Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/34352e3136312e3230302e302f32322d3232203d3e20323638343733.roa
File:                     34352e3136312e3230302e302f32322d3232203d3e20323638343733.roa (raw, json)
Hash identifier:          /TgTgCoS6M5xS5Jb5XRt3lRdTgIMBqjV8R58pJaUUHw=
Subject key identifier:   10:EB:D1:99:CD:0C:B3:6F:34:44:28:C9:1B:54:C4:E5:0A:B5:87:5F
Certificate issuer:       /CN=05FB6CA33F44105459E5CD46044BB5DAF10E178E
Certificate serial:       6371815B78B1B6E4A647F999E014693B8E52B459
Authority key identifier: 05:FB:6C:A3:3F:44:10:54:59:E5:CD:46:04:4B:B5:DA:F1:0E:17:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05FB6CA33F44105459E5CD46044BB5DAF10E178E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/34352e3136312e3230302e302f32322d3232203d3e20323638343733.roa
Signing time:             Sat 14 Jun 2025 15:46:21 +0000
ROA not before:           Sat 14 Jun 2025 15:41:21 +0000
ROA not after:            Sat 13 Jun 2026 15:46:21 +0000
asID:                     268473
IP address blocks:        45.161.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/05FB6CA33F44105459E5CD46044BB5DAF10E178E.crl
                          rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/05FB6CA33F44105459E5CD46044BB5DAF10E178E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05FB6CA33F44105459E5CD46044BB5DAF10E178E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 02:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:71:81:5b:78:b1:b6:e4:a6:47:f9:99:e0:14:69:3b:8e:52:b4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05FB6CA33F44105459E5CD46044BB5DAF10E178E
        Validity
            Not Before: Jun 14 15:41:21 2025 GMT
            Not After : Jun 13 15:46:21 2026 GMT
        Subject: CN=10EBD199CD0CB36F344428C91B54C4E50AB5875F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3e:29:04:f3:7d:b1:d8:8e:4b:46:8a:b2:c0:
                    ce:6d:2e:d9:85:00:ae:22:4b:ba:0a:21:13:64:26:
                    6e:0d:5c:10:b2:46:53:68:da:40:4f:1d:c5:8f:22:
                    2c:86:54:80:06:ba:fd:16:8e:f3:2a:63:e3:aa:0e:
                    9f:0a:1b:f1:f1:23:1c:26:55:8b:47:22:1f:51:79:
                    ef:55:ab:00:70:48:6a:ec:15:9e:67:53:c1:06:f5:
                    7c:69:6e:85:81:f9:8c:a2:a6:06:3a:62:2a:89:60:
                    30:45:c5:79:5e:a1:51:80:77:06:67:37:04:0c:ae:
                    8e:05:44:03:fb:2a:8b:b0:b4:68:00:92:63:b9:f5:
                    e9:6b:04:b2:a4:a9:78:40:33:79:d6:c6:ef:95:10:
                    b9:91:55:3f:cd:93:72:2a:c5:f8:d9:0f:86:5e:41:
                    f1:c3:c3:a7:f7:b5:2d:b9:3d:e1:93:bd:99:79:42:
                    67:e7:d8:ea:94:6e:99:6f:27:e3:2f:2b:91:53:28:
                    12:be:74:23:ea:30:0a:b6:b5:c7:dd:7a:b6:bb:52:
                    df:6f:72:3b:82:ad:53:98:ea:16:f5:a3:24:8a:65:
                    44:11:5b:10:33:05:70:a1:69:15:af:13:5c:0d:d2:
                    1b:8e:27:69:03:62:46:a6:6a:bb:4f:96:a6:5a:67:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EB:D1:99:CD:0C:B3:6F:34:44:28:C9:1B:54:C4:E5:0A:B5:87:5F
            X509v3 Authority Key Identifier:
                keyid:05:FB:6C:A3:3F:44:10:54:59:E5:CD:46:04:4B:B5:DA:F1:0E:17:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/05FB6CA33F44105459E5CD46044BB5DAF10E178E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05FB6CA33F44105459E5CD46044BB5DAF10E178E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/34352e3136312e3230302e302f32322d3232203d3e20323638343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:fc:49:f8:a2:bd:e2:6b:76:ba:b4:96:f9:e1:22:a7:bd:4c:
         ee:16:ed:3e:bc:b8:fc:1c:b1:da:e1:4d:f9:3a:85:89:f1:b5:
         2b:20:49:f6:51:54:71:24:8b:88:2d:d1:4d:3a:be:64:55:95:
         57:ad:c6:ed:e4:03:86:9c:12:9e:b7:62:a4:ae:2f:3b:98:e5:
         33:b3:6b:e9:07:2b:77:1c:1b:04:7e:47:25:9f:c4:51:2d:53:
         7e:a7:72:4a:a0:06:10:36:0f:88:e7:e6:9f:d3:e5:16:53:d3:
         19:91:10:88:93:b4:15:42:84:86:4f:e7:59:90:41:41:5e:85:
         a0:b1:9a:ae:d2:19:18:c3:d6:1f:d1:5d:0b:37:53:28:b2:dc:
         44:41:5a:77:e6:22:65:e5:79:e5:73:d1:e1:4c:af:86:fc:56:
         d8:20:e8:0b:8b:29:d0:77:84:69:83:90:d1:df:bc:d9:01:34:
         b5:7b:08:2c:11:d9:20:68:8a:9a:b8:e5:c2:07:9e:cd:d7:b8:
         6d:df:f4:c1:36:9e:f7:08:ed:2a:f9:15:06:51:18:3c:b7:7d:
         32:60:aa:fb:ad:e9:49:47:b1:35:b0:3c:58:75:ff:b3:72:16:
         21:9d:7b:9c:fb:20:df:0a:70:ce:6d:c3:ce:77:02:7b:b5:89:
         87:95:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:57:53 2025 by rpki-client