Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/34352e3136322e3130352e302f32342d3234203d3e20323638353136.roa
File:                     34352e3136322e3130352e302f32342d3234203d3e20323638353136.roa (raw, json)
Hash identifier:          5uxhGspRUXoiU2GKWErH7qfCzLn/y0XVonY2rlFOQj4=
Subject key identifier:   6A:EE:F8:12:05:F2:E4:02:C8:FE:12:A8:9D:6D:F9:AA:E0:11:6A:71
Certificate issuer:       /CN=BC779DF721B6D7336A615134C72893A4896EDE08
Certificate serial:       799A6148A6627842DFEE63BAC5FC165176B422ED
Authority key identifier: BC:77:9D:F7:21:B6:D7:33:6A:61:51:34:C7:28:93:A4:89:6E:DE:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/34352e3136322e3130352e302f32342d3234203d3e20323638353136.roa
Signing time:             Fri 06 Jun 2025 16:59:14 +0000
ROA not before:           Fri 06 Jun 2025 16:54:14 +0000
ROA not after:            Fri 05 Jun 2026 16:59:14 +0000
asID:                     268516
IP address blocks:        45.162.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.crl
                          rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 06:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9a:61:48:a6:62:78:42:df:ee:63:ba:c5:fc:16:51:76:b4:22:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC779DF721B6D7336A615134C72893A4896EDE08
        Validity
            Not Before: Jun  6 16:54:14 2025 GMT
            Not After : Jun  5 16:59:14 2026 GMT
        Subject: CN=6AEEF81205F2E402C8FE12A89D6DF9AAE0116A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:eb:41:8d:92:64:cd:b1:3d:d3:6a:10:87:
                    28:74:6e:77:59:ec:f7:91:16:3e:3d:67:8a:d4:63:
                    4b:16:c4:3c:fa:50:e7:a6:c1:01:50:78:56:29:06:
                    14:38:4f:de:a5:b2:21:77:63:d8:8e:98:8c:37:93:
                    c0:b3:58:de:07:34:75:a4:c8:86:89:d3:71:74:d2:
                    1e:71:e7:74:d9:9d:e9:40:01:0c:6a:51:d4:2b:95:
                    27:ec:49:7c:7a:45:ea:7e:c2:93:7d:67:55:88:1a:
                    c3:b4:64:56:e6:04:b3:02:0b:85:ee:b3:f1:1e:d8:
                    1a:fd:5a:f5:57:8c:22:49:70:b0:90:69:1b:1c:15:
                    94:0f:21:68:e8:53:82:fe:8f:f2:fb:a1:d0:26:b4:
                    f3:b5:b8:15:30:c1:04:d4:3b:04:f7:45:f4:19:46:
                    f1:19:eb:a7:8d:bf:7f:cc:c6:ab:63:48:58:b9:79:
                    9a:30:e3:a7:4c:b7:9c:b1:a3:8b:6b:33:97:9c:1a:
                    5d:ee:eb:1d:87:88:bc:c4:5b:4f:dc:c6:12:e6:45:
                    3a:e3:3e:13:88:3e:16:86:0e:a6:3f:ca:84:df:66:
                    8e:c4:ad:bb:52:8f:76:b2:a4:b9:99:3c:29:f3:37:
                    3b:8d:dd:aa:56:7b:7b:d0:42:30:72:c5:18:73:a1:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EE:F8:12:05:F2:E4:02:C8:FE:12:A8:9D:6D:F9:AA:E0:11:6A:71
            X509v3 Authority Key Identifier:
                keyid:BC:77:9D:F7:21:B6:D7:33:6A:61:51:34:C7:28:93:A4:89:6E:DE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/34352e3136322e3130352e302f32342d3234203d3e20323638353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:e5:51:f5:e5:9d:72:66:72:63:76:fd:1a:3e:9e:e7:f2:d8:
         26:89:9b:01:9f:d6:50:5a:7f:4e:6c:f7:d7:e1:fb:9a:ce:fb:
         47:a6:2c:2e:26:26:9c:23:dc:75:b5:a7:0a:4f:1d:34:10:3d:
         3d:eb:c4:a1:2c:36:6a:81:ea:e9:86:01:fc:cb:26:65:31:9f:
         cc:28:d0:30:13:a3:91:21:f4:ad:92:75:26:41:4e:8d:9b:b6:
         7a:33:0c:23:2d:51:a8:d9:40:df:d5:95:f3:d6:b7:01:e5:59:
         85:0d:98:4c:0c:36:db:51:27:aa:ec:6a:1e:56:b1:22:28:94:
         18:2b:aa:71:30:0a:7a:c5:55:81:0d:7d:4a:69:0c:9e:ba:f9:
         db:cc:b3:f5:f7:e7:a3:9c:3d:23:01:c1:1d:ad:66:7f:5b:0b:
         7a:e0:8c:8a:74:c4:59:8b:6a:b9:37:22:d9:cb:3f:d4:e7:2b:
         7f:df:d7:e5:d3:43:15:b1:ce:14:b7:07:28:b1:94:4c:b2:f1:
         e3:58:f9:69:5d:0e:cd:45:2e:64:7f:83:5f:de:27:67:5b:eb:
         b9:22:a2:15:9b:47:cd:67:49:fb:a2:35:97:1f:59:9e:c8:cf:
         eb:55:cf:3d:70:28:85:39:b1:dd:89:9e:99:5c:9c:0e:77:87:
         3b:18:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:18:23 2025 by rpki-client