Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/34352e3233392e3138302e302f32322d3234203d3e20323638333835.roa
File:                     34352e3233392e3138302e302f32322d3234203d3e20323638333835.roa (raw, json)
Hash identifier:          wyvJX/Py2Zj0xjZ60JRBNazhH6Recb2vg6q91N+jYz8=
Subject key identifier:   3F:70:03:76:09:05:2F:AA:24:98:C3:DC:48:1C:41:0B:00:03:92:D9
Certificate issuer:       /CN=6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96
Certificate serial:       1D3C10C7042542B56D7E3DF611F53F487AC77D37
Authority key identifier: 6C:7E:69:D6:E3:D5:39:A7:E5:D0:2A:6A:A4:62:ED:A7:7A:75:CE:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/34352e3233392e3138302e302f32322d3234203d3e20323638333835.roa
Signing time:             Tue 01 Jul 2025 20:00:25 +0000
ROA not before:           Tue 01 Jul 2025 19:55:25 +0000
ROA not after:            Tue 30 Jun 2026 20:00:25 +0000
asID:                     268385
IP address blocks:        45.239.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.crl
                          rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3c:10:c7:04:25:42:b5:6d:7e:3d:f6:11:f5:3f:48:7a:c7:7d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96
        Validity
            Not Before: Jul  1 19:55:25 2025 GMT
            Not After : Jun 30 20:00:25 2026 GMT
        Subject: CN=3F70037609052FAA2498C3DC481C410B000392D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7d:6b:50:69:fe:51:46:29:9c:cc:cb:91:9a:
                    2b:48:3e:0d:b7:75:47:cc:a9:ff:5f:c0:c0:3b:c2:
                    9d:6e:ed:ec:a1:15:1a:81:d5:6f:57:d5:95:bd:df:
                    f3:db:7d:96:d9:f8:7b:94:d4:bd:96:ac:7d:a8:b1:
                    21:a8:59:d7:86:38:c9:c0:28:09:4c:95:1d:59:dd:
                    14:58:17:e6:c5:0b:e2:1a:be:ff:d9:11:89:fb:94:
                    0e:3f:6c:25:20:63:82:31:ea:98:ec:4a:60:5d:98:
                    21:43:d1:6b:d8:4d:9b:d8:03:bd:ac:c1:a4:23:7f:
                    5d:c5:14:b5:07:23:07:a0:83:00:1b:80:98:8e:d9:
                    fa:61:16:cb:f0:97:d4:40:ca:6b:aa:95:8d:53:18:
                    8b:f2:64:b3:cf:d7:2d:9c:27:32:46:5d:38:05:c9:
                    d5:f0:a9:65:b9:96:58:33:84:bd:8a:0d:59:20:e9:
                    69:35:7f:f2:11:00:3c:1c:96:0c:8c:c2:f5:5e:a3:
                    66:39:f3:df:16:18:9c:ef:ff:3f:96:20:55:17:11:
                    54:5f:b1:f8:82:b2:a8:ce:c6:c2:34:c0:bf:10:45:
                    c1:73:29:67:4f:09:99:b8:79:35:04:85:68:d0:b8:
                    3d:38:5c:5d:7e:1d:6b:d9:f9:0d:44:2c:9c:1f:a6:
                    eb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:70:03:76:09:05:2F:AA:24:98:C3:DC:48:1C:41:0B:00:03:92:D9
            X509v3 Authority Key Identifier:
                keyid:6C:7E:69:D6:E3:D5:39:A7:E5:D0:2A:6A:A4:62:ED:A7:7A:75:CE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/34352e3233392e3138302e302f32322d3234203d3e20323638333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:b7:e9:4b:5b:24:db:1d:50:b1:f6:0a:b7:de:81:34:01:df:
         3f:93:f8:88:8e:2f:58:5f:d2:bb:81:cc:2e:90:f8:a5:a3:d3:
         1c:4b:c5:88:ac:14:f5:3d:52:e8:50:ed:4b:1e:ab:82:41:54:
         14:22:8a:44:95:f7:77:86:8f:0b:c0:1d:02:dc:35:33:b1:ac:
         91:7e:db:19:9c:1e:62:b2:d1:65:df:62:a1:d7:77:bf:70:be:
         7e:08:dd:a7:41:12:d9:e7:be:0e:21:9e:e5:86:f7:2e:11:4e:
         8b:ba:86:be:0b:8b:de:71:fd:36:4f:06:b5:e1:39:fb:7d:ea:
         2d:05:df:91:a7:40:9b:bb:f6:d8:8e:98:d5:cb:4b:72:0a:a7:
         4f:f4:d6:59:f4:f3:d0:e6:37:93:05:b4:e2:e0:2a:f9:40:b3:
         80:63:37:b4:57:62:99:83:d2:a8:d5:70:b6:d9:bd:c6:4d:34:
         c4:27:d5:c1:95:91:98:a6:3a:16:14:58:b1:d4:d0:6d:de:60:
         ca:da:1a:70:3d:1b:e2:a7:28:ab:48:9e:9e:b9:77:7d:26:31:
         46:ac:98:e3:44:12:2d:0e:71:fa:23:4d:1f:d5:53:62:be:9d:
         78:b7:8a:99:1b:bf:ce:2c:fe:89:ca:04:fa:27:0c:56:32:2b:
         d1:e1:ac:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:50:49 2025 by rpki-client