Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa
File:                     34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa (raw, json)
Hash identifier:          1zqxEiYMxS9oC0paU46ViHEduBVhTT/Oh6uua5N7rT4=
Subject key identifier:   AD:0A:67:DF:D1:16:A0:B3:31:E6:4B:D2:C1:85:AF:2B:D7:A9:57:FC
Certificate issuer:       /CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2
Certificate serial:       29B08C55FABF26023050912275C82BA4D4B902C2
Authority key identifier: 68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa
Signing time:             Thu 13 Mar 2025 12:15:22 +0000
ROA not before:           Thu 13 Mar 2025 12:10:22 +0000
ROA not after:            Thu 12 Mar 2026 12:15:22 +0000
asID:                     268126
IP address blocks:        45.169.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl
                          rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 06:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b0:8c:55:fa:bf:26:02:30:50:91:22:75:c8:2b:a4:d4:b9:02:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2
        Validity
            Not Before: Mar 13 12:10:22 2025 GMT
            Not After : Mar 12 12:15:22 2026 GMT
        Subject: CN=AD0A67DFD116A0B331E64BD2C185AF2BD7A957FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:19:06:72:1e:d6:74:0b:6e:96:16:1d:a9:21:
                    8a:00:10:d3:41:61:f6:38:30:33:33:83:9a:e4:b5:
                    35:4f:f0:fc:34:c9:aa:cb:9d:2c:73:1a:79:98:fd:
                    44:5c:e7:69:39:f3:d5:a0:c4:68:1e:08:f8:87:73:
                    f1:30:54:d8:fc:7e:43:cd:77:b2:3a:d1:83:b2:3a:
                    f1:64:f3:2a:58:a7:70:56:45:5d:34:74:95:7a:01:
                    9b:f2:ed:ad:60:f5:f5:20:94:b3:1b:43:34:8c:0e:
                    ed:f9:8c:eb:f6:4f:e4:b4:a5:22:ab:00:a4:4d:5b:
                    63:15:fe:e3:69:ef:e0:04:81:eb:07:dc:e9:2b:49:
                    38:a8:e1:2d:57:87:03:fd:f3:06:ab:2f:20:7a:e7:
                    ea:00:45:17:89:a1:2d:9a:5c:c4:f3:47:70:8b:84:
                    99:bc:ed:e6:e8:b4:a0:e9:8c:9a:2e:11:46:aa:47:
                    9e:e1:c1:4b:9a:24:be:b9:2b:1b:09:5b:7d:47:8d:
                    7a:c8:5d:c5:ef:d4:f9:5c:79:f9:96:6f:92:69:d9:
                    56:57:ed:71:52:85:3d:03:91:f8:c9:5a:bc:27:ae:
                    38:e6:a1:4f:5a:26:8f:79:49:16:cd:bf:64:0c:db:
                    81:3b:5e:df:2a:a3:44:66:ff:39:fa:da:10:17:f6:
                    8f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0A:67:DF:D1:16:A0:B3:31:E6:4B:D2:C1:85:AF:2B:D7:A9:57:FC
            X509v3 Authority Key Identifier:
                keyid:68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:21:e0:20:47:d0:58:1a:d1:b4:5f:dc:9f:f1:a2:27:c1:d4:
         9f:d2:23:82:f8:5e:09:bb:9e:88:cb:92:10:f9:02:bb:0b:c6:
         3b:81:98:81:55:1b:ea:21:58:1e:f6:00:8c:a1:b5:70:93:b6:
         42:cf:26:38:80:3e:85:0d:8a:97:cc:7e:b4:e6:a7:d8:70:2c:
         8c:e2:42:50:7f:33:a7:f8:8a:c5:c9:b2:b8:48:f7:9f:a5:cb:
         e0:bc:1d:95:f3:a4:af:f8:7f:d1:92:fb:ed:b9:0d:f2:f2:c4:
         ff:39:ab:31:e1:91:9d:41:a3:a7:16:4e:73:05:42:ad:32:e0:
         cd:e2:62:d8:cf:a6:51:61:f5:d1:f4:73:61:ff:eb:fd:b4:36:
         8c:c0:bb:ce:cb:56:e0:02:3a:fb:db:da:38:80:6c:87:61:32:
         b2:19:76:d1:8a:af:a5:7a:b3:da:38:80:35:91:95:8e:5e:29:
         4b:6b:11:fc:4b:b8:30:8a:7f:57:12:ab:0e:04:64:6a:fe:0e:
         b9:b9:41:d7:e6:61:e9:7c:f1:6e:59:b5:91:39:8b:be:6b:c3:
         e1:da:66:8b:2e:35:bf:54:22:4b:01:fd:f5:41:69:8a:02:09:
         3a:91:1f:98:65:49:21:7c:c3:4f:e2:54:40:74:06:ad:e9:c6:
         41:e3:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:57:09 2025 by rpki-client