Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234322e302f32342d3234203d3e20323638393630.roa
File:                     34352e3137362e3234322e302f32342d3234203d3e20323638393630.roa (raw, json)
Hash identifier:          +EPdHKoaiubPWflN8yv3uj4eido3sraKGYL0K6febaw=
Subject key identifier:   0F:AB:AA:1A:80:8C:F1:BF:7D:6C:EF:76:D3:8E:B0:21:03:C8:B8:3C
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       117BE83283064D2FFCBDE0715F7B7FFC03AC3A1D
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234322e302f32342d3234203d3e20323638393630.roa
Signing time:             Fri 13 Jun 2025 15:02:00 +0000
ROA not before:           Fri 13 Jun 2025 14:57:00 +0000
ROA not after:            Fri 12 Jun 2026 15:02:00 +0000
asID:                     268960
IP address blocks:        45.176.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 15:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7b:e8:32:83:06:4d:2f:fc:bd:e0:71:5f:7b:7f:fc:03:ac:3a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Jun 13 14:57:00 2025 GMT
            Not After : Jun 12 15:02:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:b4:6c:d8:a3:9a:42:fc:c5:52:18:77:a7:
                    9b:fd:61:53:5a:b2:d3:eb:e3:07:04:45:af:72:6c:
                    4b:c1:31:4e:7e:0d:18:3d:e9:5d:ab:e3:9c:99:96:
                    33:db:fb:14:13:7a:d6:f8:80:c8:cb:19:a4:f7:46:
                    34:e7:20:75:4f:3f:e1:fb:ba:d4:8a:cd:01:69:81:
                    9a:61:0a:e3:0a:e9:df:6b:da:85:9b:c3:b3:e5:7c:
                    93:8a:58:22:d4:71:a7:1c:43:07:bc:5a:f8:a2:29:
                    7a:45:ef:b6:94:49:5b:d9:11:53:08:7d:22:71:f9:
                    fe:ac:91:6e:12:9f:4a:fb:a1:1b:76:e5:c3:fb:3c:
                    37:09:46:b3:ab:fe:e8:91:12:13:3a:08:1f:bc:ca:
                    a1:47:7c:6a:d8:03:f7:8c:00:ab:50:23:9d:41:0c:
                    10:9c:15:de:f0:34:7b:96:10:b3:89:26:a9:57:6f:
                    0f:60:af:17:39:5d:a7:11:8c:4c:c2:95:a5:e4:dc:
                    86:54:07:e5:18:13:bd:2b:b3:88:40:b9:29:72:ae:
                    fd:9a:0d:be:8b:18:d4:8d:ec:62:80:26:ff:4c:51:
                    7b:ba:07:95:a5:60:49:1c:a2:e2:15:3c:b7:d2:e1:
                    8a:84:a8:94:5e:09:c4:3b:5e:01:ef:ee:6d:89:14:
                    fd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AB:AA:1A:80:8C:F1:BF:7D:6C:EF:76:D3:8E:B0:21:03:C8:B8:3C
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234322e302f32342d3234203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:7d:3a:57:37:21:18:01:aa:c6:61:bc:aa:bb:35:13:89:b5:
         52:2e:75:81:f6:4e:7d:d6:d1:96:d7:f7:14:d9:1f:13:3b:f4:
         41:a1:bc:41:6e:bc:4a:43:5e:a6:2a:84:bf:e1:e1:29:0a:e5:
         bb:4c:7f:ca:ae:cb:a0:5c:8a:6f:7c:f4:2b:f7:b8:25:50:fd:
         7c:72:6b:c5:0f:ad:96:56:df:75:bc:77:86:8e:8b:4f:c9:b1:
         02:e3:21:63:75:32:73:b8:c0:87:e0:90:90:76:0b:6f:f6:bc:
         c8:e3:7d:c9:8f:76:df:00:0a:a4:7f:54:fa:d7:74:2e:94:5f:
         87:45:0d:bd:c2:b2:bd:8c:ff:16:c7:66:5d:48:89:b7:bc:78:
         30:63:c2:7f:ea:2a:96:6f:fe:99:d9:84:5a:d0:8a:5c:67:09:
         af:7a:29:45:a0:66:d0:e8:69:fe:00:e8:f9:0c:39:86:5a:9d:
         ed:6d:2f:5a:be:55:f7:b3:33:0f:3b:bb:88:f4:7d:8f:f9:5d:
         a5:75:3b:9e:7d:59:5a:2a:41:86:0b:4d:8a:a4:e6:c1:a0:9c:
         01:91:31:87:63:00:ce:9f:bd:44:52:b4:7e:16:d3:92:93:5d:
         02:5d:05:b4:6d:01:51:52:e1:41:d9:77:8e:a1:91:1f:5b:09:
         57:b9:8f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:42:12 2025 by rpki-client