Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32322d3232203d3e20323636303836.roa
File:                     34352e342e3230382e302f32322d3232203d3e20323636303836.roa (raw, json)
Hash identifier:          4gZr8Wdo7SHvk+bAFTwfD93pK978AO3qBni/Sv4ngkE=
Subject key identifier:   A7:62:25:C0:C0:CD:B5:8A:1B:0F:0A:B5:14:49:30:BE:0E:3F:5A:22
Certificate issuer:       /CN=6C759FC4A53C7DCD3908CD3F8D776071464C6842
Certificate serial:       193015701E08BAC29B8D6655D7FE0E0ED620AAE2
Authority key identifier: 6C:75:9F:C4:A5:3C:7D:CD:39:08:CD:3F:8D:77:60:71:46:4C:68:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32322d3232203d3e20323636303836.roa
Signing time:             Thu 22 May 2025 16:42:31 +0000
ROA not before:           Thu 22 May 2025 16:37:31 +0000
ROA not after:            Thu 21 May 2026 16:42:31 +0000
asID:                     266086
IP address blocks:        45.4.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.crl
                          rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 05:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:30:15:70:1e:08:ba:c2:9b:8d:66:55:d7:fe:0e:0e:d6:20:aa:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C759FC4A53C7DCD3908CD3F8D776071464C6842
        Validity
            Not Before: May 22 16:37:31 2025 GMT
            Not After : May 21 16:42:31 2026 GMT
        Subject: CN=A76225C0C0CDB58A1B0F0AB5144930BE0E3F5A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:a7:06:45:e9:8e:78:44:2c:2c:79:6b:55:
                    13:a6:2f:2c:76:fb:ba:c6:1c:b5:25:ce:d0:7c:85:
                    12:b4:bf:85:77:e4:e5:bd:ef:fa:e8:fd:29:d0:12:
                    2d:ef:b1:7d:7b:4c:15:a4:1b:58:13:74:fa:ff:39:
                    af:a0:a0:81:33:b2:61:18:b7:00:bc:67:76:19:6e:
                    7c:1b:87:0c:eb:2a:f0:e3:39:5f:af:a6:fb:b3:01:
                    fd:16:be:ce:b5:b3:72:5a:29:fb:aa:57:7c:ed:7f:
                    74:9e:d3:04:2a:66:40:62:d2:ea:fb:ad:16:58:b2:
                    05:b9:d8:39:35:b3:b7:5a:93:ea:37:b4:ea:bd:98:
                    0d:56:d8:f9:5a:85:3d:2b:72:19:26:1f:4a:1a:f6:
                    87:73:f0:01:ab:ae:84:fc:4e:39:8b:56:a4:8f:72:
                    53:55:20:7c:f2:19:26:83:14:6f:0a:ee:4a:16:f6:
                    b4:05:fd:6d:6f:fa:67:93:cd:a0:89:9c:44:dd:a6:
                    e9:26:ec:88:cc:f6:dd:45:2e:bc:12:10:d2:58:53:
                    3e:d6:88:4b:7d:2a:43:4c:d1:42:e7:8d:ef:66:58:
                    c0:0f:fa:f3:a5:b2:87:06:f0:de:50:ee:49:28:35:
                    07:70:f5:b8:16:3d:3f:c4:bb:ca:78:c8:f3:8d:99:
                    24:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:62:25:C0:C0:CD:B5:8A:1B:0F:0A:B5:14:49:30:BE:0E:3F:5A:22
            X509v3 Authority Key Identifier:
                keyid:6C:75:9F:C4:A5:3C:7D:CD:39:08:CD:3F:8D:77:60:71:46:4C:68:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32322d3232203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:57:50:75:82:ba:76:81:2e:31:e8:a6:5a:e8:e9:6a:ae:98:
         13:71:90:3d:54:00:1e:38:b5:8b:2d:85:fe:59:fd:df:59:0b:
         2f:e8:eb:d6:2a:69:2f:de:da:07:53:0e:16:f0:fd:81:41:d9:
         e3:64:93:bf:a4:03:eb:5c:1e:c4:20:aa:36:67:d3:a5:21:a1:
         2b:0d:30:2d:8d:92:66:52:7e:cd:d5:d5:24:54:77:36:88:6f:
         d4:be:7c:bd:de:a0:bd:6b:b9:19:3b:77:33:12:4c:f2:22:61:
         e2:db:63:fa:d2:10:c8:62:23:d4:d5:b4:39:b5:17:a8:81:f0:
         5a:0c:c6:d8:4a:f7:d8:66:e3:86:0b:cf:d2:f5:16:65:7a:b0:
         d7:3e:6d:0e:ba:59:84:9a:79:2c:31:85:f6:f8:d5:3b:93:b4:
         ca:37:d9:0d:38:f9:47:53:fd:3f:e2:23:0a:0d:2b:4a:59:c0:
         46:c8:88:4c:83:81:9f:11:2b:45:8a:b8:a4:3b:ed:c0:9f:f7:
         ae:23:c5:56:dc:54:51:11:3c:22:d2:a2:41:a9:38:1a:cf:3e:
         65:62:a1:bd:6c:e3:3e:0b:98:65:c8:27:90:91:e3:4a:47:a2:
         c0:3d:20:25:70:4b:a2:df:5f:56:bf:fe:9f:9f:bb:2e:a8:d2:
         00:db:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:03:12 2025 by rpki-client