Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/34352e3138312e372e302f32342d3234203d3e20323639323136.roa
File:                     34352e3138312e372e302f32342d3234203d3e20323639323136.roa (raw, json)
Hash identifier:          tHUFJMf9AmTL/vrBY6SV2bWH3HT2ZGZ3XxhNPx7oz8k=
Subject key identifier:   F6:F9:AB:40:A0:95:62:2A:4F:B3:28:1A:D4:E9:B7:EB:16:C4:51:BE
Certificate issuer:       /CN=B005EA4161E63BC8DBDA011004C07D752C26EEF2
Certificate serial:       667860C583E79FE636D6A732F5AE2A89DA7C7303
Authority key identifier: B0:05:EA:41:61:E6:3B:C8:DB:DA:01:10:04:C0:7D:75:2C:26:EE:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/34352e3138312e372e302f32342d3234203d3e20323639323136.roa
Signing time:             Mon 12 May 2025 10:43:24 +0000
ROA not before:           Mon 12 May 2025 10:38:24 +0000
ROA not after:            Mon 11 May 2026 10:43:24 +0000
asID:                     269216
IP address blocks:        45.181.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.crl
                          rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 22:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:78:60:c5:83:e7:9f:e6:36:d6:a7:32:f5:ae:2a:89:da:7c:73:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B005EA4161E63BC8DBDA011004C07D752C26EEF2
        Validity
            Not Before: May 12 10:38:24 2025 GMT
            Not After : May 11 10:43:24 2026 GMT
        Subject: CN=F6F9AB40A095622A4FB3281AD4E9B7EB16C451BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:ef:35:fe:01:03:21:81:56:43:3a:1c:eb:
                    0e:ce:ed:08:17:c6:24:52:d6:2c:b6:8e:42:fd:15:
                    2c:16:10:68:5e:f4:55:82:58:a7:1c:71:a1:99:95:
                    44:22:e8:49:e9:16:00:0a:aa:c0:48:dd:27:24:6b:
                    2d:23:69:6d:cf:50:aa:ff:a1:15:fd:de:62:92:89:
                    b0:f6:7d:dc:d1:b5:cf:62:c5:8d:65:94:a4:f9:3c:
                    42:aa:59:8e:7a:fc:3c:63:80:79:3a:90:14:4c:a9:
                    99:b1:cd:9a:f5:4a:c2:1c:28:1d:7e:a7:63:f8:f5:
                    75:f7:08:3f:c3:6b:d5:a7:7f:f8:2b:79:34:35:c8:
                    cb:7b:e3:13:1c:3f:3c:43:c2:5d:79:fe:0d:b1:04:
                    2b:03:5d:df:1c:6c:8a:e4:2d:e6:7c:5c:7e:43:57:
                    ab:08:5b:6e:c7:50:2e:83:73:59:71:d8:b1:1a:26:
                    b5:aa:2a:f6:5b:03:66:7b:45:b1:dc:88:5e:5c:f5:
                    78:e0:1b:c8:e4:47:a0:a3:b1:9d:0b:45:1f:f3:a7:
                    c1:ea:72:03:1c:5d:57:65:f1:fd:4a:53:da:fe:5a:
                    df:a0:2c:db:72:f1:92:40:e8:b2:7d:90:c8:23:b9:
                    8f:6e:2a:3b:7c:e8:91:e1:8f:c4:68:b6:d5:b9:49:
                    70:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F9:AB:40:A0:95:62:2A:4F:B3:28:1A:D4:E9:B7:EB:16:C4:51:BE
            X509v3 Authority Key Identifier:
                keyid:B0:05:EA:41:61:E6:3B:C8:DB:DA:01:10:04:C0:7D:75:2C:26:EE:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/34352e3138312e372e302f32342d3234203d3e20323639323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:52:de:c4:9f:57:c9:e8:4e:c3:40:08:2e:25:0d:35:bb:ff:
         d4:e9:32:4b:cd:dd:a4:8f:d8:95:30:46:fb:f6:b6:70:53:18:
         6f:9e:bb:d1:4d:96:55:be:d9:50:47:24:a8:78:26:fb:4a:8e:
         c0:37:88:75:8c:bb:55:a2:6a:57:e5:4b:40:d6:c0:c1:c9:19:
         5c:79:a3:f8:51:a4:09:d1:1b:bc:29:02:db:08:59:0e:36:ce:
         5f:b9:bc:7a:d7:c0:7a:be:3a:47:0f:52:0a:5e:a0:3b:30:5d:
         0f:21:b8:45:d0:3f:cb:95:e1:6d:32:ea:09:cf:e7:3d:60:ca:
         8a:a1:0a:f0:92:d3:50:54:98:4e:29:0e:d7:cb:5d:42:de:6b:
         a2:bc:d2:b1:6c:aa:50:52:89:d8:a8:e3:af:ff:aa:b0:ce:73:
         be:9c:e1:79:c6:95:06:2f:79:c0:75:6b:c0:a4:b2:ba:61:11:
         19:02:73:3f:36:57:90:e8:b4:c1:08:b8:45:e2:90:56:f1:b9:
         4c:0b:d1:ee:bf:6e:4c:35:21:70:37:ae:96:b4:60:e4:e2:ae:
         0b:65:13:a6:64:f6:4b:00:10:df:cd:b1:ec:44:6c:0e:fd:47:
         78:5d:4e:29:42:ed:06:c4:66:16:36:eb:eb:47:2f:1d:d6:f7:
         8d:f7:29:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:18:42 2025 by rpki-client