Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38302e302f32322d3234203d3e20323637333435.roa
File:                     34352e3233342e38302e302f32322d3234203d3e20323637333435.roa (raw, json)
Hash identifier:          HhjwS6mjy4tqJ4Y0w4jmoF0f/OHy8a8kOR6RAUHzJiA=
Subject key identifier:   D7:5B:09:5E:3A:4B:6F:D3:A7:6A:05:0F:6F:CC:EA:68:7D:37:12:8A
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       6DBDEDC7806FACB9D3BA88FFDC03FD239F403B8F
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38302e302f32322d3234203d3e20323637333435.roa
Signing time:             Thu 10 Apr 2025 14:00:00 +0000
ROA not before:           Thu 10 Apr 2025 13:55:00 +0000
ROA not after:            Thu 09 Apr 2026 14:00:00 +0000
asID:                     267345
IP address blocks:        45.234.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl
                          rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bd:ed:c7:80:6f:ac:b9:d3:ba:88:ff:dc:03:fd:23:9f:40:3b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr 10 13:55:00 2025 GMT
            Not After : Apr  9 14:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:59:44:c8:d5:54:93:eb:58:d1:07:2d:55:
                    72:7d:3f:87:a4:e7:b1:c1:30:46:bf:7d:f8:39:50:
                    b6:5d:ba:7d:7d:82:bb:48:04:a6:d7:8b:f9:29:6d:
                    a1:ca:45:52:09:26:a1:17:8d:60:12:0a:42:7d:80:
                    5b:81:94:4e:34:7f:eb:15:3b:c8:f2:ad:2c:30:5e:
                    26:d7:e9:e3:c2:fc:f7:af:45:fd:4f:7f:a0:a5:02:
                    47:d2:c4:8e:16:0f:4f:a5:c6:f5:63:64:9b:bc:ec:
                    2f:ba:f4:36:5b:db:c1:e1:6d:7c:79:e9:c3:34:15:
                    2c:ab:85:04:9e:1c:cb:7f:47:3e:20:01:2a:89:7b:
                    c3:d0:e0:4d:f6:d7:1e:5f:9a:60:e0:c7:1e:16:9e:
                    2b:0e:94:62:6e:7b:b9:36:2a:aa:20:e8:9b:54:8d:
                    cd:e4:8e:bf:4c:11:44:79:c1:00:50:ee:fc:cf:6f:
                    c1:f6:a1:b6:7b:0b:91:04:f3:60:1f:8a:42:5c:ea:
                    17:bb:d3:c4:0c:6e:45:4f:e9:d3:25:16:d8:79:1f:
                    29:10:f1:5a:f1:0c:53:6a:ee:8a:39:e0:74:8f:0a:
                    df:78:a7:98:f5:1a:7f:d8:46:9a:9e:79:59:52:5d:
                    cd:4c:87:79:24:c8:23:e9:2d:a8:b9:ce:47:5e:40:
                    57:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5B:09:5E:3A:4B:6F:D3:A7:6A:05:0F:6F:CC:EA:68:7D:37:12:8A
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/34352e3233342e38302e302f32322d3234203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:c9:a7:98:52:6c:a5:71:d7:bf:d1:13:e1:f7:2a:ec:c6:
         65:6f:43:92:fe:e9:8d:5e:3b:60:3c:f7:10:73:d9:93:db:b2:
         b2:e2:98:61:48:2a:8e:66:ab:37:6e:75:70:c8:16:59:f8:cb:
         e7:a7:51:9c:7b:8b:36:2d:8d:36:fd:10:d4:0e:f1:9d:b6:a4:
         ea:fd:da:c8:0b:58:72:a0:ce:b7:61:ad:71:21:7d:e4:99:e7:
         e7:c0:14:83:09:21:ae:da:14:fc:4b:b5:9a:6a:8e:54:5e:d1:
         bd:64:84:db:7f:97:c1:94:e6:29:14:df:30:28:fa:85:ce:3a:
         df:b9:3a:94:2e:6d:2f:8e:b2:bc:45:11:5f:5b:73:3a:d1:8e:
         61:87:3c:0c:85:e9:0f:75:85:24:78:92:2c:8a:eb:b3:97:db:
         8b:01:a1:31:98:43:d7:0c:62:18:f3:f3:0e:2b:0a:9c:aa:01:
         89:2b:2e:00:27:19:2b:2f:b9:c3:df:0b:b7:f0:46:31:6a:ec:
         e9:f1:43:c7:ec:47:1e:f7:f8:bc:56:43:d7:c0:06:78:18:db:
         af:56:59:64:d1:49:22:02:6f:95:0f:08:3e:71:ee:91:c0:ee:
         a7:0f:19:4c:c6:bb:6a:94:04:ec:4a:04:45:ed:76:b5:30:52:
         05:16:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:40:16 2025 by rpki-client