Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3131302e302f32332d3233203d3e20323635393530.roa
File:                     3136342e3136332e3131302e302f32332d3233203d3e20323635393530.roa (raw, json)
Hash identifier:          xfFIH4ubjPLbogjscrkpDjwZQMmR3BQIWSBaWzyZInQ=
Subject key identifier:   D9:9D:50:6B:A5:52:5A:D2:3F:06:DE:93:F3:F4:4F:D5:90:FA:F0:6E
Certificate issuer:       /CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
Certificate serial:       C1A6EB30787DC75AFE7CA98A9726CD82621F57
Authority key identifier: 2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3131302e302f32332d3233203d3e20323635393530.roa
Signing time:             Wed 11 Jun 2025 05:46:59 +0000
ROA not before:           Wed 11 Jun 2025 05:41:59 +0000
ROA not after:            Wed 10 Jun 2026 05:46:59 +0000
asID:                     265950
IP address blocks:        164.163.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 06:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c1:a6:eb:30:78:7d:c7:5a:fe:7c:a9:8a:97:26:cd:82:62:1f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
        Validity
            Not Before: Jun 11 05:41:59 2025 GMT
            Not After : Jun 10 05:46:59 2026 GMT
        Subject: CN=D99D506BA5525AD23F06DE93F3F44FD590FAF06E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:ae:aa:69:8f:9b:97:a2:da:33:0d:d0:98:
                    cf:f1:64:0f:bd:0c:a3:87:e9:fc:17:2f:f8:80:eb:
                    2a:63:5a:c7:91:a5:49:b0:de:7e:56:a9:3f:c3:dd:
                    58:e4:a5:f1:46:fd:d5:58:40:4f:5a:d6:1e:23:ea:
                    c5:b7:16:e3:76:53:67:3f:d3:a5:e2:0f:5e:76:27:
                    ce:dc:f8:2d:e5:8f:31:de:36:00:7b:bd:3d:b4:76:
                    fa:63:42:73:23:b4:a0:f2:2f:de:9b:d6:61:3a:fc:
                    a0:7e:d1:b6:58:69:4d:12:82:80:c2:2d:75:69:1f:
                    5b:c7:0a:3b:fc:e4:3b:94:d4:60:2c:74:04:94:df:
                    0b:00:7d:a8:ff:45:e2:9f:db:e4:d1:1a:30:9c:5b:
                    ef:04:2a:54:4d:ec:b2:0a:d5:30:fd:a2:46:e9:f0:
                    c0:61:27:15:8f:75:65:c3:e3:f1:72:1f:2d:70:dd:
                    e3:a3:ca:6d:bf:75:02:77:0a:74:01:b2:69:78:16:
                    1b:95:87:d8:9b:e0:34:1e:45:90:ff:a8:f8:3d:bd:
                    65:c8:42:3f:e4:5a:4f:5d:26:b6:0f:4c:1e:6c:d1:
                    74:3e:ef:e7:b7:86:b0:dc:d5:f6:b9:65:43:45:81:
                    c0:73:43:41:bb:bf:44:a7:9d:4e:c7:f8:52:8d:49:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9D:50:6B:A5:52:5A:D2:3F:06:DE:93:F3:F4:4F:D5:90:FA:F0:6E
            X509v3 Authority Key Identifier:
                keyid:2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3131302e302f32332d3233203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:c3:84:00:b5:8d:69:27:e9:32:0f:73:bc:4e:25:34:99:0f:
         a9:67:65:40:7d:61:fa:74:ae:b6:98:38:be:90:c2:64:8b:48:
         ac:64:9a:6c:3c:fb:bf:a2:40:d8:2c:e0:eb:ba:12:1c:15:e3:
         9e:31:9c:d9:fa:ee:f1:82:4d:ae:de:7b:1a:19:8c:1b:25:57:
         9f:d5:39:d8:23:1b:00:ad:08:c6:52:86:3d:5c:dc:f9:81:5a:
         ba:c9:43:33:5f:5b:d4:81:ef:94:9f:13:41:9a:d3:21:63:b2:
         65:18:1a:85:c5:2d:c3:5f:1b:47:1f:b6:8b:5f:30:80:c0:bd:
         3f:19:2b:a7:3c:c8:d4:68:6b:57:a5:25:c5:2f:e8:79:6c:98:
         ca:04:80:5f:28:67:f4:eb:a1:d5:34:7a:a8:d1:f8:f2:34:94:
         54:d0:ff:e7:f1:6c:f9:83:0a:18:4d:93:0f:49:af:65:b9:cd:
         8d:bb:15:b7:7a:a6:ba:58:e2:df:ed:a6:bd:b1:e2:e7:ac:ac:
         ab:08:56:49:b5:4d:ee:06:be:f1:dc:d1:9e:bb:c4:77:ed:93:
         75:be:fe:b5:da:82:7b:a7:ee:42:c3:ba:76:3e:c2:30:ef:48:
         94:73:71:3a:0a:dc:82:e8:65:32:4b:ec:59:c9:b0:d2:28:04:
         9d:c7:11:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:23:05 2025 by rpki-client