Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa
File:                     34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa (raw, json)
Hash identifier:          6E3IxTwRKEbwepstOxKRYcTx9QBeRucKa9vu+j0PUiM=
Subject key identifier:   A1:CF:0A:EB:08:7E:12:A1:05:0B:41:30:2A:3B:A6:82:13:53:49:AD
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       65F9F036D888C1A2BD4BF31DDB2074C47729F3FC
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa
Signing time:             Fri 13 Jun 2025 15:02:00 +0000
ROA not before:           Fri 13 Jun 2025 14:57:00 +0000
ROA not after:            Fri 12 Jun 2026 15:02:00 +0000
asID:                     268960
IP address blocks:        45.176.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 07:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f9:f0:36:d8:88:c1:a2:bd:4b:f3:1d:db:20:74:c4:77:29:f3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Jun 13 14:57:00 2025 GMT
            Not After : Jun 12 15:02:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:5f:b2:a3:72:c3:8f:79:06:e8:a2:73:a2:
                    d5:06:ea:d5:87:c4:0b:f4:65:d2:29:b8:95:06:5e:
                    bf:68:18:38:87:87:8f:25:5c:ac:c8:68:36:77:87:
                    09:7a:22:d1:e4:11:4b:8d:44:14:88:f0:0e:af:e6:
                    b2:ba:08:87:73:c0:dd:09:db:b5:21:fd:3b:12:54:
                    4a:1f:5e:f2:08:96:fa:d0:c3:a6:60:40:f8:f6:81:
                    9a:3e:a0:05:e2:29:64:63:f3:36:d4:2d:c3:9c:34:
                    0a:f6:81:e4:b4:04:be:f3:ea:22:91:1e:9d:71:a6:
                    9a:59:bc:48:cc:97:8b:ce:a6:c3:fc:96:59:7d:ec:
                    2b:75:0c:9c:ed:9a:3e:5e:d1:3a:db:b7:72:d2:cf:
                    db:4e:42:b2:5c:d4:7e:3b:92:b0:9b:00:5c:ef:30:
                    a8:f4:1d:30:75:7b:4d:e6:81:b0:5f:7f:0d:88:ae:
                    29:08:0d:7c:40:44:75:4a:f7:c2:ab:43:11:f9:e5:
                    c3:71:64:50:53:15:98:ae:b5:dd:87:fd:0c:ff:86:
                    1d:76:73:f8:d5:77:8c:7f:25:3d:d0:bd:6a:87:fb:
                    61:3c:3b:bc:e3:2d:19:21:c6:9d:4d:e0:10:33:38:
                    d8:9a:4a:48:f1:30:b5:4f:47:9b:0b:b5:38:3b:e8:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CF:0A:EB:08:7E:12:A1:05:0B:41:30:2A:3B:A6:82:13:53:49:AD
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234302e302f32332d3233203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:3b:46:65:75:cb:7c:ae:10:b5:5d:a3:a4:0d:a5:f5:37:
         de:4c:0d:c4:61:c6:10:1b:32:1b:65:51:31:3f:6c:89:82:be:
         e1:d6:92:08:a4:d5:d3:0c:b3:00:72:67:12:13:1c:3b:ca:25:
         c1:fe:ed:46:c9:c2:0e:9c:41:79:ad:f0:4d:81:43:2f:00:a0:
         0b:c1:de:70:50:ae:d5:46:2f:47:ed:8e:02:bc:64:79:a3:89:
         49:d5:b5:8b:ec:e1:f5:22:cb:74:00:63:6c:bc:25:6f:83:8b:
         e8:c5:3b:94:05:30:79:e6:06:22:dc:66:18:98:a3:bd:65:a9:
         4b:25:71:0d:3d:bd:24:fa:94:38:fc:61:3a:06:ba:a0:42:53:
         db:c2:29:9e:23:73:34:54:e0:82:64:18:1f:12:79:eb:b7:0c:
         27:d8:f7:a6:73:74:99:4e:c0:ab:14:ba:88:b3:d3:07:0d:4c:
         9d:c0:21:07:ec:8b:b3:cd:f7:00:12:bf:16:fa:f5:e6:59:8d:
         82:af:89:dd:bd:20:0b:c0:90:27:10:64:30:de:d6:45:55:96:
         4d:94:5c:e6:03:68:65:c9:b6:52:b9:6c:17:86:94:1e:c0:fc:
         df:3e:0e:03:04:7d:52:33:fc:6f:bb:76:94:ce:8b:c8:8b:65:
         cc:e7:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:14:17 2025 by rpki-client