Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231322e302f32342d3234203d3e20323639313131.roa
File:                     34352e3137382e3231322e302f32342d3234203d3e20323639313131.roa (raw, json)
Hash identifier:          pPvSIK3MHMkHfmXyJQhBy3faRB6ZnApjJAzw4R1P39E=
Subject key identifier:   E3:76:FF:16:CA:97:CD:D5:F1:76:91:C3:F3:94:4F:61:06:E7:08:71
Certificate issuer:       /CN=6B5D42D93E58C00245A6501E9C01C833BB782217
Certificate serial:       38525BB44DA67F535796547E69F0A22F92E1D1BD
Authority key identifier: 6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231322e302f32342d3234203d3e20323639313131.roa
Signing time:             Wed 05 Mar 2025 23:49:31 +0000
ROA not before:           Wed 05 Mar 2025 23:44:31 +0000
ROA not after:            Wed 04 Mar 2026 23:49:31 +0000
asID:                     269111
IP address blocks:        45.178.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl
                          rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 15:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:52:5b:b4:4d:a6:7f:53:57:96:54:7e:69:f0:a2:2f:92:e1:d1:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5D42D93E58C00245A6501E9C01C833BB782217
        Validity
            Not Before: Mar  5 23:44:31 2025 GMT
            Not After : Mar  4 23:49:31 2026 GMT
        Subject: CN=E376FF16CA97CDD5F17691C3F3944F6106E70871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:39:78:d5:dc:52:e7:be:7f:74:94:69:81:
                    ad:b0:b6:d5:e9:b3:e6:dc:64:f2:61:77:b9:c3:38:
                    f4:fe:4b:ad:35:38:e2:36:f8:a1:aa:5b:e2:6d:97:
                    c8:02:d3:51:97:90:24:84:77:04:95:d5:a2:77:96:
                    f0:a5:62:6d:42:64:ef:4a:64:1f:d4:24:46:c4:14:
                    ab:67:9d:15:dc:22:b5:3f:5d:00:f6:66:ed:e5:e9:
                    e4:b7:07:18:be:44:56:3a:7c:71:09:b4:1b:ae:c8:
                    1b:1e:84:65:2a:82:a1:e8:c4:17:30:52:ae:ae:4d:
                    f5:20:75:9b:3a:da:e8:33:69:07:a6:e1:4b:e4:c7:
                    b1:cc:ff:b5:21:27:8d:bd:5d:13:4f:c4:4d:ec:1d:
                    8c:fa:59:08:a9:c5:cf:94:f5:02:2f:9e:1a:51:16:
                    7a:4e:74:cd:c6:ff:fc:3b:51:f3:6f:4a:63:53:31:
                    4f:a1:26:13:3e:eb:55:d1:50:ea:1e:37:c1:d6:f7:
                    47:96:f2:dc:f3:92:1f:b2:02:17:ae:79:25:48:30:
                    1b:f3:1e:76:62:e7:27:2b:51:fa:b2:51:35:47:30:
                    e9:13:fd:42:2a:b3:31:4c:8d:41:24:24:bd:9a:2a:
                    a8:e2:ae:cc:b3:d0:13:60:cb:8b:ff:5c:5f:2d:93:
                    33:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:76:FF:16:CA:97:CD:D5:F1:76:91:C3:F3:94:4F:61:06:E7:08:71
            X509v3 Authority Key Identifier:
                keyid:6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231322e302f32342d3234203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:93:d9:87:8b:29:7e:e5:96:85:28:ae:b3:99:e4:9f:44:fb:
         f4:cf:e7:30:e0:44:5f:8e:d5:c7:91:7f:0c:ec:45:5c:08:25:
         c6:41:d2:51:e8:89:b3:bb:8d:1c:4b:ca:86:09:48:22:99:17:
         25:4e:5e:50:1d:24:5e:98:5b:8f:1b:02:35:7a:37:9c:25:b8:
         42:fe:fe:db:e7:67:1a:c5:2d:f2:2a:f3:a0:76:2a:17:88:f6:
         c2:30:30:0e:51:b2:e0:62:f2:98:7b:cf:ac:5d:2b:b4:45:27:
         f8:cf:f8:b7:ff:cb:a4:9f:b3:40:bd:87:b5:6a:64:ec:c3:93:
         4f:8e:4b:06:7d:32:27:23:9e:cd:8e:8c:16:e3:9b:aa:1c:a7:
         7c:9b:44:1b:e5:d6:5a:29:34:63:24:60:30:53:3c:c6:37:c5:
         db:74:e8:7f:e2:7f:12:fa:7c:2d:82:de:83:3e:e3:7a:9d:16:
         85:5f:12:5c:05:14:fc:d3:62:7c:7c:3b:cc:67:0b:6d:c4:37:
         4d:2d:df:dd:68:64:cc:79:c9:1c:63:60:95:4a:37:4a:9a:85:
         71:3b:30:39:63:3e:38:ae:b6:6d:b2:2b:93:42:e6:cc:fa:13:
         bc:8d:ec:e7:3a:80:d7:04:4b:04:81:c4:0b:39:b1:28:26:03:
         aa:4c:be:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:57:22 2025 by rpki-client