Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/34352e37302e3231362e302f32342d3234203d3e20323637353838.roa
File:                     34352e37302e3231362e302f32342d3234203d3e20323637353838.roa (raw, json)
Hash identifier:          qQz9i+GuCXfRPQ/Po8eroLw0Zbhep/iFmtkKBgr4V4M=
Subject key identifier:   93:07:D8:6E:75:32:4A:1A:8F:76:B2:6D:06:F3:69:28:B8:7D:D0:0A
Certificate issuer:       /CN=EB27E991207232DB9C6D847F06224E25D3606469
Certificate serial:       168CBD7E7E24DC772953DABE35394B0BEDBE2523
Authority key identifier: EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/34352e37302e3231362e302f32342d3234203d3e20323637353838.roa
Signing time:             Fri 13 Jun 2025 15:14:00 +0000
ROA not before:           Fri 13 Jun 2025 15:09:00 +0000
ROA not after:            Fri 12 Jun 2026 15:14:00 +0000
asID:                     267588
IP address blocks:        45.70.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl
                          rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 07:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8c:bd:7e:7e:24:dc:77:29:53:da:be:35:39:4b:0b:ed:be:25:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB27E991207232DB9C6D847F06224E25D3606469
        Validity
            Not Before: Jun 13 15:09:00 2025 GMT
            Not After : Jun 12 15:14:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:77:a7:1a:5f:00:b9:7b:9b:3a:ba:e3:c6:
                    a3:3f:c7:0f:5b:bd:a8:6f:3b:eb:f4:79:dc:40:51:
                    fe:e8:60:ab:fd:53:4b:1d:04:95:cd:77:1f:9e:e1:
                    10:15:5e:7d:52:fa:00:dc:76:56:80:4e:2b:7d:14:
                    ec:9d:5c:b0:a0:f8:81:ae:52:3a:75:12:c1:ea:31:
                    6b:aa:ee:66:55:c7:8b:31:fd:c4:ac:43:ce:9f:e2:
                    17:15:da:f9:23:d9:7f:dc:ea:a6:52:49:4d:a9:96:
                    fe:71:a9:c2:9a:b0:e4:bf:8a:cb:bd:72:03:13:e6:
                    68:66:a4:6b:5a:89:aa:57:64:9f:c5:99:c5:e3:2e:
                    8b:9d:59:d1:3a:05:41:30:b0:3b:77:2e:d3:d3:21:
                    40:bc:aa:48:b1:aa:d5:36:6f:a8:60:1a:83:bd:ac:
                    d7:02:62:6e:a0:84:fb:35:27:84:c5:cb:22:e7:84:
                    fc:30:6d:cf:b1:7c:52:ed:19:a0:92:a2:d5:46:63:
                    9a:c3:db:4d:65:b6:cd:38:60:eb:4c:17:e4:bd:74:
                    0b:8f:48:05:4f:b0:6d:f7:e5:b4:48:7c:2c:f8:18:
                    5f:6e:e9:e1:d5:02:3c:df:d3:0a:6e:27:18:cb:54:
                    43:33:a9:16:fe:90:52:5e:18:76:78:f4:b9:32:88:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:07:D8:6E:75:32:4A:1A:8F:76:B2:6D:06:F3:69:28:B8:7D:D0:0A
            X509v3 Authority Key Identifier:
                keyid:EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/34352e37302e3231362e302f32342d3234203d3e20323637353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2b:57:fb:b9:13:64:76:76:b4:fd:6e:b5:a5:ad:d3:e1:92:
         82:b7:df:5b:7c:2c:fa:0d:de:a8:f4:de:73:46:51:26:61:52:
         a3:fb:b2:06:ac:74:af:f8:a2:a6:c0:43:51:42:fe:08:a2:41:
         07:2d:c5:85:a5:28:94:82:21:e9:0d:98:55:fa:c8:24:ae:93:
         04:c1:45:4b:c0:7e:2c:12:c1:89:e0:c9:6e:1e:d4:42:4c:ad:
         6f:39:7a:84:77:bc:15:b6:3c:ce:23:e6:6d:f6:6a:e5:73:b9:
         4f:0d:d9:79:5e:05:00:7b:d3:35:d1:e3:87:e9:56:70:0f:64:
         f2:aa:34:20:40:5e:9f:4f:16:94:8d:3b:11:e0:8a:d2:2c:ef:
         ec:f3:72:d4:7a:b9:74:65:a6:35:f5:a3:d7:6a:be:8c:d0:74:
         1d:9d:20:ba:44:f1:21:58:46:b4:90:3b:27:93:b5:e9:79:b0:
         d8:9d:8c:12:be:e6:f6:af:11:34:33:54:3b:0a:83:5c:55:58:
         d8:3d:5f:b0:c0:48:c7:59:23:50:f9:16:ff:ad:a2:4e:77:66:
         af:8d:b7:c6:49:40:7e:db:2a:c9:9d:9b:d1:00:ac:54:43:05:
         49:f8:85:1b:d5:28:a1:1f:53:f4:05:1e:78:29:ea:8c:44:e2:
         63:96:c0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:18:32 2025 by rpki-client