Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/34352e3136312e3230322e302f32342d3234203d3e20323638343733.roa
File:                     34352e3136312e3230322e302f32342d3234203d3e20323638343733.roa (raw, json)
Hash identifier:          HofUcNiA1pX8kBpM2xnpwnMEMeGZEDByMQLQ6kx7TS4=
Subject key identifier:   3A:B7:CF:7B:94:E4:AC:7F:8C:B3:8F:E0:CC:E6:A1:EC:CD:03:95:4B
Certificate issuer:       /CN=05FB6CA33F44105459E5CD46044BB5DAF10E178E
Certificate serial:       4A99EF85434EA20082D252F378D2DCE23271F6BD
Authority key identifier: 05:FB:6C:A3:3F:44:10:54:59:E5:CD:46:04:4B:B5:DA:F1:0E:17:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05FB6CA33F44105459E5CD46044BB5DAF10E178E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/34352e3136312e3230322e302f32342d3234203d3e20323638343733.roa
Signing time:             Sat 14 Jun 2025 15:46:26 +0000
ROA not before:           Sat 14 Jun 2025 15:41:26 +0000
ROA not after:            Sat 13 Jun 2026 15:46:26 +0000
asID:                     268473
IP address blocks:        45.161.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/05FB6CA33F44105459E5CD46044BB5DAF10E178E.crl
                          rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/05FB6CA33F44105459E5CD46044BB5DAF10E178E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05FB6CA33F44105459E5CD46044BB5DAF10E178E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 02:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:99:ef:85:43:4e:a2:00:82:d2:52:f3:78:d2:dc:e2:32:71:f6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05FB6CA33F44105459E5CD46044BB5DAF10E178E
        Validity
            Not Before: Jun 14 15:41:26 2025 GMT
            Not After : Jun 13 15:46:26 2026 GMT
        Subject: CN=3AB7CF7B94E4AC7F8CB38FE0CCE6A1ECCD03954B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:80:b3:4b:4d:7d:ef:f4:93:1d:13:2c:5b:
                    12:1c:d2:1a:d5:38:96:d9:be:08:dd:37:82:2f:02:
                    ef:10:98:bc:05:cf:fa:24:62:d8:eb:3d:5f:cc:a4:
                    13:8e:7a:1e:47:2c:5c:ab:f3:79:8d:69:cc:b6:ca:
                    21:69:d4:ff:94:be:48:bd:5f:0b:a6:6a:a9:ec:89:
                    be:8d:01:bf:d8:36:d4:0b:d9:c5:91:01:29:76:37:
                    74:09:6c:14:eb:a4:53:28:06:51:6a:e8:dd:c6:25:
                    1c:d9:30:f2:25:ea:54:14:e5:97:3a:34:1b:32:56:
                    1f:a2:5c:6a:73:ca:61:2b:82:aa:6a:04:7a:9c:31:
                    ed:c9:16:85:a4:58:06:f5:97:65:9d:cb:1d:10:2e:
                    80:9e:2d:47:1e:d1:18:84:18:4e:6b:d7:1f:12:f5:
                    78:6d:57:32:29:5e:fd:98:4b:fa:65:19:24:63:5c:
                    f8:5d:c0:68:e5:8b:96:a2:65:25:08:4f:a5:96:fc:
                    24:13:46:de:83:81:5c:1a:c4:aa:80:1c:5f:73:a3:
                    81:e1:30:80:e0:8f:87:e4:c0:6a:4b:8c:7c:a1:0e:
                    af:09:1e:b0:a1:c3:e4:83:ef:01:32:07:97:ca:79:
                    c6:6d:01:15:a4:8e:1b:41:b8:25:5d:53:7a:bd:51:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B7:CF:7B:94:E4:AC:7F:8C:B3:8F:E0:CC:E6:A1:EC:CD:03:95:4B
            X509v3 Authority Key Identifier:
                keyid:05:FB:6C:A3:3F:44:10:54:59:E5:CD:46:04:4B:B5:DA:F1:0E:17:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/05FB6CA33F44105459E5CD46044BB5DAF10E178E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05FB6CA33F44105459E5CD46044BB5DAF10E178E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/34352e3136312e3230322e302f32342d3234203d3e20323638343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e7:92:b6:f0:3c:7a:6c:4a:bf:53:31:44:42:05:2b:f7:91:
         71:74:2c:35:a6:b2:29:b6:45:66:14:a6:d8:95:43:c4:c8:ab:
         72:22:84:e7:a0:53:64:b7:9f:20:28:bb:35:d3:b9:2c:51:3f:
         98:aa:bd:f7:ba:1c:5b:a2:62:70:b1:94:c0:cb:1a:d1:cc:57:
         3b:c3:32:08:f9:a9:14:1d:e8:0d:90:cc:10:30:3a:fe:46:78:
         1b:15:49:18:d8:77:94:5a:5b:f8:9e:e0:91:a6:b2:03:06:30:
         c0:cd:01:7a:25:36:65:82:a1:39:d9:b4:23:61:e8:68:be:8f:
         b3:ee:42:01:23:20:6b:bf:99:51:09:9d:95:b8:05:2b:a6:25:
         84:93:d5:88:88:35:a5:8f:0a:47:af:18:56:53:cf:12:05:b3:
         94:05:bd:29:c8:75:7a:95:8d:fb:ed:9f:ac:63:ff:1d:70:dc:
         1e:2f:be:4f:da:ac:e2:e6:da:c5:d6:74:63:eb:cc:66:19:35:
         57:cb:5b:5b:59:6e:74:b0:32:e7:1b:9c:1e:fc:84:01:28:85:
         d6:bc:6c:86:b0:a9:44:82:19:34:d1:d8:fb:74:19:88:90:8c:
         6b:4a:c9:e5:01:34:73:70:58:54:aa:e1:71:40:12:fa:03:32:
         04:d2:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:06:48 2025 by rpki-client