Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230362e302f32342d3234203d3e20323638303833.roa
File:                     34352e3136382e3230362e302f32342d3234203d3e20323638303833.roa (raw, json)
Hash identifier:          AyG8dbGhuo0bkKjuRUYq6mIuufpel3zetXDinQI2Mus=
Subject key identifier:   55:7E:2D:19:ED:84:79:C4:9F:DB:0D:78:90:EB:FD:C0:85:47:51:FC
Certificate issuer:       /CN=1697926DE3CD00AA3AC5E65249B50EF179E9908C
Certificate serial:       63BEEB67B456B187625A9FF0C438038C12564663
Authority key identifier: 16:97:92:6D:E3:CD:00:AA:3A:C5:E6:52:49:B5:0E:F1:79:E9:90:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1697926DE3CD00AA3AC5E65249B50EF179E9908C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230362e302f32342d3234203d3e20323638303833.roa
Signing time:             Mon 13 Jan 2025 14:20:38 +0000
ROA not before:           Mon 13 Jan 2025 14:15:38 +0000
ROA not after:            Mon 12 Jan 2026 14:20:38 +0000
asID:                     268083
IP address blocks:        45.168.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/1697926DE3CD00AA3AC5E65249B50EF179E9908C.crl
                          rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/1697926DE3CD00AA3AC5E65249B50EF179E9908C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1697926DE3CD00AA3AC5E65249B50EF179E9908C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:be:eb:67:b4:56:b1:87:62:5a:9f:f0:c4:38:03:8c:12:56:46:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1697926DE3CD00AA3AC5E65249B50EF179E9908C
        Validity
            Not Before: Jan 13 14:15:38 2025 GMT
            Not After : Jan 12 14:20:38 2026 GMT
        Subject: CN=557E2D19ED8479C49FDB0D7890EBFDC0854751FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:79:a1:b2:8b:b1:52:50:4a:0e:45:8e:d0:
                    e3:e1:5e:b8:8b:21:a4:66:63:62:d3:c6:82:89:4a:
                    ed:3c:17:f5:2a:a1:7a:71:c2:9d:fb:d1:96:21:ad:
                    14:48:82:da:41:dd:c2:b6:f7:f4:fb:5d:53:ac:27:
                    13:8e:09:2f:ad:9f:5d:27:ae:08:cd:b0:96:1f:bd:
                    bb:81:18:71:8c:e9:c2:8a:e7:64:4a:50:a4:34:ea:
                    64:ef:56:1a:79:a4:5b:e7:28:de:b6:e6:b1:6f:da:
                    25:7f:50:ec:7b:64:df:02:a0:9c:d3:85:18:82:bd:
                    cf:94:8e:1b:9b:69:70:a9:30:11:67:22:6f:84:f4:
                    c2:2a:27:a8:af:11:80:bb:b0:06:7b:54:13:97:9f:
                    5d:8a:bc:62:34:ba:1a:cc:5e:e4:93:48:fe:32:f8:
                    07:f6:26:fe:3f:b2:5e:3b:8b:2c:61:b3:28:97:b5:
                    9b:57:8f:be:bf:20:ff:c2:2e:70:11:b7:2d:78:79:
                    5a:a0:22:a8:58:89:85:2e:4f:f9:f6:aa:5e:f1:4f:
                    b1:87:d6:63:fc:8a:71:55:f4:69:19:9c:87:e7:cf:
                    ed:fa:3f:1c:39:d7:27:47:0a:18:4f:db:15:cd:03:
                    9c:91:52:ab:2b:d5:69:9c:f1:c8:0a:0c:c8:67:87:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7E:2D:19:ED:84:79:C4:9F:DB:0D:78:90:EB:FD:C0:85:47:51:FC
            X509v3 Authority Key Identifier:
