Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3131302e302f32332d3233203d3e20323635393530.roa
File:                     3136342e3136332e3131302e302f32332d3233203d3e20323635393530.roa (raw, json)
Hash identifier:          jEQhr0op4T2g3eVnCxPDwOHTt3Am+RxfPjlvKL7iCeY=
Subject key identifier:   25:94:FC:FC:76:DF:59:57:F6:8B:A6:E5:72:02:69:2B:DC:10:8F:B7
Certificate issuer:       /CN=C6D32F231785FEA26541B55E3CF768D365266570
Certificate serial:       23F835AFFE9EC3761C823163D4B3F34B35820523
Authority key identifier: C6:D3:2F:23:17:85:FE:A2:65:41:B5:5E:3C:F7:68:D3:65:26:65:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3131302e302f32332d3233203d3e20323635393530.roa
Signing time:             Sat 04 Jan 2025 12:06:26 +0000
ROA not before:           Sat 04 Jan 2025 12:01:26 +0000
ROA not after:            Sat 03 Jan 2026 12:06:26 +0000
asID:                     265950
IP address blocks:        164.163.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 10:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f8:35:af:fe:9e:c3:76:1c:82:31:63:d4:b3:f3:4b:35:82:05:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D32F231785FEA26541B55E3CF768D365266570
        Validity
            Not Before: Jan  4 12:01:26 2025 GMT
            Not After : Jan  3 12:06:26 2026 GMT
        Subject: CN=2594FCFC76DF5957F68BA6E57202692BDC108FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:c7:c6:1a:29:49:53:9c:3f:45:81:ab:41:
                    ba:19:30:e9:b6:bf:89:48:28:9d:ef:01:71:9e:59:
                    4d:62:13:13:07:f0:d6:ef:7d:5b:e2:bc:fe:e2:04:
                    9f:9b:5d:81:b3:80:b9:9d:7a:dd:be:f2:74:90:f4:
                    2f:b2:a6:7e:97:92:ab:b0:91:c2:03:f9:c3:7d:95:
                    67:b7:ab:b8:b9:9a:69:a9:bc:14:1b:ff:0d:40:d2:
                    2c:15:ef:f7:70:10:95:32:16:1b:00:82:2f:ef:5c:
                    23:f9:58:c7:6d:e2:25:76:51:c2:d6:a2:58:8c:88:
                    ca:3c:00:2a:0a:c4:3a:ea:da:db:5d:4d:a7:6c:ca:
                    12:0c:d3:34:6b:21:a7:f8:d8:ee:90:07:59:3d:25:
                    3a:c2:41:91:86:32:66:fc:a8:f6:46:10:71:2a:e5:
                    a7:36:5f:d2:ab:8e:66:51:a7:10:e6:f6:61:d9:6e:
                    a3:39:65:56:78:b1:4d:ef:3e:f4:7a:9d:9f:1b:ea:
                    0e:a2:a8:f2:75:7c:63:31:f2:08:91:41:1e:2d:9c:
                    e4:fc:8a:b8:5d:a2:7b:ce:bc:bd:28:58:dc:26:8f:
                    21:66:2b:3f:4f:58:5b:4d:cc:4e:85:a1:9b:86:60:
                    28:f0:e5:14:dc:0b:5b:cf:13:dd:8b:0a:58:24:fe:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:94:FC:FC:76:DF:59:57:F6:8B:A6:E5:72:02:69:2B:DC:10:8F:B7
            X509v3 Authority Key Identifier:
                keyid:C6:D3:2F:23:17:85:FE:A2:65:41:B5:5E:3C:F7:68:D3:65:26:65:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3131302e302f32332d3233203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:86:78:79:28:44:e4:4a:ed:78:bc:bf:51:fa:bd:83:20:56:
         5b:c3:27:92:3b:27:69:d2:8f:02:df:2e:18:07:7d:ed:70:ed:
         9a:6b:73:84:d6:3e:da:f3:01:46:c9:ec:c3:60:99:d2:ff:d2:
         e1:42:51:12:01:2d:e0:41:e5:2a:d9:da:88:67:38:72:8f:a4:
         17:e2:fe:47:c1:d7:8d:0e:11:6a:23:70:4c:64:90:7b:29:ec:
         50:35:fe:55:cd:8f:ad:b5:7d:93:b0:e8:06:b4:d2:ba:65:a1:
         71:43:98:e3:2b:26:f5:d2:82:7a:bd:c4:03:b2:36:ab:11:d8:
         6b:67:45:46:16:38:9f:be:67:af:75:db:b4:5b:85:1e:df:bc:
         f7:77:5d:b6:90:cd:6d:ab:25:c7:8a:ed:5b:e3:00:3c:72:12:
         3d:5f:ca:a6:ce:04:94:5e:e8:58:2d:ae:23:8d:95:8c:5a:88:
         e8:0b:d5:a9:e6:d5:15:57:91:94:92:90:75:b6:0d:f3:51:ea:
         66:db:70:89:6a:68:7c:89:50:3d:59:1d:66:14:68:18:80:f6:
         15:a0:5c:fb:4e:e1:b9:59:e7:82:2e:7c:bb:4f:fc:83:33:2c:
         70:f7:ef:6d:72:cc:69:51:1c:7a:47:64:87:d2:d0:6c:6d:87:
         26:04:28:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:55:38 2025 by rpki-client