Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230322e302f32332d3233203d3e20323636313036.roa
File:                     34352e352e3230322e302f32332d3233203d3e20323636313036.roa (raw, json)
Hash identifier:          Mw9bherUBvhJ4+QPfM0vaKRpcbb8M8/z70tVoG75h1Q=
Subject key identifier:   CB:16:6B:62:A6:18:5F:A9:5E:12:3B:0E:48:7D:99:4A:D5:1D:BD:99
Certificate issuer:       /CN=06C90052786F2FC17ABF12F517AFA0A24268662C
Certificate serial:       67E642C6E035FC3864D87E48DF9FC57596FDC450
Authority key identifier: 06:C9:00:52:78:6F:2F:C1:7A:BF:12:F5:17:AF:A0:A2:42:68:66:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C90052786F2FC17ABF12F517AFA0A24268662C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230322e302f32332d3233203d3e20323636313036.roa
Signing time:             Thu 26 Jun 2025 21:04:49 +0000
ROA not before:           Thu 26 Jun 2025 20:59:49 +0000
ROA not after:            Thu 25 Jun 2026 21:04:49 +0000
asID:                     266106
IP address blocks:        45.5.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/06C90052786F2FC17ABF12F517AFA0A24268662C.crl
                          rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/06C90052786F2FC17ABF12F517AFA0A24268662C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C90052786F2FC17ABF12F517AFA0A24268662C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 21:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e6:42:c6:e0:35:fc:38:64:d8:7e:48:df:9f:c5:75:96:fd:c4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C90052786F2FC17ABF12F517AFA0A24268662C
        Validity
            Not Before: Jun 26 20:59:49 2025 GMT
            Not After : Jun 25 21:04:49 2026 GMT
        Subject: CN=CB166B62A6185FA95E123B0E487D994AD51DBD99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a7:9a:c2:a9:a7:8f:da:17:76:69:6b:9e:e3:
                    d9:83:16:af:e6:fa:13:0c:d4:00:c9:df:c2:b2:be:
                    e4:5b:b2:3c:97:b6:49:f3:28:1c:0e:ab:91:d9:dc:
                    e0:b3:b1:85:33:0f:13:68:bb:cd:73:2c:c4:17:a0:
                    58:96:b1:6b:87:d8:ad:05:26:9d:eb:a1:fb:13:04:
                    c1:73:ac:75:c2:ca:8d:1b:05:41:07:a9:59:87:c0:
                    3b:cd:11:45:ac:94:6d:be:ff:cf:e5:0a:54:ee:bc:
                    02:31:25:be:9e:32:80:64:85:66:c3:a7:8e:ec:3d:
                    54:b0:72:d7:2a:41:fa:23:2e:d5:78:ea:98:7f:e3:
                    a9:bd:b4:48:88:85:89:dd:e9:61:6e:57:a4:18:71:
                    e7:10:56:9a:a7:21:c8:8f:3d:d7:da:27:c1:2a:5e:
                    86:35:73:dd:1d:68:f2:da:c7:77:58:82:f2:12:7e:
                    c2:42:5d:70:ce:60:af:10:0c:13:40:97:ad:73:35:
                    8b:cc:97:1d:76:ae:a4:96:8d:60:37:22:10:70:6a:
                    57:0a:0b:76:52:8a:c1:68:f7:8d:b2:f3:bb:b0:50:
                    a6:4a:5a:01:64:2f:97:49:54:1b:22:1a:be:a1:b0:
                    80:c5:80:11:7f:53:c1:e7:3c:ee:15:a2:36:c6:0a:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:16:6B:62:A6:18:5F:A9:5E:12:3B:0E:48:7D:99:4A:D5:1D:BD:99
            X509v3 Authority Key Identifier:
                keyid:06:C9:00:52:78:6F:2F:C1:7A:BF:12:F5:17:AF:A0:A2:42:68:66:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/06C90052786F2FC17ABF12F517AFA0A24268662C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C90052786F2FC17ABF12F517AFA0A24268662C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230322e302f32332d3233203d3e20323636313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:2d:18:ff:17:dd:86:39:5f:8b:9f:c1:8d:94:86:a6:96:c8:
         11:0f:35:c9:b9:b4:47:fb:15:5b:72:83:68:aa:68:f9:54:05:
         c7:83:58:af:b1:5e:ad:86:98:f5:5c:f3:d4:ff:c1:80:94:cd:
         ec:12:84:cc:f5:96:84:f3:2e:61:f7:6f:36:dd:77:aa:b6:88:
         ad:12:6e:31:d0:7c:6f:58:e1:f5:85:47:1a:62:61:f8:88:73:
         dc:e0:9a:db:b4:cd:d1:7b:ce:61:9e:ce:90:50:4b:90:0e:0a:
         b5:d9:35:29:42:e0:ae:c5:da:4f:fa:58:c8:03:9d:77:aa:83:
         aa:e1:c7:65:cf:dc:40:dc:8b:d8:2f:cb:1d:42:73:2e:01:7f:
         a3:f6:dc:ec:08:5a:65:ac:46:48:48:39:f1:3a:7e:49:b1:b6:
         ff:a4:63:8a:9e:c1:a0:b5:0a:6e:d3:18:d6:a3:4d:f4:47:eb:
         f5:bc:78:11:d0:51:d5:56:48:ee:84:a9:00:8a:fe:03:ef:81:
         5d:87:6a:40:1e:29:89:79:fb:a8:15:d6:c9:f4:15:d6:1f:be:
         17:36:9f:10:fd:90:45:7d:57:96:58:33:12:d9:39:09:3f:31:
         2a:64:5f:fe:87:67:47:e0:25:91:3a:97:e1:8d:22:32:3d:d7:
         cf:88:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:12:24 2025 by rpki-client