Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137332e302f32342d3234203d3e20323636323635.roa
File:                     34352e36352e3137332e302f32342d3234203d3e20323636323635.roa (raw, json)
Hash identifier:          Pwlhwn3z5AEcR4b+hFG8jqGhnjgT7XzkXEtYQtgZF/o=
Subject key identifier:   FE:5B:6D:C4:E0:30:C1:4B:89:98:3B:8F:A8:0E:8E:6C:1E:22:6C:D1
Certificate issuer:       /CN=61B932CD849CE672D7ADF5C35F76FC83A060268C
Certificate serial:       4ED732835EBB5B7ECC39EC6AFD1788317A7B5766
Authority key identifier: 61:B9:32:CD:84:9C:E6:72:D7:AD:F5:C3:5F:76:FC:83:A0:60:26:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137332e302f32342d3234203d3e20323636323635.roa
Signing time:             Mon 09 Jun 2025 20:24:28 +0000
ROA not before:           Mon 09 Jun 2025 20:19:28 +0000
ROA not after:            Mon 08 Jun 2026 20:24:28 +0000
asID:                     266265
IP address blocks:        45.65.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.crl
                          rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 00:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d7:32:83:5e:bb:5b:7e:cc:39:ec:6a:fd:17:88:31:7a:7b:57:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B932CD849CE672D7ADF5C35F76FC83A060268C
        Validity
            Not Before: Jun  9 20:19:28 2025 GMT
            Not After : Jun  8 20:24:28 2026 GMT
        Subject: CN=FE5B6DC4E030C14B89983B8FA80E8E6C1E226CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:94:7b:4e:23:d6:ea:89:08:b0:ee:b9:fb:
                    e0:f6:4a:ea:59:db:4b:73:29:2e:97:72:ab:cb:28:
                    83:c3:32:89:fa:5f:d2:ed:a0:25:da:c5:39:1f:c2:
                    7d:4e:4b:11:45:e1:06:a4:43:0c:77:b6:66:58:d3:
                    02:9a:50:50:9f:79:b5:96:9e:ff:2a:c3:1d:c0:d5:
                    91:85:b6:05:87:3a:92:87:71:7d:63:98:6a:82:a9:
                    a7:04:00:fc:d0:2a:27:3e:0f:6e:41:c5:44:ac:dd:
                    c0:9d:96:ea:67:03:bb:52:be:e6:62:22:86:fe:fe:
                    ce:b1:17:91:6d:d3:0b:03:64:59:8c:d0:ff:6a:e7:
                    63:59:2a:0a:cf:4d:23:04:0a:cf:5c:f9:7c:b0:88:
                    a3:4e:c8:90:0e:8d:62:58:b1:9a:b9:68:33:07:7b:
                    d5:00:a0:72:e9:96:7a:c2:67:8e:fe:29:ed:24:4d:
                    bc:ed:e5:40:f3:89:2b:99:4e:62:40:49:d5:f8:8a:
                    bf:bc:56:23:9d:8c:f1:07:3e:54:49:29:ab:0d:6b:
                    5b:94:11:26:2c:0a:42:39:0b:5a:89:0a:4a:62:40:
                    62:06:a6:b2:97:c5:8d:d8:71:d5:75:de:1c:81:cf:
                    eb:7d:35:2c:4f:ba:ea:e0:ea:b9:1e:d8:6a:72:75:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5B:6D:C4:E0:30:C1:4B:89:98:3B:8F:A8:0E:8E:6C:1E:22:6C:D1
            X509v3 Authority Key Identifier:
                keyid:61:B9:32:CD:84:9C:E6:72:D7:AD:F5:C3:5F:76:FC:83:A0:60:26:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137332e302f32342d3234203d3e20323636323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:d7:e2:08:8b:dd:2d:d3:e9:e8:61:e4:76:87:29:54:40:94:
         41:5b:9b:70:d0:a9:b3:f5:6c:27:70:61:10:10:3c:18:31:c7:
         53:5d:25:b4:fd:c6:cf:5a:19:8f:4f:df:24:ac:f7:bd:74:6b:
         19:f8:df:31:14:32:3a:b3:1e:cb:0b:d2:d0:70:35:1b:ab:dc:
         22:86:5a:e0:19:f6:1a:67:50:96:b5:40:65:d7:30:a7:f5:81:
         2e:45:67:e0:23:44:7a:a2:1f:bf:10:ab:1b:ad:52:d7:fc:83:
         5d:bc:66:a3:f2:28:01:02:10:00:76:e7:45:9b:a8:d0:1d:b6:
         a3:da:59:9b:61:08:8a:26:9d:e7:9c:93:84:0f:a7:b0:c9:c5:
         bb:5f:cb:ba:e3:f9:ac:39:12:e0:1f:c1:cf:27:68:87:5d:21:
         64:98:24:4c:1c:a2:06:e7:e6:6a:7e:d6:12:6a:b9:8b:38:69:
         9e:c9:d5:06:72:d8:ac:c9:f5:ff:ee:d0:d0:b7:48:d4:10:40:
         6f:d0:08:bc:01:2a:5b:85:99:94:e1:d7:3a:6f:de:c1:4e:ed:
         d1:46:e5:54:7b:f4:ff:c7:87:83:5e:24:70:fd:68:b4:cc:f6:
         85:9a:24:33:da:44:13:a3:a9:a7:9f:7e:b4:9a:ee:98:32:95:
         54:84:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:49:29 2025 by rpki-client