8C:8A:17:DF
            X509v3 Authority Key Identifier:
                keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32342d3234203d3e20323639363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c5:b1:23:d7:82:29:23:a6:b3:23:96:d4:bf:37:9f:a1:17:
         b2:c5:d3:a7:53:e7:e0:cd:33:02:a5:3e:fc:7e:69:29:ae:ee:
         a1:5d:cf:5b:2f:c8:93:c2:c1:13:08:1c:94:78:3f:a2:78:3e:
         d6:fd:05:1d:71:65:75:49:bf:96:ff:e0:9f:ad:78:dc:20:61:
         3f:74:14:f6:0d:83:43:33:27:69:e5:77:00:a9:0e:d2:d5:00:
         a7:4f:52:38:52:59:90:f4:05:12:3b:fa:97:bd:ea:35:3d:c5:
         2e:9f:5e:c4:4c:55:6a:7c:cf:02:18:4e:ba:07:82:86:fa:43:
         e0:26:83:17:53:1e:9e:18:4b:2e:d0:ff:3e:0c:a3:79:63:76:
         5f:c4:33:4f:79:d7:43:16:8a:e1:13:a3:4b:5b:f8:99:e8:aa:
         1d:86:6a:ff:74:7b:0b:2c:cf:23:a3:29:d0:cb:ba:38:22:b1:
         3a:8c:d6:1e:fe:5e:a8:9b:14:e1:d9:78:3c:50:7c:b2:01:39:
         31:88:f8:f8:e1:2e:4c:31:e7:7c:f8:bd:8d:fd:58:13:1a:e6:
         88:28:43:3b:47:49:f8:03:0a:03:1b:37:d7:4c:c7:23:c6:88:
         c2:23:ab:d5:d1:a2:e7:ff:6b:0b:75:07:0c:d6:49:16:f8:23:
         b6:23:14:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:55 2025 by rpki-client