Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3233302e302f32332d3233203d3e20323639343333.roa
File:                     34352e3138352e3233302e302f32332d3233203d3e20323639343333.roa (raw, json)
Hash identifier:          4C0jNU08j2gebVFpUGPF/moqFtZQpyvRJNizHVESTjo=
Subject key identifier:   B6:37:A7:79:30:FA:C5:F8:6C:14:EA:C6:23:61:8C:AC:8A:97:C7:CD
Certificate issuer:       /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Certificate serial:       6D9D3FC77E14B74401CFBD1F931C9BA75C66F950
Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3233302e302f32332d3233203d3e20323639343333.roa
Signing time:             Fri 07 Mar 2025 00:47:54 +0000
ROA not before:           Fri 07 Mar 2025 00:42:54 +0000
ROA not after:            Fri 06 Mar 2026 00:47:54 +0000
asID:                     269433
IP address blocks:        45.185.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl
                          rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 01:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9d:3f:c7:7e:14:b7:44:01:cf:bd:1f:93:1c:9b:a7:5c:66:f9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
        Validity
            Not Before: Mar  7 00:42:54 2025 GMT
            Not After : Mar  6 00:47:54 2026 GMT
        Subject: CN=B637A77930FAC5F86C14EAC623618CAC8A97C7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:85:05:9b:17:bf:df:79:24:1d:88:43:2d:
                    df:c1:a8:41:ac:12:7f:f6:bc:ac:01:00:ab:88:57:
                    cd:ea:a6:f2:5f:d3:a0:e5:9a:2f:64:04:f6:e8:9c:
                    6c:b9:6a:b6:52:5f:47:48:fd:af:bf:fd:6b:3f:f4:
                    f0:d2:33:09:8c:d9:9e:d1:0f:20:bc:4f:31:29:1b:
                    ac:82:6d:a1:79:eb:2a:91:ea:e8:e2:5f:67:ab:84:
                    5c:d3:cb:b1:41:3a:2d:56:f0:b9:6f:b7:93:30:ed:
                    2b:ee:6b:31:03:f0:b9:f7:3c:8f:f4:2d:8d:8d:74:
                    ea:28:c8:95:63:10:c6:be:f3:06:4a:19:00:32:c7:
                    d1:35:4f:4c:2b:c1:ac:90:3e:a5:d8:d7:ec:ed:79:
                    34:85:22:da:f6:60:38:41:02:8b:c9:37:98:85:59:
                    9c:9e:f1:b5:3a:2e:2b:2c:76:5b:05:dc:8e:19:02:
                    81:73:81:78:0d:5d:b4:04:b9:75:03:14:93:74:6e:
                    39:4c:ae:72:fe:f6:08:e2:b1:50:f2:3c:16:ec:82:
                    be:79:8b:a1:3e:01:e0:76:1e:b4:7d:98:54:bd:af:
                    79:22:a1:71:96:b3:15:b2:86:48:07:29:51:92:dd:
                    de:b8:93:05:3e:4d:b1:85:40:15:54:7b:27:d3:2a:
                    26:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:37:A7:79:30:FA:C5:F8:6C:14:EA:C6:23:61:8C:AC:8A:97:C7:CD
            X509v3 Authority Key Identifier:
                keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3233302e302f32332d3233203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:67:04:7c:c6:05:99:b8:02:ed:5d:f5:92:a3:d9:5d:ba:04:
         0c:c4:96:c6:9f:41:96:fc:b8:cf:73:8f:4d:3d:6b:d2:54:29:
         ec:55:0f:16:97:c7:1a:c8:09:47:ec:da:fe:cd:44:a9:e4:84:
         86:11:aa:29:36:48:74:07:62:90:13:96:ac:7f:5d:f6:bd:de:
         b8:ce:c1:75:4d:d4:d2:40:6a:ea:a5:a3:61:2d:0f:f2:f8:9a:
         6f:e0:d4:2c:49:8d:c5:8d:c8:ab:00:06:ea:7f:80:e7:f7:c4:
         a8:00:b2:9b:5d:cd:0f:35:99:60:c7:44:03:aa:25:9e:ca:0e:
         14:de:c1:96:d6:91:46:46:25:42:d1:0a:8d:74:4e:83:3a:aa:
         ba:7e:33:88:f6:60:72:7b:6e:60:3d:ea:de:92:d1:05:47:9c:
         3f:21:77:5a:54:a3:9e:69:05:e9:4b:14:27:51:6a:e7:aa:e2:
         3d:59:f5:91:9b:92:5b:6f:e6:07:71:e4:5b:23:c9:b2:9c:18:
         f7:21:bc:b3:e9:16:7f:3f:9c:87:bc:e5:11:70:f5:83:af:2d:
         16:1e:73:40:b7:f8:1e:83:84:38:55:c1:7e:e0:c0:65:13:d2:
         de:b6:a3:0c:ef:2d:cf:2e:44:b5:e1:4b:4b:57:43:61:1a:b9:
         ce:e3:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:27:48 2025 by rpki-client