Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/34352e3137322e3139362e302f32322d3332203d3e20323638373935.roa
File:                     34352e3137322e3139362e302f32322d3332203d3e20323638373935.roa (raw, json)
Hash identifier:          irDRO+HUbeBUBqjyWKczss7pdJEhVxHUIH0uBWTKiIY=
Subject key identifier:   33:28:F8:52:97:0A:AE:E8:EB:0D:F9:9E:A4:53:B0:04:3D:99:84:98
Certificate issuer:       /CN=6138CF2D30FCFED4F7762B658471A5318D10A574
Certificate serial:       263CFE22C964C7AD9785C78DF96AA4AC96220E4F
Authority key identifier: 61:38:CF:2D:30:FC:FE:D4:F7:76:2B:65:84:71:A5:31:8D:10:A5:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6138CF2D30FCFED4F7762B658471A5318D10A574.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/34352e3137322e3139362e302f32322d3332203d3e20323638373935.roa
Signing time:             Tue 18 Mar 2025 20:19:45 +0000
ROA not before:           Tue 18 Mar 2025 20:14:45 +0000
ROA not after:            Tue 17 Mar 2026 20:19:45 +0000
asID:                     268795
IP address blocks:        45.172.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/6138CF2D30FCFED4F7762B658471A5318D10A574.crl
                          rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/6138CF2D30FCFED4F7762B658471A5318D10A574.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6138CF2D30FCFED4F7762B658471A5318D10A574.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 06:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3c:fe:22:c9:64:c7:ad:97:85:c7:8d:f9:6a:a4:ac:96:22:0e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6138CF2D30FCFED4F7762B658471A5318D10A574
        Validity
            Not Before: Mar 18 20:14:45 2025 GMT
            Not After : Mar 17 20:19:45 2026 GMT
        Subject: CN=3328F852970AAEE8EB0DF99EA453B0043D998498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:d5:84:6d:05:ee:c4:19:88:91:02:29:6d:
                    a4:97:ca:9b:4f:c2:94:05:f6:78:af:e6:0b:35:02:
                    45:bd:f2:c2:96:db:f0:1a:82:f7:43:d4:64:df:46:
                    3c:97:10:1a:eb:96:a2:50:a4:ac:6c:35:61:86:aa:
                    d9:3a:39:fe:38:dc:43:34:45:1f:81:73:e4:a7:ca:
                    42:0c:1b:13:67:5f:73:9d:12:41:1f:f1:ec:62:a5:
                    2e:30:be:11:dc:1e:57:2f:d1:c9:01:e9:ce:96:28:
                    eb:9d:60:e6:5b:30:1b:24:4d:dc:70:a5:62:37:db:
                    50:a7:6d:84:6e:1f:7c:e8:ee:e7:f4:b1:d7:dd:b4:
                    48:06:d8:45:38:c7:f7:aa:c6:85:c0:6d:ed:8a:12:
                    2b:41:66:2e:4f:15:a2:c4:e9:aa:b2:82:0b:68:1c:
                    41:e6:ec:53:d2:67:85:72:e7:30:42:7b:f9:69:4e:
                    76:40:42:ce:b8:6a:19:c8:0c:90:a5:f9:3f:f2:7f:
                    70:b7:56:a8:d6:a8:3a:62:26:ac:5f:01:51:c5:28:
                    65:12:e0:e9:c3:c5:2d:6e:65:ba:8b:e1:2a:94:b9:
                    3f:19:4c:07:8d:87:6b:83:ca:3a:2b:62:2f:9d:9c:
                    01:74:ea:40:57:44:ea:0d:13:92:30:cf:bd:93:4f:
                    4d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:28:F8:52:97:0A:AE:E8:EB:0D:F9:9E:A4:53:B0:04:3D:99:84:98
            X509v3 Authority Key Identifier:
                keyid:61:38:CF:2D:30:FC:FE:D4:F7:76:2B:65:84:71:A5:31:8D:10:A5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/6138CF2D30FCFED4F7762B658471A5318D10A574.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6138CF2D30FCFED4F7762B658471A5318D10A574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/34352e3137322e3139362e302f32322d3332203d3e20323638373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:b4:6f:86:49:99:4b:db:86:b1:b3:50:87:03:5d:b4:b1:9b:
         a2:5b:a2:71:74:64:af:cd:05:51:9c:09:13:09:37:02:39:bf:
         62:40:c7:4d:58:0a:72:e4:18:e2:6e:7c:ed:6e:11:ca:d1:b0:
         9d:00:eb:6d:c6:4d:79:40:64:c3:4e:03:7d:4a:ee:39:6f:6c:
         b5:90:53:30:94:0a:30:6a:22:de:52:6f:45:ff:24:56:e9:47:
         ed:04:ef:02:6d:aa:15:b0:73:25:82:e3:87:a2:1e:96:82:10:
         a9:7f:9d:da:f2:67:75:ac:0b:05:49:c1:b3:ee:01:84:45:14:
         f5:ec:0c:49:17:eb:f8:62:28:95:3b:d8:4f:34:2e:af:13:eb:
         97:6b:99:33:48:d8:ca:46:7a:68:1c:ff:ac:2a:da:d6:1a:41:
         20:35:48:09:f3:b4:f1:ed:f3:a0:80:02:de:2f:c6:ce:bb:f2:
         26:e0:71:db:ec:4f:f4:91:c4:b4:39:b0:2f:95:04:7d:63:aa:
         0f:6f:2e:29:f1:c9:f0:2e:b0:26:70:b6:f4:82:8a:f3:c2:63:
         f7:3a:97:c9:09:7b:2c:be:5f:b7:6f:e1:3f:cd:de:d3:2e:a6:
         d1:bc:f8:c1:ca:fa:b8:63:98:21:d0:ee:4c:b3:93:16:b5:8f:
         c6:b6:e7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:50:37 2025 by rpki-client