Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7sABSRCxJsfiHKbowsHi1ekBmZUoMb7ZGrbPpjQLD7D/0/34352e3136382e3231382e302f32332d3233203d3e20323638303735.roa
File:                     34352e3136382e3231382e302f32332d3233203d3e20323638303735.roa (raw, json)
Hash identifier:          6Ev2Yct99gVEBg+EHY0KxfHr082E7UZHwu8zT9gCj6A=
Subject key identifier:   C5:5D:71:DC:F0:26:1E:99:98:14:4C:31:04:05:B9:49:FB:FE:95:BC
Certificate issuer:       /CN=DC6E04022FF36884007C31619FCCBF26C172D359
Certificate serial:       5EF460FBDEE72018B6DF88E3A01D0C50EC3A4A82
Authority key identifier: DC:6E:04:02:2F:F3:68:84:00:7C:31:61:9F:CC:BF:26:C1:72:D3:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC6E04022FF36884007C31619FCCBF26C172D359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7sABSRCxJsfiHKbowsHi1ekBmZUoMb7ZGrbPpjQLD7D/0/34352e3136382e3231382e302f32332d3233203d3e20323638303735.roa
Signing time:             Fri 27 Jun 2025 15:53:08 +0000
ROA not before:           Fri 27 Jun 2025 15:48:08 +0000
ROA not after:            Fri 26 Jun 2026 15:53:08 +0000
asID:                     268075
IP address blocks:        45.168.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7sABSRCxJsfiHKbowsHi1ekBmZUoMb7ZGrbPpjQLD7D/0/DC6E04022FF36884007C31619FCCBF26C172D359.crl
                          rsync://rpki-repo.registro.br/repo/D7sABSRCxJsfiHKbowsHi1ekBmZUoMb7ZGrbPpjQLD7D/0/DC6E04022FF36884007C31619FCCBF26C172D359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC6E04022FF36884007C31619FCCBF26C172D359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 03:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f4:60:fb:de:e7:20:18:b6:df:88:e3:a0:1d:0c:50:ec:3a:4a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC6E04022FF36884007C31619FCCBF26C172D359
        Validity
            Not Before: Jun 27 15:48:08 2025 GMT
            Not After : Jun 26 15:53:08 2026 GMT
        Subject: CN=C55D71DCF0261E9998144C310405B949FBFE95BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:2d:f9:51:4f:93:89:a1:56:90:f0:ac:4c:
                    8f:75:ec:44:c8:5d:ab:16:ed:3d:a1:02:89:69:69:
                    70:e0:4d:9f:45:2f:72:c5:10:4f:9c:f7:7f:23:89:
                    1c:e2:e5:2b:c6:2f:ae:f0:df:e5:47:59:6d:dd:da:
                    40:b2:50:4d:a5:61:dd:d2:77:75:b8:78:23:2b:38:
                    35:29:78:d7:9d:94:36:72:d7:1e:7f:c4:f2:11:45:
                    c7:59:db:db:81:2b:69:dd:92:b0:ac:44:b6:d3:9d:
                    72:fe:1c:e7:35:c6:72:16:07:cd:36:2a:1f:54:75:
                    e8:de:b0:0f:12:a0:d8:e2:1b:26:95:d2:a2:ed:7b:
                    e2:32:12:d4:7b:63:fa:61:14:e3:36:ec:b1:24:35:
                    5c:54:3e:7a:ee:2a:a4:d9:51:f7:0c:27:08:02:dc:
                    5c:56:a3:89:b4:1b:2a:8a:f6:b3:27:bf:a8:4f:74:
                    1f:03:6d:82:b5:b0:0b:31:5e:84:ac:79:cf:d9:9f:
                    59:f6:95:16:c1:8f:b8:a6:e7:1b:fb:7e:dc:09:54:
                    c6:1a:e7:c2:1c:76:5c:db:07:e0:0f:df:85:7d:fb:
                    c6:ee:14:b5:c0:1f:57:9e:26:78:0c:72:b4:44:70:
                    1c:39:5f:98:ec:a8:51:9c:6a:44:b6:39:23:f5:13:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5D:71:DC:F0:26:1E:99:98:14:4C:31:04:05:B9:49:FB:FE:95:BC
            X509v3 Authority Key Identifier:
                keyid:DC:6E:04:02:2F:F3:68:84:00:7C:31:61:9F:CC:BF:26:C1:72:D3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7sABSRCxJsfiHKbowsHi1ekBmZUoMb7ZGrbPpjQLD7D/0/DC6E04022FF36884007C31619FCCBF26C172D359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC6E04022FF36884007C31619FCCBF26C172D359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7sABSRCxJsfiHKbowsHi1ekBmZUoMb7ZGrbPpjQLD7D/0/34352e3136382e3231382e302f32332d3233203d3e20323638303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:71:0b:93:eb:9e:28:ad:3b:ed:f7:86:57:3b:30:39:51:d3:
         18:be:29:f3:51:5d:0f:70:9c:b1:37:d5:87:db:5c:14:a2:a2:
         22:b4:15:3f:57:6e:da:7a:46:d3:73:04:41:b4:7c:1e:a0:e3:
         71:14:f9:94:7d:29:3b:91:a4:eb:22:72:6a:55:65:3f:c5:e7:
         f0:01:4b:07:85:05:10:dd:2f:9c:6d:c1:1e:3c:db:77:c6:3d:
         52:6e:59:a4:d7:52:80:a5:fa:fa:82:2a:f5:11:8b:e5:12:1f:
         df:83:36:39:39:a0:47:1e:ba:82:5d:a2:07:75:aa:4d:76:88:
         b7:de:27:06:f7:0e:d2:59:d7:ad:ca:8b:aa:49:12:78:11:12:
         b0:96:66:f8:7c:ab:94:c0:7b:ea:b1:a2:7c:08:b4:87:39:98:
         8b:d2:af:21:04:30:02:c2:ee:70:d9:19:ce:31:b8:f2:3e:7f:
         8b:03:59:15:b9:ad:dd:49:01:79:ab:d6:f1:13:a4:d9:3b:72:
         69:ac:2d:4c:f6:bc:7f:0e:84:93:f8:69:fd:14:f5:f9:f5:44:
         58:06:0e:a1:ea:38:41:52:3c:f9:3e:e2:09:cc:9e:f3:59:73:
         27:fe:59:e4:e9:a6:06:e1:6e:28:af:6a:7d:b1:27:60:ee:08:
         35:bd:a9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:04:19 2025 by rpki-client