Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e332e302f32342d3234203d3e20323632383735.roa
File:                     34352e362e332e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          7rjyTSuvN0AA3BPv0hY9kkT/FRi7OW7msFYhZT77++o=
Subject key identifier:   26:95:60:D7:75:22:0B:EF:B7:31:65:3C:B4:E6:F2:D7:EA:15:B0:85
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       4A0E3B4B8A3E9B0DF2DE5362250BFE9FF8AF163E
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e332e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 12:58:53 +0000
ROA not before:           Thu 02 Jan 2025 12:53:53 +0000
ROA not after:            Thu 01 Jan 2026 12:58:53 +0000
asID:                     262875
IP address blocks:        45.6.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 07:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0e:3b:4b:8a:3e:9b:0d:f2:de:53:62:25:0b:fe:9f:f8:af:16:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:53:53 2025 GMT
            Not After : Jan  1 12:58:53 2026 GMT
        Subject: CN=269560D775220BEFB731653CB4E6F2D7EA15B085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:2d:95:ef:4a:5c:df:a6:11:d5:ee:4a:f1:
                    90:c0:17:be:a7:02:f9:55:27:eb:10:5c:fa:f2:69:
                    bf:4a:ef:43:97:a6:f7:a3:23:b7:8a:9b:6e:00:57:
                    18:ea:88:1e:05:66:fb:de:4b:4f:57:e6:0d:40:40:
                    a5:5d:2a:c2:e5:13:f3:95:26:2c:ed:91:93:48:d0:
                    5e:78:2b:a5:10:a5:2c:a5:06:2f:a7:cd:19:00:6d:
                    b7:3b:ed:55:da:15:90:1a:5b:b7:b7:de:35:66:65:
                    d8:10:37:3f:cf:d2:99:d2:3b:24:82:31:d0:3f:5b:
                    07:7d:65:23:ce:1f:2b:38:ec:9c:3b:02:e6:8a:7e:
                    c7:3d:06:f1:06:27:d4:a3:f8:44:a7:72:e0:31:d8:
                    85:f2:72:c1:80:d7:ed:9c:5a:ca:7e:c9:58:d9:e3:
                    df:ac:b0:f1:b1:e6:f5:25:d8:a7:9b:be:4c:7f:f6:
                    86:a5:dd:b1:cf:6f:d8:b5:d1:32:c2:b6:78:e8:8c:
                    16:88:81:18:f7:e8:38:81:c0:ba:05:1e:2c:b6:09:
                    06:98:cb:3b:e0:59:73:ae:7b:8f:fb:67:f4:99:b4:
                    45:a5:7c:d0:2f:f5:48:ae:5c:47:97:0a:52:0d:37:
                    30:6c:2e:ae:bb:18:cb:6d:e8:6a:e9:f7:02:eb:e9:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:95:60:D7:75:22:0B:EF:B7:31:65:3C:B4:E6:F2:D7:EA:15:B0:85
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e332e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a2:20:b0:6a:f9:ca:81:ef:e1:0b:0b:ac:dc:13:42:de:ca:
         ef:b8:8f:da:3d:fa:14:b8:8d:e1:0d:f8:41:2f:8f:5c:51:66:
         6b:90:65:08:58:58:73:19:55:e1:d7:e9:db:91:d0:f2:3e:10:
         b4:a0:11:ac:09:39:62:82:b5:88:7d:99:32:df:09:05:4b:27:
         a2:75:59:3b:2a:ca:8d:e2:d4:c6:0f:20:19:c5:c3:ac:e3:a3:
         da:b1:38:e1:11:a2:e2:bd:8a:15:ff:38:c7:69:a9:da:7e:d1:
         51:dd:c1:c1:ce:74:42:28:fb:cc:0d:76:5c:e2:31:6c:7c:11:
         2a:49:01:27:be:fb:bd:5a:98:9c:68:63:78:90:27:3f:60:e2:
         5a:2f:0f:9b:24:5a:0e:37:c6:6f:ad:8b:12:cf:76:69:e7:a3:
         bd:a6:d3:38:95:b2:d0:c6:f1:4e:f9:02:7b:b2:09:a2:d6:cc:
         90:7d:1d:82:91:67:19:67:36:ae:e1:63:66:6f:aa:e8:0e:45:
         b4:a9:92:84:a1:9f:c9:e0:39:2c:3a:23:29:12:55:6a:b3:aa:
         1d:8d:5b:86:63:32:ae:2f:32:c7:a2:47:2b:ee:ca:3e:7d:36:
         43:86:5b:d2:a7:00:19:14:e0:d5:54:4d:54:04:c0:1f:1a:c0:
         c8:c9:e6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:48:10 2025 by rpki-client