Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32332d3233203d3e20323636303836.roa
File:                     34352e342e3230382e302f32332d3233203d3e20323636303836.roa (raw, json)
Hash identifier:          7b4h/meUG7tAGTJAZGcxmdPEDI43QbqBJD5Bh5bkFE0=
Subject key identifier:   22:23:F3:03:F0:D3:BC:CA:2F:22:B3:71:12:0D:5D:2B:1D:15:43:37
Certificate issuer:       /CN=6C759FC4A53C7DCD3908CD3F8D776071464C6842
Certificate serial:       7E3CA8BA2FCFF1B374EF49B0A1B93B4F60E85BF9
Authority key identifier: 6C:75:9F:C4:A5:3C:7D:CD:39:08:CD:3F:8D:77:60:71:46:4C:68:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32332d3233203d3e20323636303836.roa
Signing time:             Thu 22 May 2025 16:42:32 +0000
ROA not before:           Thu 22 May 2025 16:37:32 +0000
ROA not after:            Thu 21 May 2026 16:42:32 +0000
asID:                     266086
IP address blocks:        45.4.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.crl
                          rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 20:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3c:a8:ba:2f:cf:f1:b3:74:ef:49:b0:a1:b9:3b:4f:60:e8:5b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C759FC4A53C7DCD3908CD3F8D776071464C6842
        Validity
            Not Before: May 22 16:37:32 2025 GMT
            Not After : May 21 16:42:32 2026 GMT
        Subject: CN=2223F303F0D3BCCA2F22B371120D5D2B1D154337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:9e:92:4a:7c:d5:34:17:6b:be:5a:4d:6a:
                    82:9a:55:83:5a:74:1b:c4:77:e0:49:1a:27:c4:39:
                    3e:58:7d:68:61:a2:21:13:56:29:a4:0e:ee:81:17:
                    a7:8d:b2:48:7d:ba:4d:05:d7:f5:21:20:68:fb:50:
                    3e:56:c3:c5:92:f5:cf:72:01:e2:f5:b0:65:99:99:
                    e7:d8:df:1d:29:2e:6f:79:4e:17:f5:45:90:2c:18:
                    2e:02:21:a4:e7:11:a9:82:b4:17:3c:89:85:f8:0f:
                    ba:5e:56:e1:16:f3:14:90:1d:da:e2:6e:10:f3:10:
                    51:c5:f1:67:cb:b2:3a:12:98:1e:99:a3:d3:36:06:
                    d0:62:bb:3f:b1:96:41:5f:cf:34:cd:bd:53:d1:88:
                    2b:7e:74:cf:f2:41:68:8b:82:a2:59:24:b1:74:53:
                    27:42:20:0e:cc:da:56:77:d9:11:c0:cc:af:03:57:
                    ef:8c:c0:c1:11:61:e0:f5:25:7c:54:9c:4e:7a:c0:
                    69:85:1b:f3:e1:64:44:3a:a5:86:78:0e:50:be:d3:
                    cf:87:7f:28:04:ca:3e:39:7c:72:34:12:07:49:41:
                    9d:8c:03:43:9b:2c:de:c4:55:8e:28:95:c3:ea:ec:
                    49:a9:62:fa:bf:01:f5:22:db:80:67:61:79:a5:27:
                    05:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:23:F3:03:F0:D3:BC:CA:2F:22:B3:71:12:0D:5D:2B:1D:15:43:37
            X509v3 Authority Key Identifier:
                keyid:6C:75:9F:C4:A5:3C:7D:CD:39:08:CD:3F:8D:77:60:71:46:4C:68:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32332d3233203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:43:2f:28:df:bc:7f:f6:6d:af:a0:e9:d2:52:22:e8:83:37:
         11:a2:eb:31:fc:be:93:af:b7:6f:25:eb:96:4a:5a:c7:bf:8c:
         0c:b6:80:59:1a:ff:c0:1e:03:50:b6:de:2d:72:59:18:6f:2c:
         49:be:05:de:ee:e9:b7:8c:87:d8:29:b7:70:61:8f:51:6a:8c:
         91:78:31:e4:b2:2b:c0:2e:fc:00:b4:a4:10:62:99:a1:f4:93:
         77:cf:e9:85:1b:21:fa:a6:64:0b:c8:4e:be:72:47:3f:f8:99:
         aa:00:55:c5:e6:6b:c9:bc:c3:3c:34:28:3e:f9:07:d2:99:7e:
         fa:fb:70:97:3f:dd:aa:96:ea:9e:94:95:32:86:b0:70:dc:f8:
         c4:30:fe:52:a2:35:ad:e2:00:c9:ca:f4:55:d2:e7:92:22:d9:
         85:82:72:d0:52:9e:fd:b1:ce:62:b4:86:d0:71:09:8c:56:49:
         c1:d1:91:d9:9f:b9:0a:28:d5:aa:b8:41:30:7a:fd:2e:5d:99:
         9a:88:b3:ff:28:06:13:82:c9:ad:e3:4c:c0:7d:15:2f:d8:ae:
         71:1d:1c:bb:29:eb:fe:33:e8:9f:7e:fc:b0:38:8f:20:e3:8c:
         5d:5d:83:05:8c:a6:48:19:57:ed:1b:04:0a:54:0f:23:42:32:
         d6:b9:3d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:13:50 2025 by rpki-client