Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39352e302f32342d3234203d3e20323638313439.roa
File:                     34352e3137302e39352e302f32342d3234203d3e20323638313439.roa (raw, json)
Hash identifier:          po9AeQ5x5xqWrYXTesqKj8iQFj7agd+pzDK88oMesyc=
Subject key identifier:   6A:B2:3E:B2:A2:C0:65:00:CC:7A:34:D0:87:01:B1:48:F8:4E:62:95
Certificate issuer:       /CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
Certificate serial:       05D297205C2029427A800FBC9EA3A10CC679E6B2
Authority key identifier: 62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39352e302f32342d3234203d3e20323638313439.roa
Signing time:             Wed 02 Apr 2025 00:13:23 +0000
ROA not before:           Wed 02 Apr 2025 00:08:23 +0000
ROA not after:            Wed 01 Apr 2026 00:13:23 +0000
asID:                     268149
IP address blocks:        45.170.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl
                          rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 15:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d2:97:20:5c:20:29:42:7a:80:0f:bc:9e:a3:a1:0c:c6:79:e6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62629DD122858DB38443A4A56BD5A3075CCFACA6
        Validity
            Not Before: Apr  2 00:08:23 2025 GMT
            Not After : Apr  1 00:13:23 2026 GMT
        Subject: CN=6AB23EB2A2C06500CC7A34D08701B148F84E6295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:68:b9:27:ee:94:a0:7e:da:d0:a3:96:cc:
                    41:02:d3:99:65:ae:01:22:5e:8d:26:3f:13:be:01:
                    5a:f5:3b:3d:aa:0e:7b:a4:9c:98:f2:77:3f:aa:75:
                    fb:96:cb:7a:fb:64:30:76:c3:91:04:07:3b:d2:b5:
                    0b:45:93:a3:eb:5b:2f:a8:32:89:cd:13:31:80:85:
                    8e:2a:cd:e5:d3:cf:ec:ea:06:16:98:d5:4b:e6:0f:
                    4d:a2:60:81:30:3a:d0:64:e0:a8:6f:45:46:56:f1:
                    86:84:19:a0:0d:f1:83:67:67:3c:21:8b:6c:7f:c2:
                    88:d3:fa:6c:d3:60:11:21:d6:0d:da:95:f8:99:14:
                    a7:88:de:f3:9b:a5:e4:f5:87:8a:86:da:03:59:53:
                    df:16:6b:7c:6d:da:64:9d:30:58:83:62:0e:22:42:
                    b6:c0:25:db:bb:f3:fa:c2:21:ea:7f:e3:1f:de:80:
                    f0:c7:19:9a:9f:e2:71:9c:fe:21:a8:d2:5b:ac:91:
                    d0:dc:e0:74:eb:6a:01:13:58:b1:f6:ff:fd:a2:9f:
                    2c:3e:99:73:03:77:5d:ad:a1:68:54:92:b4:72:b3:
                    bc:30:bc:86:e8:dd:6b:11:44:9b:56:24:fe:15:6e:
                    7d:cc:f7:c3:8a:62:2f:7a:d5:ae:6e:11:3e:13:2b:
                    ce:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B2:3E:B2:A2:C0:65:00:CC:7A:34:D0:87:01:B1:48:F8:4E:62:95
            X509v3 Authority Key Identifier:
                keyid:62:62:9D:D1:22:85:8D:B3:84:43:A4:A5:6B:D5:A3:07:5C:CF:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/62629DD122858DB38443A4A56BD5A3075CCFACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62629DD122858DB38443A4A56BD5A3075CCFACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39352e302f32342d3234203d3e20323638313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:a5:11:e0:d4:ab:12:ec:5a:dc:66:6f:de:57:6c:06:94:12:
         c3:c2:5a:d8:aa:93:ee:7e:13:10:37:99:02:a4:88:f9:fe:e3:
         62:9b:f7:af:7a:22:89:9e:8a:3b:96:ea:e1:08:c3:4d:0d:bd:
         57:1d:f5:c0:39:9f:61:eb:e0:a4:3e:6a:31:9c:19:ca:2b:4d:
         93:08:17:27:15:3c:68:30:ac:6d:ad:13:dc:b5:ca:87:d6:fe:
         0a:ce:e4:4f:b7:b6:af:5b:cf:19:01:b6:53:26:91:9f:5a:55:
         63:17:9c:0b:80:2d:15:7c:f3:35:9c:37:a4:67:41:53:34:8c:
         00:ae:30:46:8b:d2:32:9a:4c:89:a2:9f:a3:be:e9:cf:25:60:
         22:77:24:74:ca:79:df:8c:98:67:5e:a0:c2:4c:8e:87:40:ef:
         84:83:34:75:26:91:be:61:41:f0:88:b0:78:a6:5e:a4:71:33:
         bd:34:8e:d5:23:3b:a8:35:02:b7:b6:43:62:1c:7a:a0:b9:29:
         90:83:88:9f:61:c5:93:14:79:f1:c4:e2:81:1f:12:e0:e7:f9:
         85:76:2c:0c:7d:e3:98:40:d8:f7:21:33:27:80:ac:2c:62:5f:
         bd:1f:ba:f2:05:2d:94:ad:a7:0a:42:74:e3:a8:19:f8:98:c4:
         30:04:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:39:12 2025 by rpki-client