Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34352e352e3137372e302f32342d3234203d3e20323636313934.roa
File:                     34352e352e3137372e302f32342d3234203d3e20323636313934.roa (raw, json)
Hash identifier:          FdYACwTg4NYP1/tFzw5HsBvt03XO5V0lebyCymmkRag=
Subject key identifier:   F4:74:8A:7B:B1:34:D0:6F:A7:6F:7E:CF:A4:B3:08:AD:AA:28:4D:76
Certificate issuer:       /CN=F60DD5691290F0E1020443A5AA367AB2EA0FF195
Certificate serial:       22C9B8DA1F28926AD1DBC6B5817FF2ABD10363EE
Authority key identifier: F6:0D:D5:69:12:90:F0:E1:02:04:43:A5:AA:36:7A:B2:EA:0F:F1:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F60DD5691290F0E1020443A5AA367AB2EA0FF195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34352e352e3137372e302f32342d3234203d3e20323636313934.roa
Signing time:             Wed 04 Jun 2025 15:40:59 +0000
ROA not before:           Wed 04 Jun 2025 15:35:59 +0000
ROA not after:            Wed 03 Jun 2026 15:40:59 +0000
asID:                     266194
IP address blocks:        45.5.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/F60DD5691290F0E1020443A5AA367AB2EA0FF195.crl
                          rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/F60DD5691290F0E1020443A5AA367AB2EA0FF195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F60DD5691290F0E1020443A5AA367AB2EA0FF195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c9:b8:da:1f:28:92:6a:d1:db:c6:b5:81:7f:f2:ab:d1:03:63:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F60DD5691290F0E1020443A5AA367AB2EA0FF195
        Validity
            Not Before: Jun  4 15:35:59 2025 GMT
            Not After : Jun  3 15:40:59 2026 GMT
        Subject: CN=F4748A7BB134D06FA76F7ECFA4B308ADAA284D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:41:aa:7a:28:e0:ce:68:21:11:1c:7b:ad:
                    b3:5f:77:e9:e6:05:4e:14:94:57:24:ff:7a:4a:66:
                    41:c1:18:86:e6:78:40:93:21:b9:57:f0:29:77:3a:
                    f5:0c:d2:fe:48:02:f8:c2:7f:e1:04:6a:e4:5c:62:
                    d8:f7:0d:17:62:5d:b5:c8:4d:aa:08:b1:79:46:cc:
                    5e:4b:d5:d7:5d:88:56:9f:9b:2e:ee:df:c8:95:f9:
                    42:8e:74:56:21:6c:41:c0:37:86:cb:49:f8:43:81:
                    ed:ee:d3:2f:f6:55:fa:b6:db:6d:f0:aa:d9:79:0c:
                    3e:da:85:07:ce:27:d3:6e:b4:ef:d7:4e:0d:c0:8f:
                    26:70:b5:16:34:b8:c3:3e:10:fe:07:45:d2:ce:ce:
                    15:21:0f:e2:10:41:c9:24:5b:22:02:f7:90:14:87:
                    54:aa:cd:4d:02:6b:69:b8:56:a5:d3:fd:9d:bf:9c:
                    78:45:d8:90:48:3e:96:79:d0:e8:d4:a3:9c:8e:11:
                    05:e7:cc:39:1b:9a:47:46:c5:91:de:79:44:ec:8a:
                    3e:70:90:d5:6f:86:bf:34:59:fd:6b:b5:7a:18:39:
                    df:35:4b:c7:cf:29:b3:e9:2b:7c:7a:f3:19:59:7b:
                    7d:fb:d6:75:5e:e3:fb:c9:db:21:b3:4b:7d:58:aa:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:8A:7B:B1:34:D0:6F:A7:6F:7E:CF:A4:B3:08:AD:AA:28:4D:76
            X509v3 Authority Key Identifier:
                keyid:F6:0D:D5:69:12:90:F0:E1:02:04:43:A5:AA:36:7A:B2:EA:0F:F1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/F60DD5691290F0E1020443A5AA367AB2EA0FF195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F60DD5691290F0E1020443A5AA367AB2EA0FF195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34352e352e3137372e302f32342d3234203d3e20323636313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:3a:a6:4d:19:00:8b:3e:28:8a:c0:73:d9:7a:2a:88:e2:dd:
         05:38:ea:b5:27:d4:c8:29:9e:fc:08:0e:12:f1:f0:b3:6f:c9:
         c7:c5:23:9d:a9:9d:76:d5:95:44:1b:7e:0a:6b:6b:c2:5b:61:
         75:a7:d9:c0:9f:b2:88:10:0a:a8:97:34:37:09:78:e8:12:89:
         f8:f8:8f:14:2b:20:be:1d:7a:9f:e2:bc:b9:47:47:d2:c0:33:
         ae:fa:7d:ef:9c:e2:56:b9:84:83:9a:e3:ae:ac:0a:41:50:ca:
         10:8b:84:21:d6:a1:2d:dc:36:36:f9:a0:66:eb:87:a7:f2:18:
         4d:fc:af:f7:a2:6f:db:f0:66:3e:34:cc:90:ee:c9:ea:82:55:
         1c:51:dc:4f:23:f8:7e:e6:77:1a:2f:3e:55:0d:19:6a:2e:bf:
         22:f1:3c:e4:58:b9:84:e5:96:d8:13:6b:4b:8e:64:fc:88:6a:
         3c:b8:53:bb:84:77:84:f8:9f:74:fd:7c:43:12:ad:ef:0e:07:
         57:96:98:01:f4:fe:fa:78:38:63:a4:18:10:81:1d:98:d6:06:
         59:af:7b:d9:ab:ef:13:b8:d9:ca:6a:aa:c3:c9:8c:78:1a:6a:
         ff:b8:c0:f9:70:ec:68:78:e8:2b:c8:b5:47:44:75:91:62:bb:
         f0:48:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:56:17 2025 by rpki-client