Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32322d3332203d3e20323636393635.roa
File:                     34352e3232362e36302e302f32322d3332203d3e20323636393635.roa (raw, json)
Hash identifier:          uzLW3hrIA1gUVBQstRIq+LR5yk5lj83i174TAUSTYLc=
Subject key identifier:   1A:6E:DD:D2:7C:CE:26:D7:2D:87:9F:1B:8A:A6:04:E0:83:6B:48:E8
Certificate issuer:       /CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
Certificate serial:       4B7E4423C4CFD668F86473A9477211707B4F6CB2
Authority key identifier: CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32322d3332203d3e20323636393635.roa
Signing time:             Mon 04 Aug 2025 20:27:30 +0000
ROA not before:           Mon 04 Aug 2025 20:22:30 +0000
ROA not after:            Mon 03 Aug 2026 20:27:30 +0000
asID:                     266965
IP address blocks:        45.226.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl
                          rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7e:44:23:c4:cf:d6:68:f8:64:73:a9:47:72:11:70:7b:4f:6c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
        Validity
            Not Before: Aug  4 20:22:30 2025 GMT
            Not After : Aug  3 20:27:30 2026 GMT
        Subject: CN=1A6EDDD27CCE26D72D879F1B8AA604E0836B48E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:fa:81:e6:e1:d7:2c:ea:d9:a4:c2:75:d8:
                    cb:e6:d8:e5:2f:5e:61:26:08:52:21:b6:b9:8e:95:
                    35:99:19:c0:b3:b2:d3:5d:98:e6:f5:89:01:a1:85:
                    86:1c:bf:65:f4:6a:7a:bf:75:83:c3:e1:9e:35:6a:
                    37:72:93:f9:c7:93:5c:23:a1:34:c2:e4:d3:2e:ab:
                    86:e7:50:e5:a8:09:4e:75:22:4d:71:48:e3:1f:35:
                    c0:51:77:3a:e6:82:07:d4:9f:29:2b:5f:48:7a:0c:
                    e7:d0:04:95:47:3a:5e:73:ed:c8:7c:db:1a:4a:d7:
                    d9:be:af:e0:eb:15:bd:ce:5c:85:a7:b1:75:df:bf:
                    66:39:bf:20:e8:5c:ba:bf:a9:f4:07:c1:f3:b2:73:
                    3f:8a:ca:3f:92:ed:36:0b:2f:ae:79:d5:2c:b3:4e:
                    64:d0:30:68:ef:f2:c5:66:4b:99:b0:f7:07:61:01:
                    4f:b6:22:1d:a5:14:10:fe:14:de:b7:9c:ef:7f:39:
                    2a:cc:65:83:30:c3:22:f5:6a:b0:a4:3b:98:6a:47:
                    9a:1d:71:3c:cc:7c:af:d9:81:7c:6d:64:24:80:85:
                    dc:57:06:fd:7a:35:15:83:cf:64:fc:0f:c8:cd:1f:
                    74:f8:d7:10:c7:de:0a:59:cf:92:11:98:0f:5e:48:
                    03:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6E:DD:D2:7C:CE:26:D7:2D:87:9F:1B:8A:A6:04:E0:83:6B:48:E8
            X509v3 Authority Key Identifier:
                keyid:CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32322d3332203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:d0:0f:7f:6e:31:a6:a9:cd:30:3d:25:97:6e:e2:b9:e5:7c:
         b0:7e:d5:8a:9a:bf:02:73:6b:37:57:06:4f:39:a3:9c:8a:49:
         94:ba:f6:2c:74:96:bb:2d:84:11:8a:0e:a3:b3:3d:ba:fd:06:
         60:58:7b:b6:21:e3:a3:c1:86:43:88:ef:81:fa:c5:a2:9e:97:
         ec:76:46:18:9b:b3:a6:76:86:b9:60:b6:f3:0b:1b:75:5b:85:
         14:09:a2:bd:22:3a:2a:33:22:bd:e9:58:3f:28:d2:6e:3a:51:
         56:8f:50:2c:83:4e:2d:b2:79:a3:ef:6f:93:fc:8a:29:d3:cc:
         22:74:38:a5:3e:6a:bc:aa:ef:5f:a6:0b:fc:fc:4f:b6:ff:b9:
         1a:e2:68:27:a9:05:0b:12:23:05:88:f1:42:e8:5d:4d:3d:a1:
         8d:a1:4e:b3:2a:64:be:c5:6b:ef:8e:ac:cd:bb:2f:3c:e5:c8:
         1b:8f:dc:2b:68:00:b6:6a:28:66:67:af:a8:cb:9a:fc:fc:54:
         e6:19:7c:de:06:dc:52:bf:9b:8e:94:49:ba:60:4e:77:0d:bf:
         04:b2:68:f9:7c:7d:63:85:79:a0:26:bb:1f:1c:ff:1d:ae:c7:
         1e:03:e6:5c:cf:d0:9b:b0:fd:43:45:ee:29:d2:b4:48:f1:75:
         56:6b:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:26:43 2025 by rpki-client