Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32322d3232203d3e20323638393630.roa
File:                     34352e3137362e3234302e302f32322d3232203d3e20323638393630.roa (raw, json)
Hash identifier:          5mZVBCO7JgwDa1+b+morYIPpj10h4EfCTD8aya9CVDg=
Subject key identifier:   FC:B0:2E:32:DF:2B:DE:81:20:9B:8D:E2:4E:96:9B:DE:1A:11:90:36
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       466B8DCB082D2F2D1E906B2FEEB13F1F4FDA0AA9
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32322d3232203d3e20323638393630.roa
Signing time:             Fri 13 Jun 2025 15:02:00 +0000
ROA not before:           Fri 13 Jun 2025 14:57:00 +0000
ROA not after:            Fri 12 Jun 2026 15:02:00 +0000
asID:                     268960
IP address blocks:        45.176.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 07:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6b:8d:cb:08:2d:2f:2d:1e:90:6b:2f:ee:b1:3f:1f:4f:da:0a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Jun 13 14:57:00 2025 GMT
            Not After : Jun 12 15:02:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:d9:16:b9:91:87:f1:7f:94:64:dc:cd:32:
                    fb:bb:21:5f:78:fa:f3:3e:23:a1:b7:25:9f:15:c0:
                    fd:33:e0:58:c5:5b:9b:8a:15:5e:59:51:bf:55:2d:
                    b6:eb:44:6d:7c:ef:2d:09:5a:f8:42:1c:ec:ac:b9:
                    39:eb:73:a4:96:1f:db:94:ad:ab:ce:ad:28:bd:f2:
                    72:49:c2:9d:96:3f:09:0c:41:42:5d:7f:db:59:91:
                    4c:d1:24:21:48:7e:f3:97:14:45:43:00:84:74:69:
                    48:b3:e8:50:17:03:3a:5a:b4:10:4c:fc:2c:0c:9a:
                    d8:58:ed:de:d8:13:36:c7:89:2a:4e:e9:5c:24:85:
                    e7:da:de:08:d0:36:a7:53:2a:46:a8:4b:c0:7e:2c:
                    95:cf:28:17:6a:0a:dd:83:2b:76:17:6b:49:2a:7f:
                    bf:fb:e1:8e:ee:8e:a8:0a:4a:9c:eb:80:05:84:2a:
                    94:a1:e6:64:87:6e:0e:8a:66:59:6b:4b:21:80:a3:
                    d7:6b:1a:45:2f:79:37:36:d2:6c:bc:28:6e:8d:6b:
                    6c:be:82:31:da:52:07:20:8b:52:70:6e:88:f6:95:
                    8b:e7:97:f5:36:39:4b:c2:6a:6d:3f:5f:ca:c1:0d:
                    4f:a7:71:e5:d7:ca:ef:0e:83:bd:b9:f3:4d:89:b5:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B0:2E:32:DF:2B:DE:81:20:9B:8D:E2:4E:96:9B:DE:1A:11:90:36
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32322d3232203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:b0:97:43:b7:5d:e4:ae:41:02:e7:28:66:f2:99:c5:37:bd:
         dd:4f:04:d5:ea:d2:97:53:af:bd:1e:37:18:28:64:42:2f:96:
         99:01:4e:e0:82:48:52:05:45:99:49:e4:3b:eb:62:22:a7:8a:
         96:71:52:91:5b:6b:3a:c4:af:ad:27:05:df:0a:4f:d0:89:73:
         f0:f0:2b:66:d3:09:78:b3:c8:f0:c3:a2:45:bf:23:91:1a:ef:
         91:e1:a5:58:b1:93:e7:c4:f8:b7:66:06:35:f7:68:10:56:19:
         ea:9d:7a:4d:d1:4f:13:d9:5d:dc:f9:27:5a:b3:d0:35:9f:82:
         e2:4a:2b:13:bf:8c:9f:ca:4c:81:a9:d6:0e:dd:d1:62:c6:a7:
         1d:89:73:93:07:0c:2a:35:39:38:59:2c:1f:44:28:1e:97:ae:
         04:08:69:e9:d4:db:4a:80:6d:12:13:ef:6a:e7:f2:50:03:d5:
         e7:9b:91:9f:34:f7:0b:7f:bb:83:f2:54:f2:85:8d:a0:e2:4e:
         f5:8e:f9:0f:a8:d5:f0:59:e6:3f:31:9b:01:b7:b4:4f:2d:ba:
         b4:96:e4:52:d5:0c:f9:bd:75:bc:74:4b:90:bb:f0:f4:38:e7:
         9e:72:5a:d1:f4:bc:0b:ee:52:8e:a7:a1:74:06:f1:11:6f:bb:
         1a:3b:d7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:24:23 2025 by rpki-client