Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36362e302f32332d3233203d3e20323639363730.roa
File:                     34352e3139312e36362e302f32332d3233203d3e20323639363730.roa (raw, json)
Hash identifier:          OPfX4aH9VidbAvjo7i8JO5PxyNZKwBWelDx98S3S08Q=
Subject key identifier:   36:F7:10:3A:8F:20:92:B9:00:DD:AE:91:1E:C5:1B:C3:AA:87:C7:3A
Certificate issuer:       /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial:       66D5DAC9054A1B7115420E3BB46FBEB59C9F9147
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36362e302f32332d3233203d3e20323639363730.roa
Signing time:             Wed 05 Mar 2025 20:00:23 +0000
ROA not before:           Wed 05 Mar 2025 19:55:23 +0000
ROA not after:            Wed 04 Mar 2026 20:00:23 +0000
asID:                     269670
IP address blocks:        45.191.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl
                          rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d5:da:c9:05:4a:1b:71:15:42:0e:3b:b4:6f:be:b5:9c:9f:91:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
        Validity
            Not Before: Mar  5 19:55:23 2025 GMT
            Not After : Mar  4 20:00:23 2026 GMT
        Subject: CN=36F7103A8F2092B900DDAE911EC51BC3AA87C73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:ad:dd:97:52:11:ff:99:d1:46:fb:f4:cf:
                    c3:ff:82:9b:76:d0:27:76:f0:0f:93:1d:44:5f:7b:
                    fa:9f:94:26:25:d7:35:ff:b6:2e:2d:6e:88:2b:f4:
                    33:58:bb:a7:09:e5:21:52:08:d5:2a:b7:1e:3b:3e:
                    0b:85:49:e7:70:38:bb:85:3c:b9:9f:f2:2c:f5:cc:
                    79:0c:08:5b:68:46:af:71:24:52:00:b0:a7:15:31:
                    ef:29:4c:06:16:08:f3:3e:be:5f:47:6f:25:53:48:
                    72:af:86:99:29:fb:5e:27:d3:dc:a8:88:ac:6b:7a:
                    9f:cb:92:df:79:2e:e4:dd:59:a9:f7:4d:db:6e:0a:
                    2e:4f:5c:76:8b:50:c2:28:81:4e:3e:6a:79:12:30:
                    c2:69:92:06:ec:2d:1e:63:10:62:6b:da:9c:61:48:
                    94:eb:4c:7e:a4:93:44:c1:c8:6e:43:1c:ae:83:15:
                    b9:da:25:6e:d5:d1:d4:eb:06:20:df:d2:00:56:14:
                    d3:e3:d0:15:f1:37:a7:f7:af:35:c2:96:5b:9b:63:
                    ea:c4:4f:76:5f:e0:7d:dd:38:84:ff:6e:ff:73:da:
                    40:58:52:c2:16:32:5d:db:95:b5:cc:91:b5:be:17:
                    59:be:c8:85:8a:1e:a3:bc:35:34:9e:aa:b8:d8:35:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F7:10:3A:8F:20:92:B9:00:DD:AE:91:1E:C5:1B:C3:AA:87:C7:3A
            X509v3 Authority Key Identifier:
                keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36362e302f32332d3233203d3e20323639363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:2f:3d:d2:a1:fe:94:5a:85:54:8f:e8:e9:58:eb:a5:11:b2:
         f8:52:7a:32:f9:4d:09:e5:d5:20:c1:3b:19:4d:0c:24:da:cf:
         e4:85:fd:01:1a:91:a7:e1:3a:8d:bd:c5:63:92:86:ee:d0:8e:
         c8:d8:da:3d:1f:ac:56:04:85:2b:67:42:f3:af:a4:c0:f1:09:
         22:75:ce:c8:49:35:46:6f:eb:bf:5c:05:b8:c0:d6:bf:0d:6f:
         02:a7:66:8c:31:e1:ad:bf:4f:d7:4e:b9:36:fb:55:37:49:5f:
         18:9d:f9:eb:ab:bc:7b:08:17:bc:b9:e6:c8:1a:50:dd:a8:ec:
         75:7e:26:c7:cf:c2:c6:51:44:3c:60:62:69:f6:b5:38:36:ee:
         d6:48:92:c3:71:1f:1a:4a:2e:e2:2d:d2:0d:ea:3c:f0:a9:5c:
         b1:0c:59:b8:c5:94:0f:a2:98:dc:0c:3e:c8:d4:27:50:bb:59:
         98:b8:62:71:67:17:03:bc:2d:9f:91:15:73:e3:5b:59:46:48:
         a7:d0:58:0d:8d:14:24:44:fb:4a:69:83:df:e0:16:a1:25:2e:
         b1:3d:3c:42:cd:f0:42:02:74:8d:2b:a5:ed:13:94:09:a3:dc:
         03:94:43:77:bf:60:cd:e7:87:48:1d:10:f2:74:12:82:4a:ff:
         90:8a:64:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:01 2025 by rpki-client