Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa
File:                     3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa (raw, json)
Hash identifier:          gtLzj2yozM2NQBp0xng1orX8ZPXW4PbJ3jAGi1oRrNQ=
Subject key identifier:   F5:6F:80:ED:CB:00:76:30:3B:F7:CE:02:5D:F5:89:17:C2:82:29:B9
Certificate issuer:       /CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
Certificate serial:       54CFA6C56E0EB2B39CBC777CD49A0A4DE58D8F8D
Authority key identifier: 2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa
Signing time:             Wed 11 Jun 2025 05:46:59 +0000
ROA not before:           Wed 11 Jun 2025 05:41:59 +0000
ROA not after:            Wed 10 Jun 2026 05:46:59 +0000
asID:                     265950
IP address blocks:        164.163.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 07:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cf:a6:c5:6e:0e:b2:b3:9c:bc:77:7c:d4:9a:0a:4d:e5:8d:8f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
        Validity
            Not Before: Jun 11 05:41:59 2025 GMT
            Not After : Jun 10 05:46:59 2026 GMT
        Subject: CN=F56F80EDCB0076303BF7CE025DF58917C28229B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:28:55:6d:9f:25:83:64:4e:fd:ce:7a:79:
                    09:3a:4a:db:d4:df:50:a4:4e:15:62:69:74:38:06:
                    37:e6:f8:11:89:49:f4:c9:76:2c:44:9e:e5:c6:7c:
                    dc:e0:be:f0:74:85:df:22:66:82:53:30:c3:cc:41:
                    bc:65:b0:30:87:6f:ff:eb:7c:21:0d:16:b9:da:89:
                    f8:96:7b:9d:aa:df:b4:f9:4e:24:47:3d:1b:fe:49:
                    d7:18:ef:00:cf:80:c9:87:33:43:86:14:80:66:21:
                    ee:81:b4:37:4b:3d:fa:79:91:7f:c9:f0:99:19:e6:
                    37:ad:79:8e:dd:9d:63:c2:9b:55:ff:d9:14:bc:95:
                    a8:af:02:39:e7:d4:ce:dc:17:2d:9b:0f:8d:ea:a3:
                    5b:ad:9e:56:ee:dd:7e:e5:5f:36:03:e3:02:08:1d:
                    08:a6:ad:fa:44:fb:7f:c8:77:df:9b:44:25:b8:d3:
                    8f:aa:8b:5e:bb:ec:13:36:0a:47:63:34:45:5c:94:
                    01:24:9e:37:f5:89:73:92:5e:5e:a0:df:95:11:8f:
                    bb:86:fa:a5:40:83:62:ff:96:b2:15:be:47:d1:4e:
                    0e:01:cd:ac:6c:e8:3f:58:d2:e3:58:dd:79:de:2e:
                    c1:34:f5:4c:62:43:89:cf:86:32:f9:cb:66:69:f9:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6F:80:ED:CB:00:76:30:3B:F7:CE:02:5D:F5:89:17:C2:82:29:B9
            X509v3 Authority Key Identifier:
                keyid:2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:39:32:30:f8:90:37:e6:61:ee:22:e4:51:1d:d1:6c:c2:c8:
         01:69:55:37:43:c2:8f:3f:e5:2b:ac:3a:c5:45:02:bd:04:5a:
         be:56:b0:26:f6:8c:25:2c:fa:8e:47:2a:b8:75:6b:fd:de:e4:
         78:3f:ed:ff:72:13:1f:26:2b:32:2c:29:94:0e:35:64:70:83:
         13:33:da:20:bb:32:84:33:06:18:b3:8d:af:b3:ff:d9:77:aa:
         fb:93:14:c1:2a:42:67:ff:43:c7:a1:85:c1:12:22:0b:34:3b:
         aa:94:e3:8d:7b:11:62:87:d7:47:90:e6:7a:04:14:9a:e9:18:
         47:c6:71:e0:c9:dd:2e:58:b7:43:41:10:bf:b0:f7:c9:c9:f3:
         00:cc:11:cc:0d:f4:e3:31:48:7a:bb:6d:d7:cd:72:ae:36:9f:
         5b:89:ed:7e:89:55:90:f3:2d:c6:c3:d0:0c:79:2f:87:ba:ae:
         8e:5a:3f:cb:e7:22:8b:a9:fc:f9:91:36:54:08:44:d5:e1:4a:
         a8:9e:14:7d:59:20:f4:1d:c0:b6:ab:e4:58:5a:ee:a8:e7:d7:
         de:5f:c7:40:6f:fd:6c:85:84:a4:18:75:7a:85:60:bf:7d:2d:
         1d:9c:6a:a8:15:68:16:2b:e3:3a:9a:14:75:57:56:93:b4:6b:
         b6:7a:21:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:15:33 2025 by rpki-client