Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/34352e372e3138302e302f32322d3234203d3e20323636353939.roa
File:                     34352e372e3138302e302f32322d3234203d3e20323636353939.roa (raw, json)
Hash identifier:          txzLIx0zpJTPYZYmyXzIYFuh33pq1p0B/A/PpSRHE+k=
Subject key identifier:   E5:B4:F8:04:C7:5E:4A:F9:77:46:B4:9B:DF:8A:F0:F1:E7:6C:2E:EA
Certificate issuer:       /CN=6DB7072D8B617CD7C066951C2153EC8D11742ECC
Certificate serial:       43362535196CB901A55D29CC240F3E08099F67C3
Authority key identifier: 6D:B7:07:2D:8B:61:7C:D7:C0:66:95:1C:21:53:EC:8D:11:74:2E:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/34352e372e3138302e302f32322d3234203d3e20323636353939.roa
Signing time:             Thu 13 Mar 2025 12:15:21 +0000
ROA not before:           Thu 13 Mar 2025 12:10:21 +0000
ROA not after:            Thu 12 Mar 2026 12:15:21 +0000
asID:                     266599
IP address blocks:        45.7.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.crl
                          rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 01:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:36:25:35:19:6c:b9:01:a5:5d:29:cc:24:0f:3e:08:09:9f:67:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DB7072D8B617CD7C066951C2153EC8D11742ECC
        Validity
            Not Before: Mar 13 12:10:21 2025 GMT
            Not After : Mar 12 12:15:21 2026 GMT
        Subject: CN=E5B4F804C75E4AF97746B49BDF8AF0F1E76C2EEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:e1:9d:40:92:b8:df:85:2a:80:6e:b4:e5:
                    23:3a:bd:98:fe:2c:37:63:85:47:bb:00:8b:0b:65:
                    04:ed:85:c6:e6:cf:ea:13:e4:f4:b6:48:48:c8:2b:
                    bb:5f:e3:98:84:55:68:7b:8e:b6:5d:c5:0b:d9:23:
                    5e:ef:92:68:2c:08:3c:f3:bb:8d:23:ac:a1:c8:a0:
                    cb:78:f8:99:c9:f7:30:8b:d7:b4:62:64:35:0d:c8:
                    a9:52:6b:ad:07:88:dd:ce:c2:8b:2d:ce:ed:3e:86:
                    e3:f9:53:2b:40:09:cc:68:68:3a:c1:de:3a:f5:0e:
                    f1:17:7a:fe:b1:0e:40:32:03:0b:4e:eb:a2:a0:34:
                    f3:30:ea:4e:1c:0a:d2:37:07:4b:78:9e:8a:ab:9c:
                    0c:9a:99:5c:67:0a:37:d1:c7:17:22:26:ca:f9:47:
                    d0:5f:27:32:3e:22:45:32:ab:bb:b9:b0:01:75:32:
                    51:07:94:77:88:da:a9:18:ca:82:b2:fd:97:b3:04:
                    c0:99:05:fe:ec:e9:e4:e0:f4:68:50:74:dc:48:10:
                    91:8d:da:b9:0f:8e:96:fc:30:e2:57:c1:69:df:84:
                    9e:68:67:d4:35:ba:fa:e4:23:66:8c:00:87:92:b6:
                    4a:91:a1:18:81:95:64:37:d5:84:45:f5:5f:e3:54:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B4:F8:04:C7:5E:4A:F9:77:46:B4:9B:DF:8A:F0:F1:E7:6C:2E:EA
            X509v3 Authority Key Identifier:
                keyid:6D:B7:07:2D:8B:61:7C:D7:C0:66:95:1C:21:53:EC:8D:11:74:2E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/34352e372e3138302e302f32322d3234203d3e20323636353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:b4:e2:74:2f:20:35:42:6e:d7:da:e2:eb:97:c5:c8:59:f2:
         ee:ba:18:21:62:30:c5:64:26:9e:64:86:72:a6:96:f7:6c:e9:
         c4:76:5f:7e:29:21:4a:8d:af:6f:d8:32:9a:3b:dd:18:6d:32:
         90:64:10:78:6d:29:de:98:22:f5:4b:fe:81:5d:49:a8:21:18:
         8f:3f:30:34:b9:8b:48:ac:2c:a6:ab:63:fe:2f:c0:cc:6e:9a:
         3e:83:48:92:d4:22:6a:6b:3d:f1:f9:10:80:bd:d2:3e:78:42:
         a5:7d:8a:14:50:b9:f6:dc:42:78:c3:b9:09:1e:ff:d1:f5:65:
         b8:36:2e:9f:9f:66:96:0b:a1:f6:5c:a6:44:1f:01:95:78:e5:
         08:e9:88:c6:f6:b5:ed:1a:4e:a8:7f:e0:ee:6f:60:97:41:ac:
         dd:c1:71:4d:88:dc:4f:af:dc:f6:4c:7f:dd:8a:be:54:6b:b8:
         a3:da:33:59:51:ad:c2:fc:d4:68:b3:97:62:62:33:7d:85:c6:
         e7:df:08:8e:db:62:30:f5:2e:3e:e9:6e:e6:25:7d:30:0b:9c:
         8e:95:f9:5e:e0:66:55:93:9f:a8:52:d8:d9:e8:06:98:76:10:
         08:12:d5:e6:de:3d:16:8e:0d:55:1c:41:e6:45:a2:b2:89:29:
         a3:c1:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:57 2025 by rpki-client