Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137352e302f32342d3234203d3e20323636323635.roa
File:                     34352e36352e3137352e302f32342d3234203d3e20323636323635.roa (raw, json)
Hash identifier:          xTjdgrsSf7eS6QiZ/DFFtpt8x8SSY409UyO0ptsXCyE=
Subject key identifier:   2B:F9:F5:B4:EE:43:12:08:B3:65:73:F1:D1:BF:A3:81:4F:75:E3:13
Certificate issuer:       /CN=61B932CD849CE672D7ADF5C35F76FC83A060268C
Certificate serial:       4D3020D88C198E79AE7ED419D91DEE467D8FDCCF
Authority key identifier: 61:B9:32:CD:84:9C:E6:72:D7:AD:F5:C3:5F:76:FC:83:A0:60:26:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137352e302f32342d3234203d3e20323636323635.roa
Signing time:             Mon 09 Jun 2025 20:24:37 +0000
ROA not before:           Mon 09 Jun 2025 20:19:37 +0000
ROA not after:            Mon 08 Jun 2026 20:24:37 +0000
asID:                     266265
IP address blocks:        45.65.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.crl
                          rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 02:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:30:20:d8:8c:19:8e:79:ae:7e:d4:19:d9:1d:ee:46:7d:8f:dc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B932CD849CE672D7ADF5C35F76FC83A060268C
        Validity
            Not Before: Jun  9 20:19:37 2025 GMT
            Not After : Jun  8 20:24:37 2026 GMT
        Subject: CN=2BF9F5B4EE431208B36573F1D1BFA3814F75E313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:df:fd:33:f9:f6:ad:05:c8:09:df:6f:00:
                    f9:c1:95:8e:06:ab:c4:2d:e9:f0:ae:a0:a7:93:42:
                    25:7e:88:ec:c9:61:64:fb:6d:91:95:f0:86:71:62:
                    2e:d0:9a:7f:06:a2:c0:88:a7:dc:0d:6b:33:03:07:
                    12:9c:e2:ca:36:e1:a9:7c:90:79:bf:35:f7:76:1e:
                    a0:7e:e8:d3:6e:27:b0:c8:f5:8b:7c:ed:18:67:cc:
                    1f:91:8f:8f:8a:7e:8f:11:eb:dd:f8:44:39:b5:39:
                    2c:41:98:f6:1d:dd:52:65:57:72:a5:c8:18:61:ac:
                    7a:49:92:0e:9b:18:e5:55:b1:64:37:8b:77:a2:12:
                    50:2f:67:57:96:8f:19:11:0d:54:d0:03:c4:21:1b:
                    cd:87:26:7b:58:11:1b:47:a9:f4:74:87:42:6a:72:
                    81:00:74:05:0f:89:d6:c5:0c:55:56:ae:81:c9:fa:
                    9c:18:c3:7e:d5:25:1c:70:24:66:f1:5d:d9:2d:e1:
                    72:e3:99:a8:67:09:27:b4:2f:97:31:08:b4:e2:fe:
                    1b:cd:65:8e:3a:a5:d3:26:35:96:ab:1a:e6:89:bf:
                    77:47:50:07:59:08:85:f4:36:0f:84:b6:ab:72:6c:
                    09:f7:e5:c3:5c:a4:f5:3e:7f:99:47:83:cd:0d:99:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F9:F5:B4:EE:43:12:08:B3:65:73:F1:D1:BF:A3:81:4F:75:E3:13
            X509v3 Authority Key Identifier:
                keyid:61:B9:32:CD:84:9C:E6:72:D7:AD:F5:C3:5F:76:FC:83:A0:60:26:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/34352e36352e3137352e302f32342d3234203d3e20323636323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:85:12:e0:85:09:53:60:37:bb:81:fa:f3:fe:fd:67:60:e6:
         e5:1e:0e:48:0b:66:ba:4a:a9:a8:d1:44:16:48:ae:8b:c9:dc:
         af:d0:48:d6:c7:6f:2f:2e:1a:48:a7:54:e3:ec:d9:53:0f:44:
         87:8a:a8:01:52:f0:94:75:df:90:88:78:95:e2:5e:51:92:9d:
         fc:e6:31:6d:4f:d2:25:70:a2:6f:59:e1:cd:32:d5:47:d4:f8:
         8f:5d:f3:f6:71:08:c3:8d:6b:f4:43:db:a1:e1:02:aa:50:83:
         f7:ad:a3:35:3e:53:41:7a:ed:16:5c:ca:e9:5b:7e:5d:9b:1e:
         ce:28:d1:3c:88:24:14:15:24:7f:47:be:b6:7e:39:e5:12:0c:
         2b:be:f4:f2:70:0b:bb:75:45:da:d2:a3:97:9c:3d:4c:d2:ed:
         15:65:fe:04:ad:ea:14:a5:bc:46:30:51:70:9e:6b:bc:de:93:
         11:7b:24:0b:31:f8:26:23:4a:85:b3:11:3f:18:ea:7a:a4:4d:
         4f:c3:03:7c:e7:0d:13:ab:79:f7:d9:6e:6f:e8:48:19:cf:c4:
         55:5f:b8:df:1d:23:29:b9:99:9a:23:0f:9e:18:33:84:9d:87:
         da:05:52:33:01:20:dc:5b:98:d0:60:2e:17:6b:cc:f9:d9:26:
         53:2c:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:09:17 2025 by rpki-client