Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37322e302f32322d3232203d3e20323638313533.roa
File:                     34352e3137302e37322e302f32322d3232203d3e20323638313533.roa (raw, json)
Hash identifier:          6APDcKXI+2zGzfZiuPvnFD2dZqtUKDRU6YknvKkAb6w=
Subject key identifier:   28:19:60:0C:45:A9:FC:A9:70:4B:0C:90:DD:AD:5B:BF:12:CD:22:CA
Certificate issuer:       /CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
Certificate serial:       3D52056C6D23703252CFC66EE6EE6DF88DE61B39
Authority key identifier: 6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37322e302f32322d3232203d3e20323638313533.roa
Signing time:             Thu 06 Mar 2025 01:48:58 +0000
ROA not before:           Thu 06 Mar 2025 01:43:58 +0000
ROA not after:            Thu 05 Mar 2026 01:48:58 +0000
asID:                     268153
IP address blocks:        45.170.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:52:05:6c:6d:23:70:32:52:cf:c6:6e:e6:ee:6d:f8:8d:e6:1b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
        Validity
            Not Before: Mar  6 01:43:58 2025 GMT
            Not After : Mar  5 01:48:58 2026 GMT
        Subject: CN=2819600C45A9FCA9704B0C90DDAD5BBF12CD22CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5e:df:4e:23:bb:97:91:74:be:73:9a:ae:2e:
                    83:d3:ae:38:9b:57:b8:8f:96:b9:7d:9a:73:70:81:
                    4e:03:75:a7:e2:ce:c6:c9:a7:13:98:b7:79:51:a1:
                    79:9f:cf:02:83:1d:5f:a7:9d:58:da:d5:19:27:62:
                    8b:83:42:ee:33:05:55:6e:16:03:83:de:3f:f6:f3:
                    46:a5:a8:f0:fd:fd:5b:51:a1:7b:a6:3f:9b:5b:18:
                    ad:72:1e:ba:a0:5a:b3:f7:a2:d7:4f:76:a0:fb:bb:
                    eb:b9:1b:26:8e:58:24:e5:14:08:27:b8:05:4d:43:
                    68:8f:3b:39:35:41:4e:49:a2:5d:2b:7d:10:7d:6c:
                    30:a5:3e:97:56:b4:e5:49:32:db:ed:1f:87:3a:bd:
                    6c:5c:e2:49:57:7b:44:ef:64:2f:26:49:40:2f:d2:
                    a7:54:bf:76:40:99:25:b8:fd:eb:88:db:54:28:a1:
                    32:29:9d:e9:22:63:8c:16:65:b5:c8:7e:50:98:75:
                    6b:2c:90:cf:80:79:ee:01:4d:49:43:6b:90:08:1e:
                    b7:f2:21:0d:a6:83:3d:1e:63:e8:aa:44:29:6e:0a:
                    f7:60:8c:e7:f6:52:51:85:44:28:46:04:9e:c0:fc:
                    0e:bd:85:00:cf:ce:e3:24:a1:72:7f:b3:73:de:77:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:19:60:0C:45:A9:FC:A9:70:4B:0C:90:DD:AD:5B:BF:12:CD:22:CA
            X509v3 Authority Key Identifier:
                keyid:6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37322e302f32322d3232203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:14:dc:c0:34:84:73:85:bf:93:80:fa:f1:89:a9:5f:a7:06:
         56:eb:9a:bf:1c:f6:64:ba:c1:44:6c:f1:56:2a:29:77:f0:6a:
         f9:fc:fc:47:37:3e:87:aa:cd:9f:3f:63:53:5c:bb:4e:78:d0:
         c4:da:d1:25:74:3a:f5:28:11:e6:3f:7d:14:18:c4:9e:e2:44:
         5b:d7:89:51:10:d1:01:a4:b4:d6:ea:07:bd:3c:10:d9:6a:b5:
         4c:a5:c4:2b:da:3d:20:20:13:ae:27:14:d0:d1:9a:63:7c:80:
         c5:3d:ad:21:89:2f:9b:67:f1:8c:ff:79:4c:5b:9c:c2:51:bc:
         5e:09:59:6b:4b:ea:4b:c9:68:19:a2:2f:dd:42:61:fa:e7:7b:
         2c:35:90:fa:be:a5:98:64:44:73:59:f1:25:dd:05:5c:58:91:
         82:54:f4:fe:ea:ee:a0:db:1a:39:70:17:e5:77:6e:79:1a:5a:
         5f:c7:9b:8c:4f:06:d5:4b:ed:de:15:c9:eb:69:95:54:16:05:
         5a:3f:3d:5e:a5:4b:25:92:a9:f5:6a:5f:30:09:2b:9a:2f:ea:
         8d:b7:94:33:42:9e:69:73:8e:9c:e8:32:78:b0:41:8a:81:91:
         9c:3e:59:8d:06:61:3a:cf:67:ec:b4:70:e8:4b:95:c4:2f:3b:
         25:d1:75:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:14:15 2025 by rpki-client