Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e322e302f32332d3233203d3e20323632383735.roa
File:                     34352e362e322e302f32332d3233203d3e20323632383735.roa (raw, json)
Hash identifier:          dC6MTRF1xyCFo0hpUV5vBXzIpm0XiuWFrgT2mzryp78=
Subject key identifier:   B9:EC:4E:82:D6:07:84:25:BF:AD:21:88:95:F1:B5:CB:F9:AC:F5:AE
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       73CCC18CD26A03796A9731F2A86D823B806E7F4C
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e322e302f32332d3233203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 12:59:52 +0000
ROA not before:           Thu 02 Jan 2025 12:54:52 +0000
ROA not after:            Thu 01 Jan 2026 12:59:52 +0000
asID:                     262875
IP address blocks:        45.6.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 07:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cc:c1:8c:d2:6a:03:79:6a:97:31:f2:a8:6d:82:3b:80:6e:7f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:54:52 2025 GMT
            Not After : Jan  1 12:59:52 2026 GMT
        Subject: CN=B9EC4E82D6078425BFAD218895F1B5CBF9ACF5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:c1:84:78:50:53:3b:52:8c:01:d2:04:ae:
                    16:7e:79:07:b9:e1:1b:06:c6:c3:a4:e9:f3:0e:e2:
                    b3:6e:96:91:ff:7f:95:98:af:cf:a8:ff:e4:76:17:
                    4c:54:5a:5b:f7:c7:b4:58:7f:f3:4b:56:44:4c:b6:
                    00:ff:18:1f:2b:ed:c3:79:4f:f6:e4:f3:9e:dc:ad:
                    b4:fa:0e:6a:30:41:31:5a:eb:3c:8e:d1:ac:4c:65:
                    d4:de:f6:49:d3:df:12:09:50:21:94:1a:5c:cf:65:
                    d7:96:7f:fe:22:6a:08:37:c7:d5:0f:c0:3e:a3:65:
                    42:2b:75:35:60:45:0e:f5:7d:07:ce:95:2b:4c:f0:
                    3d:39:59:89:f8:8b:f5:64:05:6e:62:9a:d1:6b:f5:
                    6c:38:ba:86:f8:82:3f:e2:b5:55:2d:c6:e8:b4:bf:
                    fc:39:26:d0:32:59:7f:ca:75:5f:5e:78:93:0f:2c:
                    17:48:e0:b9:26:ba:b9:d1:5d:b7:26:37:73:2b:98:
                    7a:90:a9:f8:98:96:27:09:32:16:a8:7a:1d:ee:17:
                    06:3f:a7:54:08:8f:15:d5:2a:35:0d:3e:57:4b:fb:
                    f5:f1:39:5c:a3:56:77:b0:55:1c:78:2d:e6:fc:fd:
                    ea:b7:3d:5d:b5:ed:e3:66:7d:47:da:f2:08:00:4a:
                    be:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EC:4E:82:D6:07:84:25:BF:AD:21:88:95:F1:B5:CB:F9:AC:F5:AE
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e322e302f32332d3233203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:8a:6f:fa:72:af:37:8c:55:31:9e:08:d9:68:d1:2a:7b:ef:
         9f:41:34:c2:97:7c:17:03:09:56:1a:9b:36:15:2a:cb:0a:c2:
         86:a3:39:c0:1e:67:6f:fc:91:04:c5:4a:04:5d:b2:3d:97:2c:
         42:4d:56:d0:e8:be:09:c6:dc:72:1b:41:2b:21:d2:ec:2a:9f:
         27:69:e7:d9:a2:b0:13:84:f4:aa:29:9b:e7:45:f9:f5:69:5c:
         b7:d8:4f:c2:07:e9:9d:94:38:af:85:a6:94:d6:7a:23:c1:31:
         ba:e9:aa:df:0c:f0:09:62:66:32:9b:b8:9a:a4:ae:c7:69:ac:
         e6:9e:22:41:47:cc:c7:7d:b8:04:dc:09:7c:9e:be:41:53:90:
         27:07:ac:fc:11:f2:ed:f2:db:0c:15:e9:df:81:06:77:00:53:
         af:8d:b6:95:74:11:4f:8f:80:1d:fe:75:67:0a:5e:0a:d0:0b:
         5d:ff:e5:c6:39:55:a9:26:da:3a:23:a8:ca:71:82:bd:21:f5:
         74:66:00:69:2d:72:95:9b:7a:02:3f:9b:bd:79:f6:6a:de:19:
         62:28:b9:5e:a0:8c:f1:4a:61:16:fa:d8:79:c9:c2:4d:2b:1c:
         3e:8b:39:80:96:11:8f:78:2b:70:c0:87:a7:23:a3:08:65:94:
         7a:4c:35:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:45:33 2025 by rpki-client