                keyid:16:97:92:6D:E3:CD:00:AA:3A:C5:E6:52:49:B5:0E:F1:79:E9:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/1697926DE3CD00AA3AC5E65249B50EF179E9908C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1697926DE3CD00AA3AC5E65249B50EF179E9908C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230362e302f32342d3234203d3e20323638303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:5d:23:2b:54:38:58:22:56:27:62:9d:c0:d3:83:8e:fd:4c:
         ef:01:f8:ad:a7:97:e7:fc:a4:d5:c0:f5:eb:2a:11:8f:ef:0d:
         54:ca:1b:e7:61:3a:f5:6c:fc:ea:b2:21:07:09:e7:77:1c:91:
         85:13:51:7c:c8:f7:53:27:62:c2:7f:64:ff:6b:10:d0:0a:c1:
         a9:16:85:06:d8:b8:01:42:46:85:d9:10:5b:66:9c:9b:12:99:
         07:62:c2:6a:a8:d9:cc:af:1e:9a:87:28:64:a9:d8:34:3f:83:
         a8:91:ff:ef:b9:a8:ca:84:b0:bd:a8:dd:2e:64:8f:3b:7d:69:
         9f:a4:33:1e:86:09:52:11:07:bb:35:54:99:53:10:ec:b7:f0:
         06:0e:0d:06:d8:d0:fe:5b:99:d8:9a:84:7a:e6:3d:32:73:ea:
         46:54:5b:b5:89:29:84:a8:63:e8:c7:19:6f:b5:03:df:36:88:
         1b:70:19:10:ec:c1:0c:0f:2f:90:b9:07:1d:81:c6:a2:c6:01:
         59:01:a7:dd:86:60:86:9d:77:04:b0:5c:68:06:a7:88:bd:50:
         c4:cb:33:a5:6d:03:3c:9c:47:86:c7:f5:f3:8a:d6:29:b0:e0:
         4b:11:55:83:bf:89:ae:bc:62:28:8f:04:05:a8:10:61:e9:cc:
         1d:8f:59:86
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY77rZ7RWsYdiWp/wxDgDjBJWRmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY5NzkyNkRFM0NEMDBBQTNBQzVFNjUyNDlCNTBFRjE3
OUU5OTA4QzAeFw0yNTAxMTMxNDE1MzhaFw0yNjAxMTIxNDIwMzhaMDMxMTAvBgNV
BAMTKDU1N0UyRDE5RUQ4NDc5QzQ5RkRCMEQ3ODkwRUJGREMwODU0NzUxRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyXmhsouxUlBKDkWO0OPhXriL
IaRmY2LTxoKJSu08F/UqoXpxwp370ZYhrRRIgtpB3cK29/T7XVOsJxOOCS+tn10n
rgjNsJYfvbuBGHGM6cKK52RKUKQ06mTvVhp5pFvnKN625rFv2iV/UOx7ZN8CoJzT
hRiCvc+UjhubaXCpMBFnIm+E9MIqJ6ivEYC7sAZ7VBOXn12KvGI0uhrMXuSTSP4y
+Af2Jv4/sl47iyxhsyiXtZtXj76/IP/CLnARty14eVqgIqhYiYUuT/n2ql7xT7GH
1mP8inFV9GkZnIfnz+36Pxw51ydHChhP2xXNA5yRUqsr1Wmc8cgKDMhnh13xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVX4tGe2EecSf2w14kOv9wIVHUfwwHwYDVR0j
BBgwFoAUFpeSbePNAKo6xeZSSbUO8XnpkIwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk5SQVpxVFVpOUMyZ1lkbThNaEVpcjZOc3ZlQ1VYeHl3d2paWUo4RVM5
TVQvMC8xNjk3OTI2REUzQ0QwMEFBM0FDNUU2NTI0OUI1MEVGMTc5RTk5MDhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OTc5MjZERTNDRDAwQUEz
QUM1RTY1MjQ5QjUwRUYxNzlFOTkwOEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZOUkFacVRVaTlDMmdZZG04TWhFaXI2TnN2ZUNVWHh5d3dqWllKOEVTOU1ULzAv
MzQzNTJlMzEzNjM4MmUzMjMwMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqM4wDQYJKoZIhvcNAQELBQADggEBAGJdIytU
OFgiVidincDTg479TO8B+K2nl+f8pNXA9esqEY/vDVTKG+dhOvVs/OqyIQcJ53cc
kYUTUXzI91MnYsJ/ZP9rENAKwakWhQbYuAFCRoXZEFtmnJsSmQdiwmqo2cyvHpqH
KGSp2DQ/g6iR/++5qMqEsL2o3S5kjzt9aZ+kMx6GCVIRB7s1VJlTEOy38AYODQbY
0P5bmdiahHrmPTJz6kZUW7WJKYSoY+jHGW+1A982iBtwGRDswQwPL5C5Bx2BxqLG
AVkBp92GYIaddwSwXGgGp4i9UMTLM6VtAzycR4bH9fOK1imw4EsRVYO/ia68YiiP
BAWoEGHpzB2PWYY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:32:23 2025 by rpki-client