Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234312e302f32342d3234203d3e20323638393630.roa
File:                     34352e3137362e3234312e302f32342d3234203d3e20323638393630.roa (raw, json)
Hash identifier:          52COCVsma8UVfyGdCTKZSsunIh+qzMYoLeTSUel4ze0=
Subject key identifier:   54:49:B6:D8:99:20:19:05:6F:4C:EE:87:59:55:3C:02:40:DD:DA:3A
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       7F169E1D6252979DECE4FA0EC92807559E2BA9C7
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234312e302f32342d3234203d3e20323638393630.roa
Signing time:             Fri 13 Jun 2025 15:02:00 +0000
ROA not before:           Fri 13 Jun 2025 14:57:00 +0000
ROA not after:            Fri 12 Jun 2026 15:02:00 +0000
asID:                     268960
IP address blocks:        45.176.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 23:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:16:9e:1d:62:52:97:9d:ec:e4:fa:0e:c9:28:07:55:9e:2b:a9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Jun 13 14:57:00 2025 GMT
            Not After : Jun 12 15:02:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:26:98:a7:b5:30:4b:f0:af:db:2b:45:a6:
                    06:25:13:c6:12:09:c5:0c:8a:f2:ae:3d:b5:66:bd:
                    b0:9f:54:00:bc:86:95:52:8d:c5:e7:87:f3:ad:dc:
                    da:9d:10:8c:ed:c6:d1:a8:9f:83:60:7b:e8:25:70:
                    15:1e:64:7d:c1:a2:5f:0d:4c:e6:6d:ca:51:f8:9e:
                    44:19:af:c6:ce:81:cb:23:bd:f6:1c:a0:e2:33:9f:
                    dd:f9:82:9a:e3:a0:2c:94:ab:88:b5:8a:fb:91:45:
                    46:45:c0:53:26:c0:62:19:67:fc:bd:b9:1d:e7:71:
                    1f:c2:0f:ca:a6:f3:d5:ce:3b:3b:6c:5d:5b:dd:ce:
                    ef:d1:07:33:b7:10:e4:07:56:6c:51:33:0e:21:ca:
                    ef:88:d6:50:87:ee:5e:88:db:3f:ea:d2:d2:0f:1a:
                    1e:ce:d0:ba:20:c0:a0:11:53:88:0f:a1:01:57:31:
                    7a:92:0d:dd:bd:9c:8b:4b:c1:d9:e4:aa:93:70:cc:
                    57:bb:91:05:78:79:7b:06:3b:97:8f:05:bc:83:02:
                    c6:9d:f5:08:09:61:b8:fe:43:b7:54:89:54:b9:dc:
                    a5:ac:48:31:33:14:b3:bb:7c:ce:cd:f4:7d:2a:c0:
                    d5:75:4d:9a:fe:f8:6a:45:4c:7c:57:0b:26:90:00:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:49:B6:D8:99:20:19:05:6F:4C:EE:87:59:55:3C:02:40:DD:DA:3A
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234312e302f32342d3234203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:73:eb:92:31:28:52:2d:c2:b8:c9:c7:e5:e0:a0:da:14:ed:
         d5:05:07:d9:48:31:14:62:c3:b7:27:7b:a0:59:b9:68:1c:0c:
         a6:85:b9:99:b6:78:de:4b:a5:b9:a5:6f:b9:ba:ec:5e:ef:ba:
         48:c5:52:13:fe:83:ce:db:ea:53:bb:56:b3:d6:23:df:6f:9a:
         05:b5:a2:c1:2d:3a:85:40:f6:82:40:0e:08:cd:d0:31:a4:94:
         91:c2:4a:cb:15:94:a2:59:a7:8d:da:d2:5a:df:85:2f:48:f3:
         e0:07:7a:7a:67:dd:69:32:46:df:af:05:fd:18:27:60:9a:ba:
         2e:4f:0b:4b:c5:e1:d7:20:26:74:77:70:c3:ed:41:62:2f:f8:
         6c:7f:68:ba:19:a8:a7:75:2c:c2:a9:6f:aa:01:f1:38:c0:88:
         f8:72:6f:b0:fd:09:ce:16:b8:24:86:13:43:71:f2:03:21:f1:
         e3:64:e2:cf:43:5d:91:5d:b9:55:aa:d7:49:7b:54:75:05:d6:
         5e:15:75:cd:00:26:5b:51:73:88:3c:46:1c:c2:10:e3:71:4a:
         f6:0b:15:96:54:99:45:a9:c9:15:88:1e:1b:42:f5:e5:71:a7:
         8a:71:bc:2f:f8:07:62:cc:30:9f:8f:24:39:30:e7:4a:ef:9e:
         bb:cf:49:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:34:30 2025 by rpki-client