Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/34352e36352e3139322e302f32322d3234203d3e20323636323637.roa
File:                     34352e36352e3139322e302f32322d3234203d3e20323636323637.roa (raw, json)
Hash identifier:          3TNH0hOOWkdEfEv/y1uxZtFD89sp5r8usPEsQaGqjis=
Subject key identifier:   CF:1C:7A:EE:F2:41:2F:15:26:41:E5:E9:6A:A6:49:54:40:EE:E2:BD
Certificate issuer:       /CN=C9DC9B21AB6B082C1ADEA13F07394606D7D42C38
Certificate serial:       6532D7BF5A997275836AC160CBD33E9CF9051343
Authority key identifier: C9:DC:9B:21:AB:6B:08:2C:1A:DE:A1:3F:07:39:46:06:D7:D4:2C:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/34352e36352e3139322e302f32322d3234203d3e20323636323637.roa
Signing time:             Thu 06 Mar 2025 09:25:06 +0000
ROA not before:           Thu 06 Mar 2025 09:20:06 +0000
ROA not after:            Thu 05 Mar 2026 09:25:06 +0000
asID:                     266267
IP address blocks:        45.65.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.crl
                          rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:32:d7:bf:5a:99:72:75:83:6a:c1:60:cb:d3:3e:9c:f9:05:13:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DC9B21AB6B082C1ADEA13F07394606D7D42C38
        Validity
            Not Before: Mar  6 09:20:06 2025 GMT
            Not After : Mar  5 09:25:06 2026 GMT
        Subject: CN=CF1C7AEEF2412F152641E5E96AA6495440EEE2BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:d1:21:fe:18:d5:6f:be:23:f4:78:cf:16:
                    77:a9:20:c6:1c:44:01:20:16:21:75:71:20:0f:58:
                    dd:fd:72:67:17:b9:1a:44:64:f9:99:5f:dc:34:71:
                    dd:58:45:cf:95:45:70:22:64:64:8e:b8:86:40:58:
                    cf:df:b5:f6:8b:7f:18:eb:3f:27:e5:5a:f6:c4:76:
                    08:d6:6b:cb:00:13:59:a5:fd:04:ec:8a:73:c0:9c:
                    d5:de:1a:5f:c7:cb:2a:60:d0:52:6a:c2:4d:31:4e:
                    5d:83:c3:4f:ce:1d:7e:da:af:ac:7e:85:ab:7e:76:
                    87:ae:09:fd:7a:77:87:19:1c:98:80:57:ca:df:b4:
                    59:85:72:2a:5f:5d:9f:0c:92:51:11:d9:33:85:94:
                    35:64:c7:a2:e0:63:84:bf:29:88:74:95:88:dd:44:
                    40:27:ed:55:8c:79:f8:aa:36:c2:b8:5a:fd:51:91:
                    9c:6b:91:29:21:84:ee:e7:a2:c7:03:5d:0b:95:82:
                    bf:b7:8f:c8:0a:1a:e0:e1:c5:bc:3f:6f:79:e3:88:
                    a1:b4:33:f2:34:c5:cb:be:7c:12:77:c3:93:9d:d9:
                    41:04:62:8f:1f:0f:24:f9:45:b8:d7:a8:a5:62:eb:
                    f2:00:d1:48:9f:60:fa:b7:17:7d:4b:06:46:7e:22:
                    3a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1C:7A:EE:F2:41:2F:15:26:41:E5:E9:6A:A6:49:54:40:EE:E2:BD
            X509v3 Authority Key Identifier:
                keyid:C9:DC:9B:21:AB:6B:08:2C:1A:DE:A1:3F:07:39:46:06:D7:D4:2C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/34352e36352e3139322e302f32322d3234203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:c9:66:51:76:42:21:55:c6:41:ca:ea:aa:0e:d0:66:c4:e7:
         e4:49:4f:c5:a6:65:9e:29:41:14:f2:c9:8d:1f:97:9e:6d:70:
         05:de:b3:d6:21:6f:31:7b:84:b9:e3:d3:2e:59:34:9e:b1:14:
         33:76:06:df:6c:de:1c:46:0e:9d:cb:cb:8d:cd:05:9f:2e:d4:
         48:44:a5:4c:a1:9a:f1:c1:d0:30:fa:86:69:7f:e6:6b:04:13:
         85:3f:69:6c:d8:09:ee:d3:09:f3:a1:34:0a:b3:95:98:7a:0d:
         8c:fd:d8:61:6d:03:cd:07:fc:de:9c:d6:24:f7:1f:66:b1:62:
         ee:eb:67:cd:51:bc:c2:b4:63:e1:a2:93:dd:f5:32:99:62:5e:
         19:76:f3:34:2b:b8:64:cb:63:5f:44:fc:fe:39:f5:bf:64:20:
         72:43:14:6e:97:5d:90:82:23:6d:61:81:62:8d:d2:d9:dd:ed:
         cd:83:d4:be:a9:e3:94:b0:14:67:fa:b2:f3:97:3c:53:ce:09:
         43:04:f5:e4:2d:bf:ec:ef:fc:df:b1:60:6f:db:62:cb:50:8d:
         07:a8:75:40:01:4d:bc:b7:45:16:03:ee:b0:87:8b:5a:35:33:
         83:0f:ee:e2:16:4e:de:63:47:d9:af:ab:78:7e:65:0f:be:4f:
         3e:59:3e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:21 2025 by rpki-client