Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/34352e3138342e3139312e302f32342d3234203d3e20323639333437.roa
File:                     34352e3138342e3139312e302f32342d3234203d3e20323639333437.roa (raw, json)
Hash identifier:          h4RuxOcKzErjUWUMsO8iJ42I+w7zWZX87IZAm5twOZE=
Subject key identifier:   51:04:5D:9C:04:3F:50:FB:94:04:63:74:6F:8D:02:92:D7:CE:35:FD
Certificate issuer:       /CN=6DD53C4867079833703A1EDF2B50AADA5DE39710
Certificate serial:       670DFBE46DA0AC84DB5488CAFBF573F97FC34FBA
Authority key identifier: 6D:D5:3C:48:67:07:98:33:70:3A:1E:DF:2B:50:AA:DA:5D:E3:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/34352e3138342e3139312e302f32342d3234203d3e20323639333437.roa
Signing time:             Sat 22 Feb 2025 19:11:53 +0000
ROA not before:           Sat 22 Feb 2025 19:06:53 +0000
ROA not after:            Sat 21 Feb 2026 19:11:53 +0000
asID:                     269347
IP address blocks:        45.184.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/6DD53C4867079833703A1EDF2B50AADA5DE39710.crl
                          rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/6DD53C4867079833703A1EDF2B50AADA5DE39710.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 21:08:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0d:fb:e4:6d:a0:ac:84:db:54:88:ca:fb:f5:73:f9:7f:c3:4f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD53C4867079833703A1EDF2B50AADA5DE39710
        Validity
            Not Before: Feb 22 19:06:53 2025 GMT
            Not After : Feb 21 19:11:53 2026 GMT
        Subject: CN=51045D9C043F50FB940463746F8D0292D7CE35FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ae:b0:b5:b3:1d:f9:38:8a:f3:ec:28:1c:27:
                    15:6f:8f:a9:b4:a3:1d:62:10:6a:63:19:64:30:13:
                    33:2d:34:2a:b8:21:9b:ef:78:63:57:57:1c:43:9a:
                    17:b9:02:b4:cb:16:c8:f6:8f:65:80:4d:8e:37:c3:
                    a0:3c:0a:11:dc:74:c9:15:bc:b4:82:e4:e7:f8:ae:
                    eb:6f:28:f6:61:a7:f9:df:10:1e:4d:28:70:ee:28:
                    61:21:ef:18:f9:73:f9:c0:f8:4c:e9:54:48:dd:6e:
                    b7:3d:cd:37:06:6a:9a:88:30:52:3e:dc:02:48:a0:
                    41:94:41:59:82:11:e7:eb:4a:dd:bb:c7:5e:61:21:
                    0d:7d:7e:76:fb:80:58:c9:79:87:9a:ab:8c:95:05:
                    ae:4b:7c:8b:dd:21:7f:b7:8c:34:21:65:b0:32:7c:
                    91:dc:2a:ec:31:0b:d7:30:60:12:b3:eb:48:46:17:
                    ac:eb:52:7b:c3:18:ef:89:bc:b8:77:30:28:7f:a9:
                    18:67:50:49:57:63:46:58:28:22:ac:f4:be:c9:f5:
                    07:44:43:92:8d:14:20:8c:c9:85:5c:31:07:35:42:
                    4b:4c:3f:b6:fd:25:22:72:1a:71:07:97:7e:bb:5f:
                    aa:b9:b9:b3:53:05:ab:8c:0d:f0:d5:f5:79:f4:de:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:04:5D:9C:04:3F:50:FB:94:04:63:74:6F:8D:02:92:D7:CE:35:FD
            X509v3 Authority Key Identifier:
                keyid:6D:D5:3C:48:67:07:98:33:70:3A:1E:DF:2B:50:AA:DA:5D:E3:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/6DD53C4867079833703A1EDF2B50AADA5DE39710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/34352e3138342e3139312e302f32342d3234203d3e20323639333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:50:2e:ed:12:15:89:be:b0:39:c5:26:3f:6c:4c:bd:4a:e4:
         55:d2:9b:b3:b7:8e:23:46:b7:44:14:1d:39:98:aa:d6:40:43:
         f9:0a:b8:09:b8:35:36:73:23:b6:ee:7c:4d:a9:37:ba:f9:dc:
         33:0b:19:b3:4f:82:f5:75:03:82:38:db:57:9a:8e:aa:1c:0e:
         ae:8b:64:54:6c:7f:ee:62:06:52:d6:7d:b6:ae:30:70:70:fa:
         4e:25:10:d5:54:f1:1a:84:2c:53:63:19:c1:37:9d:12:c6:11:
         96:6d:67:da:e6:d4:07:82:6e:1e:d3:76:b2:8b:30:7a:7a:37:
         e7:6a:ae:fe:f6:11:b9:0f:aa:f5:a5:cb:e6:a9:3b:ed:6f:a9:
         e7:f7:3a:d8:ba:7a:31:f4:73:96:f6:18:74:46:7f:fa:c8:8c:
         e7:ef:dc:ff:17:ad:a3:40:31:54:a7:e9:00:7d:e0:44:60:6e:
         09:3f:22:dc:19:59:d0:88:6d:b4:39:ed:57:87:a8:1f:ba:be:
         49:d5:da:be:a7:14:d5:6c:3e:5c:ea:ea:8f:5f:82:e4:a2:84:
         cb:fc:1b:e7:c5:3a:58:56:7e:a8:65:ae:d3:b5:50:db:bf:02:
         97:d2:f3:d4:d2:18:d1:1a:87:d2:c5:76:7e:0b:44:d6:87:09:
         79:63:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:14:09 2025 by rpki-client