Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/34352e372e36382e302f32322d3234203d3e20323636363130.roa
File:                     34352e372e36382e302f32322d3234203d3e20323636363130.roa (raw, json)
Hash identifier:          I8n/CEMjeZowBxsFIRgPmYCUKjGSDQMjrjCQdX39gBw=
Subject key identifier:   8A:DC:6B:7F:45:1E:39:18:A4:DD:DB:F9:62:D1:8C:C0:F3:8F:17:B9
Certificate issuer:       /CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
Certificate serial:       063ED4773EB7BDE3BED937F35E03B1F3C4FE5C70
Authority key identifier: 6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/34352e372e36382e302f32322d3234203d3e20323636363130.roa
Signing time:             Thu 06 Mar 2025 09:33:13 +0000
ROA not before:           Thu 06 Mar 2025 09:28:13 +0000
ROA not after:            Thu 05 Mar 2026 09:33:13 +0000
asID:                     266610
IP address blocks:        45.7.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl
                          rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3e:d4:77:3e:b7:bd:e3:be:d9:37:f3:5e:03:b1:f3:c4:fe:5c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
        Validity
            Not Before: Mar  6 09:28:13 2025 GMT
            Not After : Mar  5 09:33:13 2026 GMT
        Subject: CN=8ADC6B7F451E3918A4DDDBF962D18CC0F38F17B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:c4:69:fc:8c:0b:11:df:b6:6b:5e:b2:e0:
                    bb:e1:91:a5:0f:71:e8:cb:35:b6:0e:31:93:ec:f2:
                    4f:8a:52:f7:ac:44:c0:21:d5:bb:5e:d1:4b:7c:6e:
                    de:c1:3a:71:e6:56:ff:60:fc:ce:49:fa:62:53:18:
                    3d:91:79:1c:cc:8f:44:6a:f4:42:0a:df:2a:cc:ae:
                    2a:a3:80:a6:ee:bf:89:51:6d:d8:17:43:29:ce:67:
                    01:34:5a:a2:43:17:8a:85:4e:8a:90:ea:a2:4f:eb:
                    d7:d8:2c:7c:cd:45:b0:a9:14:6b:36:8b:a6:4e:22:
                    7a:5b:4e:e9:3d:b2:5f:2d:6f:bc:49:45:58:c0:3c:
                    fb:cb:57:66:f4:27:e5:42:f8:8c:a5:96:eb:9a:ab:
                    63:53:7e:86:57:5d:af:7e:52:ed:13:fc:37:77:74:
                    31:10:54:5b:15:ef:8f:24:d9:7c:0f:4a:71:68:39:
                    49:11:3b:fd:76:52:8b:e2:4c:d6:b6:36:5e:fb:b2:
                    bc:4a:53:0a:b5:39:2f:61:1c:35:06:e6:a1:45:11:
                    55:15:2e:89:7f:6f:28:8a:b6:b0:02:34:bf:dd:7f:
                    1f:0e:e1:27:c7:e3:62:b6:41:b9:0e:29:5a:54:8b:
                    05:98:7d:4c:56:a3:b1:6e:0a:20:9e:c4:f7:2f:6f:
                    97:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DC:6B:7F:45:1E:39:18:A4:DD:DB:F9:62:D1:8C:C0:F3:8F:17:B9
            X509v3 Authority Key Identifier:
                keyid:6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/34352e372e36382e302f32322d3234203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:b1:f3:4e:b3:43:3b:4a:07:c9:d2:0e:41:fd:c3:b0:47:72:
         18:03:f6:3b:cf:29:fa:86:29:9e:dc:a7:66:b6:a0:9f:d2:b7:
         e0:5a:be:84:da:ac:5c:07:b9:d8:c6:f1:51:53:e9:53:3d:34:
         4c:ae:99:e8:4c:df:11:df:e4:1a:ca:1c:aa:0d:6b:ff:b2:20:
         85:d5:04:4d:d6:c4:30:3e:07:6d:57:79:da:d2:dc:ce:e1:9f:
         3e:4a:06:f8:ad:0f:9b:c5:a6:49:11:35:c6:b5:c3:1f:95:a0:
         bb:72:b1:46:df:34:67:9b:fd:c6:6a:e3:cf:01:bd:61:3b:91:
         35:b9:53:c7:cc:66:65:1b:32:b8:0e:07:c9:50:c0:48:21:be:
         cd:b5:a2:23:de:eb:cc:80:31:b4:e3:34:3d:69:f7:70:0d:1e:
         f7:e0:5a:7c:b3:a4:27:2e:60:1c:ff:d7:0d:3f:51:2c:67:3a:
         c5:82:87:93:69:32:f5:fe:75:55:24:84:48:cb:6a:86:eb:86:
         0e:d7:6e:25:d3:40:6a:9c:19:46:e0:57:d6:0b:b6:6f:61:17:
         a1:38:2a:94:15:cf:43:1d:e4:94:48:01:e1:ab:3e:8f:92:aa:
         ea:12:94:77:13:33:d5:37:85:f8:24:c2:43:f2:b8:a7:b0:ed:
         f9:4f:48:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:37:55 2025 by rpki-client