Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3234203d3e20323638383336.roa
File:                     34352e3137342e32382e302f32322d3234203d3e20323638383336.roa (raw, json)
Hash identifier:          i/SjjUWfNHNr1AVQcC8OGL7gkb0VNAJtCq51MA0BHp8=
Subject key identifier:   CA:65:32:7A:0E:C2:44:69:67:5F:E7:3B:44:6F:CE:54:BA:8E:B6:7B
Certificate issuer:       /CN=73C4D4AD5015415459C957E69573FDCA0F0273A0
Certificate serial:       6C56CCFD8460128A89F802AE853FDA66F287A0ED
Authority key identifier: 73:C4:D4:AD:50:15:41:54:59:C9:57:E6:95:73:FD:CA:0F:02:73:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C4D4AD5015415459C957E69573FDCA0F0273A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3234203d3e20323638383336.roa
Signing time:             Fri 20 Jun 2025 16:36:12 +0000
ROA not before:           Fri 20 Jun 2025 16:31:12 +0000
ROA not after:            Fri 19 Jun 2026 16:36:12 +0000
asID:                     268836
IP address blocks:        45.174.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/73C4D4AD5015415459C957E69573FDCA0F0273A0.crl
                          rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/73C4D4AD5015415459C957E69573FDCA0F0273A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C4D4AD5015415459C957E69573FDCA0F0273A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 22:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:56:cc:fd:84:60:12:8a:89:f8:02:ae:85:3f:da:66:f2:87:a0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C4D4AD5015415459C957E69573FDCA0F0273A0
        Validity
            Not Before: Jun 20 16:31:12 2025 GMT
            Not After : Jun 19 16:36:12 2026 GMT
        Subject: CN=CA65327A0EC24469675FE73B446FCE54BA8EB67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:8a:1f:d6:06:dd:21:da:fc:d8:2a:b5:e3:
                    7a:13:fc:bc:ef:c3:a4:ac:67:6c:7a:84:1b:b5:bc:
                    af:d7:fb:3c:59:91:1d:58:2a:af:77:2e:3d:4d:e6:
                    ea:25:98:19:ae:ea:1d:60:fa:48:d1:29:1c:83:5b:
                    67:21:54:98:84:f8:9b:b8:fe:ee:09:d7:87:e1:de:
                    b3:1d:d2:f5:8d:e2:88:53:86:5b:20:1f:68:af:24:
                    fc:fa:0c:19:48:3b:0e:9c:7c:e0:1e:3f:b3:39:98:
                    3e:06:eb:67:a3:e6:21:1b:ab:69:d3:6b:26:e3:69:
                    67:19:55:1b:09:78:77:45:a0:5b:49:b1:28:61:64:
                    b6:8a:e9:d0:69:fe:2d:81:f9:a3:40:8e:e0:f6:db:
                    d3:09:0b:62:71:6e:3d:1a:cf:39:77:bb:79:37:ed:
                    d8:1a:a6:8a:1d:e8:de:5a:08:7b:50:11:cb:5e:0d:
                    13:c7:12:0b:35:cd:55:0d:c4:2c:ee:b4:62:c2:b8:
                    dc:a5:58:b0:91:58:22:1e:62:47:3a:76:b4:35:0a:
                    d6:ed:18:e3:ac:b9:f2:49:73:58:85:47:f5:86:5e:
                    db:1e:57:b5:c2:62:25:8d:97:0f:93:03:29:34:16:
                    34:b6:8a:6f:64:fa:62:c7:a1:80:f0:8e:cc:3d:11:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:65:32:7A:0E:C2:44:69:67:5F:E7:3B:44:6F:CE:54:BA:8E:B6:7B
            X509v3 Authority Key Identifier:
                keyid:73:C4:D4:AD:50:15:41:54:59:C9:57:E6:95:73:FD:CA:0F:02:73:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/73C4D4AD5015415459C957E69573FDCA0F0273A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C4D4AD5015415459C957E69573FDCA0F0273A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3234203d3e20323638383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:27:c1:75:fd:e0:e2:c5:34:46:73:04:ed:c1:ce:84:f4:1d:
         f0:9a:58:ac:d7:29:6a:21:57:bb:a8:2a:80:04:1f:3a:87:4d:
         98:27:d0:c3:a9:b7:4b:ab:bd:f1:1c:d2:08:93:fe:d4:7b:c9:
         3b:23:a0:ad:21:82:ea:10:e7:c7:90:1f:1f:2a:7e:82:39:3f:
         d0:e1:c0:1e:27:26:ee:ca:91:f8:c6:d5:56:90:d6:eb:b4:3c:
         21:23:0c:c5:d5:d6:a7:3d:12:4b:5f:99:f4:54:32:bf:8f:ca:
         62:bf:41:12:14:c2:57:f4:08:ce:9a:c4:1c:5c:05:dc:4c:e2:
         d6:1f:15:b9:82:5c:31:9b:dc:35:bd:ed:b0:a8:f3:5f:df:1b:
         16:2a:69:db:bf:9c:32:e3:99:72:e2:04:16:7f:ab:65:8a:e4:
         a3:d7:06:21:db:79:47:4c:57:ab:ec:97:a2:86:a9:ed:fd:fb:
         91:e4:40:c5:78:4a:c9:a2:bc:28:ea:37:8c:cd:00:67:2c:92:
         7b:c5:bb:9c:d1:58:7d:b6:aa:05:ca:2f:2c:d0:e5:79:ef:3d:
         ad:f5:79:2a:46:c1:b1:8a:27:c7:77:9a:1a:0c:31:5c:bf:d9:
         d5:4d:0d:34:74:23:75:7d:51:8b:f8:20:a9:b6:d3:d8:ce:55:
         bc:ac:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 12:36:06 2025 by rpki-client