Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/34352e3136332e3133322e302f32322d3332203d3e20323638363730.roa
File:                     34352e3136332e3133322e302f32322d3332203d3e20323638363730.roa (raw, json)
Hash identifier:          gzmP7JWp1229lENkkME6+YK6GhrsboJt/RN4UVIsjdQ=
Subject key identifier:   FF:D2:96:39:8B:58:D9:4B:A1:54:65:C2:31:29:2F:D2:69:02:30:E4
Certificate issuer:       /CN=6B45B255A151F7B38C1D8A7D754EA5B06C00E573
Certificate serial:       451CF937111848824ABE15D3E6E6209207E25F93
Authority key identifier: 6B:45:B2:55:A1:51:F7:B3:8C:1D:8A:7D:75:4E:A5:B0:6C:00:E5:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B45B255A151F7B38C1D8A7D754EA5B06C00E573.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/34352e3136332e3133322e302f32322d3332203d3e20323638363730.roa
Signing time:             Wed 18 Jun 2025 13:28:05 +0000
ROA not before:           Wed 18 Jun 2025 13:23:05 +0000
ROA not after:            Wed 17 Jun 2026 13:28:05 +0000
asID:                     268670
IP address blocks:        45.163.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/6B45B255A151F7B38C1D8A7D754EA5B06C00E573.crl
                          rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/6B45B255A151F7B38C1D8A7D754EA5B06C00E573.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B45B255A151F7B38C1D8A7D754EA5B06C00E573.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 09:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1c:f9:37:11:18:48:82:4a:be:15:d3:e6:e6:20:92:07:e2:5f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B45B255A151F7B38C1D8A7D754EA5B06C00E573
        Validity
            Not Before: Jun 18 13:23:05 2025 GMT
            Not After : Jun 17 13:28:05 2026 GMT
        Subject: CN=FFD296398B58D94BA15465C231292FD2690230E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:eb:b4:e6:f0:06:c8:31:6a:20:2c:33:90:98:
                    af:78:b9:6e:49:ff:ba:3b:4b:96:94:35:c6:f7:ee:
                    85:14:9a:50:cd:2d:5e:17:94:23:34:7c:a8:7f:5c:
                    4d:9d:40:a4:7d:df:12:f6:bb:0e:63:ae:05:24:50:
                    9e:94:34:82:3a:e8:39:74:3a:08:22:81:fc:46:60:
                    8d:01:96:13:65:ed:3c:f2:ab:8d:ec:48:c6:ed:52:
                    42:65:53:ac:1b:f3:55:31:36:65:0a:94:8c:e6:01:
                    e1:ff:03:06:94:cb:f0:6a:30:7b:d2:43:8c:c0:11:
                    04:8f:42:c6:4f:89:7e:5b:ac:1d:f3:93:2c:a2:33:
                    37:44:e4:76:1c:9b:1a:4e:cf:86:fa:1b:f3:d3:b9:
                    3a:9e:a9:bf:08:c4:86:fc:00:34:60:89:c6:63:a9:
                    29:2a:e7:36:42:86:9d:08:81:19:85:8b:3b:f8:32:
                    4f:5e:53:c8:84:fb:45:8e:aa:02:5b:fc:70:46:aa:
                    1c:fb:11:a7:a4:3c:4e:57:a8:9f:b7:9f:72:58:87:
                    74:46:2d:96:c8:83:68:b7:77:28:01:ae:45:93:95:
                    b0:c0:05:37:ce:0b:72:b1:45:76:26:04:57:c1:09:
                    76:d6:78:42:dd:e0:3c:20:a2:37:ca:cb:ba:a7:a6:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D2:96:39:8B:58:D9:4B:A1:54:65:C2:31:29:2F:D2:69:02:30:E4
            X509v3 Authority Key Identifier:
                keyid:6B:45:B2:55:A1:51:F7:B3:8C:1D:8A:7D:75:4E:A5:B0:6C:00:E5:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/6B45B255A151F7B38C1D8A7D754EA5B06C00E573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B45B255A151F7B38C1D8A7D754EA5B06C00E573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/34352e3136332e3133322e302f32322d3332203d3e20323638363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:39:0a:ae:5f:91:ab:cb:30:bb:6b:94:3f:e4:7a:57:77:bb:
         25:94:07:27:a1:57:70:a5:6b:54:9a:51:cd:ad:6d:96:35:32:
         d5:f2:3b:bc:15:d2:c8:7c:54:e6:08:87:98:d8:b8:15:ad:35:
         db:d0:28:6e:dd:f2:88:47:af:98:ed:45:0b:0b:1b:22:e4:e3:
         2a:8c:f9:71:ce:c8:1b:c7:9e:37:cf:3c:2e:c8:30:f9:79:08:
         10:2f:20:ae:a9:e5:df:db:0c:ad:5d:67:20:20:ad:e4:34:a3:
         94:65:91:b0:f0:6e:52:75:38:d5:25:ff:07:8d:d1:c4:7a:c6:
         c6:ed:93:4b:91:e3:b3:85:f9:1f:3e:7e:2a:29:af:07:25:af:
         71:1f:82:9f:1c:d0:6d:1a:99:45:8b:fc:99:17:d5:7d:a8:2f:
         7e:e5:cb:6d:d3:ef:87:db:80:08:ca:9f:e9:d0:bb:67:4d:1b:
         58:af:d3:ff:94:bc:ef:78:5c:8c:b9:f0:c1:cc:94:3d:b7:85:
         b5:ef:28:55:47:45:85:be:d1:64:83:08:72:ee:27:16:cf:36:
         0f:19:92:72:6c:43:60:16:85:18:c6:50:b8:ba:7e:f3:19:4b:
         69:d2:a1:79:87:27:07:c3:ea:59:47:d2:cb:b9:4f:3e:7f:0a:
         e8:e5:1c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:25:33 2025 by rpki-client