Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/1/34352e3232352e34382e302f32322d3234203d3e20323636393431.roa
File:                     34352e3232352e34382e302f32322d3234203d3e20323636393431.roa (raw, json)
Hash identifier:          hZ6iomT3ukmJLTITOTnWgn6u0crgTRuzuQRy6ZdAELI=
Subject key identifier:   3F:4A:29:55:84:E0:03:A9:F7:54:69:48:A1:5D:A5:10:22:EE:00:E7
Certificate issuer:       /CN=C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9
Certificate serial:       6F14F4CE102B65C026A70A7496FED86725EE7755
Authority key identifier: C6:B5:E7:2D:E2:A1:E6:D7:CA:48:1D:7F:7E:93:0D:A0:DA:58:B7:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/1/34352e3232352e34382e302f32322d3234203d3e20323636393431.roa
Signing time:             Wed 05 Mar 2025 23:09:44 +0000
ROA not before:           Wed 05 Mar 2025 23:04:44 +0000
ROA not after:            Wed 04 Mar 2026 23:09:44 +0000
asID:                     266941
IP address blocks:        45.225.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/1/C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9.crl
                          rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/1/C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 03:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:14:f4:ce:10:2b:65:c0:26:a7:0a:74:96:fe:d8:67:25:ee:77:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9
        Validity
            Not Before: Mar  5 23:04:44 2025 GMT
            Not After : Mar  4 23:09:44 2026 GMT
        Subject: CN=3F4A295584E003A9F7546948A15DA51022EE00E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:ae:b9:1d:1a:ca:bd:85:5a:df:ec:72:86:
                    35:e0:dc:ff:4e:c4:28:59:0e:60:5c:28:6e:f5:53:
                    7e:52:b9:a4:24:e1:0d:b5:f1:bc:c4:dd:dd:50:82:
                    18:c5:a6:b6:bd:62:6e:bd:95:37:a0:16:15:2f:52:
                    c1:77:5c:25:4c:58:d6:d9:8c:b1:9e:c3:d0:8c:00:
                    e8:8d:9e:b1:f6:db:0d:c0:f6:a9:70:dd:1b:36:e1:
                    fe:7d:69:ef:50:83:3a:92:91:7d:2f:55:fd:cc:58:
                    03:fe:a8:e9:34:a6:1f:89:85:91:52:e3:9b:02:fd:
                    48:df:a8:c8:9a:db:69:6d:8c:84:d2:19:07:c2:c9:
                    bd:7b:be:2d:4c:a8:38:8a:9c:31:ea:b1:9e:7b:0b:
                    56:49:cb:0b:72:4e:25:4b:b6:9d:36:85:9c:6e:5f:
                    c6:08:1d:e1:57:a0:dc:8d:e7:a2:be:89:68:8e:6d:
                    a8:65:57:63:42:b3:03:0e:97:3f:81:2a:0a:c3:51:
                    ca:36:5a:6e:cd:45:8a:75:ac:ba:36:fa:2e:0b:85:
                    77:89:d2:e5:58:88:e7:8d:e7:ed:54:2e:dd:ec:fc:
                    be:c4:72:31:08:3d:22:68:c9:45:04:e6:e0:b0:0d:
                    52:85:59:b9:c5:89:7e:9d:8f:d8:b2:50:3b:1e:15:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4A:29:55:84:E0:03:A9:F7:54:69:48:A1:5D:A5:10:22:EE:00:E7
            X509v3 Authority Key Identifier:
                keyid:C6:B5:E7:2D:E2:A1:E6:D7:CA:48:1D:7F:7E:93:0D:A0:DA:58:B7:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/1/C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B5E72DE2A1E6D7CA481D7F7E930DA0DA58B7E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/1/34352e3232352e34382e302f32322d3234203d3e20323636393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:11:8b:39:46:c2:59:9f:6f:2e:d6:f8:08:ed:df:df:89:ec:
         b3:b4:b4:69:cb:8d:d7:ad:60:93:63:42:50:3b:fa:a1:3a:40:
         96:c4:ac:3d:d0:5f:bc:d4:97:44:82:3c:3e:43:c0:3a:36:d4:
         19:7c:3b:68:f3:f4:be:a9:23:c9:4d:65:50:2d:80:32:fb:c6:
         05:39:75:0a:0a:20:ec:69:a6:00:69:16:a4:58:64:e4:36:06:
         26:86:c2:6f:ff:2a:67:e5:87:a8:05:32:e7:48:e9:0d:df:f6:
         4a:73:f4:e5:9e:76:14:77:f3:3b:cc:6c:8d:d1:29:c2:be:38:
         38:01:ae:69:c1:3d:6f:dc:3a:9e:4b:16:bc:03:e6:20:bc:48:
         8f:08:5d:4a:f2:4e:3c:72:3b:bc:6f:05:8f:eb:29:c5:e6:7a:
         21:94:d2:7f:0d:36:16:15:1f:a2:50:6b:ef:2f:a3:1e:a0:d1:
         40:56:ea:a6:3b:79:3e:b6:1a:b6:b0:21:bd:e4:b6:fc:95:00:
         8f:a8:8a:be:61:56:0b:de:44:53:15:c5:29:9a:7e:37:c4:53:
         56:e1:81:0a:32:4c:af:30:f3:10:8c:a3:38:38:7d:fc:a9:b7:
         65:f3:fd:fe:6d:85:d1:a0:92:da:88:11:10:66:f7:79:1a:cc:
         f0:45:0e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:23 2025 by rpki-client