Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137342e302f32342d3234203d3e20323636323635.roa
File:                     34352e36352e3137342e302f32342d3234203d3e20323636323635.roa (raw, json)
Hash identifier:          wxXy4vFGwrKcA2iJqYX+fV+v8EA1zGD4f1yXRJwsOfY=
Subject key identifier:   60:5F:A6:40:96:76:B3:1D:C5:0D:D0:F1:0D:FA:A0:94:00:D1:88:65
Certificate issuer:       /CN=61B932CD849CE672D7ADF5C35F76FC83A060268C
Certificate serial:       4842F49289B7FAF4BD4DD4AE2C25ED46020128D3
Authority key identifier: 61:B9:32:CD:84:9C:E6:72:D7:AD:F5:C3:5F:76:FC:83:A0:60:26:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137342e302f32342d3234203d3e20323636323635.roa
Signing time:             Mon 09 Jun 2025 20:24:33 +0000
ROA not before:           Mon 09 Jun 2025 20:19:33 +0000
ROA not after:            Mon 08 Jun 2026 20:24:33 +0000
asID:                     266265
IP address blocks:        45.65.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.crl
                          rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 00:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:42:f4:92:89:b7:fa:f4:bd:4d:d4:ae:2c:25:ed:46:02:01:28:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B932CD849CE672D7ADF5C35F76FC83A060268C
        Validity
            Not Before: Jun  9 20:19:33 2025 GMT
            Not After : Jun  8 20:24:33 2026 GMT
        Subject: CN=605FA6409676B31DC50DD0F10DFAA09400D18865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:48:15:9a:8b:52:6e:8a:4b:18:b8:03:aa:39:
                    c3:e0:79:a7:43:8c:15:63:5b:0a:f0:7a:ee:60:26:
                    01:f0:db:d5:fb:fd:e2:e6:22:d9:c6:63:c4:e3:58:
                    41:5b:d5:0f:1b:ab:32:cc:d0:fd:8f:81:1f:da:07:
                    c6:b0:19:92:53:8f:7b:f4:dc:76:7e:51:e2:99:c5:
                    0e:9a:da:1e:70:bf:c6:a3:06:08:7c:34:20:11:9b:
                    1f:64:83:82:95:34:97:a0:73:dd:43:e5:a2:94:86:
                    ac:75:50:63:8c:4c:1a:12:92:65:4a:a1:0d:84:99:
                    7e:2e:6b:c6:f1:83:86:c2:eb:17:93:34:11:86:b7:
                    17:f4:a2:2b:1c:ba:5e:b5:1e:85:7e:74:1e:28:e9:
                    bc:d6:53:4c:8f:5e:8f:96:d9:5a:1e:92:50:4a:0c:
                    a7:6b:10:e2:33:6a:21:d9:4f:4e:c8:ff:8f:54:ce:
                    69:26:e9:b2:7d:85:c8:1a:3d:81:8a:de:ca:66:b7:
                    08:dd:a2:6e:89:19:02:e7:7f:2e:cb:8d:f4:90:bc:
                    9b:af:c8:13:1a:d1:a7:c3:8a:a8:72:45:30:00:ed:
                    f1:5a:52:fd:aa:af:88:14:0f:7f:a9:50:b9:64:5c:
                    9f:50:f4:7f:6c:1a:a8:f4:83:e6:59:4b:10:63:48:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5F:A6:40:96:76:B3:1D:C5:0D:D0:F1:0D:FA:A0:94:00:D1:88:65
            X509v3 Authority Key Identifier:
                keyid:61:B9:32:CD:84:9C:E6:72:D7:AD:F5:C3:5F:76:FC:83:A0:60:26:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137342e302f32342d3234203d3e20323636323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:6f:9a:67:48:e1:49:dd:70:f1:7b:bc:39:15:6e:c0:e6:c8:
         bd:bf:7e:11:84:26:a6:dc:de:b3:b0:5e:d6:24:43:85:44:4d:
         ba:ad:50:d4:31:9a:ae:d2:9a:90:d0:b4:32:be:8d:ee:b0:cc:
         ba:63:eb:16:c3:12:5a:e1:8a:5a:a0:1a:f4:5b:57:93:9b:f0:
         4c:82:a8:71:e0:eb:92:16:bb:10:aa:0e:21:73:12:8d:be:a7:
         31:94:3d:6e:17:fb:7a:93:9f:43:90:ce:7c:c6:d3:5a:0f:a3:
         4c:9a:d7:c0:4c:4a:a9:98:bc:d8:4a:9f:8a:1a:df:61:94:ef:
         08:c3:d2:39:94:2c:a2:21:e3:2d:79:99:1d:3d:cb:c0:84:59:
         2c:74:12:20:1c:08:b0:2e:84:84:02:74:16:ef:2d:25:86:d4:
         ac:25:c7:a3:b2:46:64:ef:39:9c:f9:97:50:79:72:ed:1c:94:
         b1:c0:ba:02:c3:69:3d:98:45:fd:5c:7e:04:90:27:1d:e2:e6:
         8e:04:bf:e1:e5:57:2b:22:23:7a:d5:3a:4c:56:62:55:22:48:
         5a:f7:d9:aa:28:00:5a:b4:2b:d5:19:db:b5:d0:14:89:ed:cb:
         c7:52:3e:f9:23:71:b4:05:19:cf:a1:e1:55:8d:80:6a:a5:f3:
         46:82:c8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:55:12 2025 by rpki-client