Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa
File:                     34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa (raw, json)
Hash identifier:          x3CxMQKlFj1q3YCTXJuzmPjWbBc3rImVUfAsY+vC5Ik=
Subject key identifier:   40:14:C7:63:6A:B8:03:C1:B8:22:64:2F:03:11:ED:48:1D:C9:1A:09
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       2F22D9A9517474B19FC61DB83FC8957549AB4E26
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa
Signing time:             Fri 13 Jun 2025 15:02:00 +0000
ROA not before:           Fri 13 Jun 2025 14:57:00 +0000
ROA not after:            Fri 12 Jun 2026 15:02:00 +0000
asID:                     268960
IP address blocks:        45.176.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 23:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:22:d9:a9:51:74:74:b1:9f:c6:1d:b8:3f:c8:95:75:49:ab:4e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Jun 13 14:57:00 2025 GMT
            Not After : Jun 12 15:02:00 2026 GMT
        Subject: CN=3082010A0282010100F0F51D2C495DA3A90CBD24BE041BD5C22079176F22A2A4EDBB7B04F6155E7C517D8EA81D30E6E3B1241484158DAD1BBA446E0F0E65AFBA6A920F68309ED2865ACC0BCD45F6A5EE0529652368C89A1B56B0D82AC88E6288C66EDFC1A6D7DFF32E821E71B178046E3484C950E06D8A93446BC26C7F4E4B4DDEC1B890876892FF9CC069C2BE9A13C3EF7CB6092163447EA4CDEE73C5B9903CC9DCF068B4B9AC7215C001AD0C1811EB73E4605FA139C365ECB48DD8E0D9EF9CA02F172531A343949088C2F371EF76AD74A8BAB683AEE3177C752FA5E13F0D8AC89653C43903E1F4BD66DFDE84599ECA4D5AF94CC7E51C3F2A846A1285DA283FE221AF75039E7526690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f5:1d:2c:49:5d:a3:a9:0c:bd:24:be:04:1b:
                    d5:c2:20:79:17:6f:22:a2:a4:ed:bb:7b:04:f6:15:
                    5e:7c:51:7d:8e:a8:1d:30:e6:e3:b1:24:14:84:15:
                    8d:ad:1b:ba:44:6e:0f:0e:65:af:ba:6a:92:0f:68:
                    30:9e:d2:86:5a:cc:0b:cd:45:f6:a5:ee:05:29:65:
                    23:68:c8:9a:1b:56:b0:d8:2a:c8:8e:62:88:c6:6e:
                    df:c1:a6:d7:df:f3:2e:82:1e:71:b1:78:04:6e:34:
                    84:c9:50:e0:6d:8a:93:44:6b:c2:6c:7f:4e:4b:4d:
                    de:c1:b8:90:87:68:92:ff:9c:c0:69:c2:be:9a:13:
                    c3:ef:7c:b6:09:21:63:44:7e:a4:cd:ee:73:c5:b9:
                    90:3c:c9:dc:f0:68:b4:b9:ac:72:15:c0:01:ad:0c:
                    18:11:eb:73:e4:60:5f:a1:39:c3:65:ec:b4:8d:d8:
                    e0:d9:ef:9c:a0:2f:17:25:31:a3:43:94:90:88:c2:
                    f3:71:ef:76:ad:74:a8:ba:b6:83:ae:e3:17:7c:75:
                    2f:a5:e1:3f:0d:8a:c8:96:53:c4:39:03:e1:f4:bd:
                    66:df:de:84:59:9e:ca:4d:5a:f9:4c:c7:e5:1c:3f:
                    2a:84:6a:12:85:da:28:3f:e2:21:af:75:03:9e:75:
                    26:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:14:C7:63:6A:B8:03:C1:B8:22:64:2F:03:11:ED:48:1D:C9:1A:09
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234322e302f32332d3233203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:f5:fb:24:ee:3f:94:4d:a9:be:d2:bb:40:42:17:0c:cd:e2:
         60:75:98:5e:43:30:5e:8d:c3:df:9d:91:30:eb:4e:f0:1a:af:
         db:49:7c:49:c3:18:90:27:83:b6:c7:f1:15:da:e1:53:3d:c9:
         27:88:de:4a:85:98:b9:74:f3:b5:8a:2e:4a:b4:ff:1f:be:9b:
         67:b2:ba:2e:08:f0:90:24:54:eb:1f:81:36:ea:64:48:1c:f1:
         07:fa:14:80:84:3e:02:32:fa:2e:bd:0f:f7:39:4c:48:02:7c:
         8e:60:cf:e6:61:b7:a2:57:2f:f3:d6:4f:b0:df:d4:f5:fb:e8:
         26:bf:0a:6e:47:da:ab:99:f5:12:9e:95:37:75:58:ad:10:99:
         e0:39:e6:46:12:b6:45:43:a2:6c:46:18:bc:20:22:08:a1:a2:
         ea:6e:88:23:43:79:3f:0d:a4:ae:62:74:2c:0a:05:ab:fb:ff:
         d8:85:91:ce:2f:9a:0b:f8:55:ef:3a:40:a9:1f:64:b2:ed:2d:
         01:bb:44:a7:f0:08:f2:57:af:3c:14:99:28:94:ed:c0:9e:3a:
         1e:a9:5d:c4:a3:92:95:e3:03:89:fe:27:55:b2:8f:7c:95:28:
         69:d5:e9:a0:a7:09:97:9f:34:5b:11:95:43:c5:08:86:6a:bf:
         a2:fe:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:21:20 2025 by rpki-client