Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e36372e302f32342d3234203d3e20323638363539.roa
File:                     34352e3136352e36372e302f32342d3234203d3e20323638363539.roa (raw, json)
Hash identifier:          O1T8hYOuGQYAY1KkI+9j92Bx4MeD3ck/UTBHAZSjMEA=
Subject key identifier:   F3:F1:25:21:6D:01:4D:81:D6:DE:9B:EE:7F:4C:BD:9B:C0:44:92:61
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       668583977138C88590CC103B35B0E543CEB0A65D
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e36372e302f32342d3234203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:24 +0000
ROA not before:           Tue 01 Apr 2025 13:49:24 +0000
ROA not after:            Tue 31 Mar 2026 13:54:24 +0000
asID:                     268659
IP address blocks:        45.165.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 11:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:85:83:97:71:38:c8:85:90:cc:10:3b:35:b0:e5:43:ce:b0:a6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:24 2025 GMT
            Not After : Mar 31 13:54:24 2026 GMT
        Subject: CN=F3F125216D014D81D6DE9BEE7F4CBD9BC0449261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:c1:01:38:60:7b:bf:6e:3f:ef:e1:11:7b:
                    38:98:97:09:a8:ed:2f:73:00:87:29:8b:1b:aa:ec:
                    be:3e:24:ac:2d:f9:70:db:a4:c7:27:57:f5:0a:8e:
                    2b:de:36:de:6c:de:62:ae:46:89:d5:c4:4c:4f:d2:
                    6a:54:95:41:f5:d2:f6:54:36:32:dd:77:b0:0c:0a:
                    a0:2b:ba:8a:97:27:56:dd:fc:2b:f7:ff:5a:75:2c:
                    d7:f0:7f:89:99:75:12:03:4b:eb:08:4f:1d:2f:1a:
                    7a:1c:88:98:62:e9:1f:93:4b:eb:c6:1b:43:6e:a9:
                    c1:c2:0a:ef:7e:6e:53:bb:4e:fe:2a:2b:6d:75:8b:
                    8e:2f:23:13:06:c8:63:c4:29:44:8a:f6:23:2e:e5:
                    3c:dc:8f:76:48:f1:d2:fe:4d:0b:af:dd:fc:d6:d7:
                    e6:70:fd:be:40:6a:41:fd:bc:56:e4:ea:80:47:e7:
                    71:5c:ff:0b:d3:3d:71:8f:af:16:a1:ad:0b:b4:d3:
                    9a:7f:d9:93:7c:6a:a7:8f:57:04:11:a5:ea:d8:b7:
                    96:86:b7:5a:26:a5:b4:ad:8b:d1:ba:d8:b0:e2:43:
                    fe:ec:65:e8:3c:80:b2:2f:de:7a:74:2c:81:99:9c:
                    26:2d:9a:60:8e:ea:3f:ac:8f:e9:29:74:29:af:fa:
                    24:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F1:25:21:6D:01:4D:81:D6:DE:9B:EE:7F:4C:BD:9B:C0:44:92:61
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e36372e302f32342d3234203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:33:d1:6d:47:19:3e:24:49:2c:56:a2:34:92:40:06:a2:af:
         53:38:e5:a0:17:3b:b2:41:e8:e5:35:05:6b:ea:ac:50:37:2d:
         54:59:d3:e2:b9:72:bb:a8:01:8b:17:34:eb:b1:51:2b:22:0f:
         bc:e2:9f:69:a4:45:ce:16:ed:c5:36:dd:e1:36:f0:ce:b1:cc:
         a9:83:99:b1:b3:93:ca:7b:94:c6:45:77:04:26:3e:88:38:9b:
         93:37:aa:ca:df:36:0e:75:bf:8f:36:74:1d:e5:84:0f:be:14:
         91:93:25:49:06:82:d7:e9:ab:f5:47:5e:6d:f7:1a:54:cc:87:
         36:55:d2:c1:a9:b7:65:e4:cf:a0:21:32:b6:be:a0:2f:61:37:
         ee:ab:99:6b:8f:85:fb:9f:ca:51:10:07:25:eb:8f:a9:a5:0a:
         34:17:1f:a9:f5:99:53:26:b0:c2:b9:c7:ed:51:5a:58:91:bc:
         7b:ff:db:52:47:89:19:99:ea:33:bf:d7:fa:17:88:88:43:bb:
         5b:92:f9:13:d9:81:8f:55:90:8d:9a:ad:68:73:06:79:ce:b6:
         7f:25:ab:fc:1b:ae:88:76:ec:ef:c5:9c:06:85:8c:21:c0:56:
         9e:a4:fd:5c:9f:1f:6c:20:7b:5d:bf:eb:fa:b3:e7:f0:a4:f0:
         b5:2c:96:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:28:44 2025 by rpki-client