Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234332e302f32342d3234203d3e20323638393630.roa
File:                     34352e3137362e3234332e302f32342d3234203d3e20323638393630.roa (raw, json)
Hash identifier:          4N/M4ZNmQbfFiyso7RyW3aHjKy2xb+VYN7zXFoTswkA=
Subject key identifier:   DF:7B:14:EB:0B:C5:7D:E5:15:A1:E6:1F:4D:6A:52:36:C3:79:F5:4B
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       277185DEABF3615CC5DBE857BFE7EE7E5755433C
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234332e302f32342d3234203d3e20323638393630.roa
Signing time:             Fri 13 Jun 2025 15:02:00 +0000
ROA not before:           Fri 13 Jun 2025 14:57:00 +0000
ROA not after:            Fri 12 Jun 2026 15:02:00 +0000
asID:                     268960
IP address blocks:        45.176.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:71:85:de:ab:f3:61:5c:c5:db:e8:57:bf:e7:ee:7e:57:55:43:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: Jun 13 14:57:00 2025 GMT
            Not After : Jun 12 15:02:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:ad:a6:1b:ae:1e:e4:a2:54:ff:a2:b5:37:
                    8b:08:cd:32:b3:2f:df:56:42:b8:9f:fd:39:1d:79:
                    5d:cd:4f:14:fe:3b:37:6f:a3:5f:e7:4a:4a:cd:09:
                    7d:a8:81:a0:ff:bd:ce:fe:94:57:ad:f1:ab:4b:5b:
                    02:8c:1b:38:67:43:5d:5f:94:db:3c:32:42:ea:21:
                    96:88:aa:31:95:83:17:84:c5:2c:a3:4f:1d:8d:c2:
                    ca:15:fb:bd:80:b1:6b:61:6a:5d:0b:2e:b2:b2:7e:
                    0b:4e:46:cc:d1:73:f8:04:6e:0c:28:7e:95:e5:e8:
                    99:99:58:0f:78:95:68:fb:d8:16:dc:e5:f7:05:fe:
                    85:48:5a:b8:cd:0b:f3:ae:e0:90:2b:3c:88:5c:23:
                    da:0b:f9:6c:13:7f:62:97:93:7f:a5:3d:65:8f:e4:
                    53:4a:01:b4:bc:76:44:02:46:d8:a5:fe:d7:1b:ea:
                    7f:e8:6d:af:bd:e6:79:87:a7:56:0f:ed:80:bf:44:
                    dd:b7:56:91:a5:a8:ea:7e:de:b7:d9:2e:b0:6a:c0:
                    5c:0a:95:cf:df:f7:e3:38:7d:f8:75:ed:19:4b:40:
                    c5:42:31:b6:4c:58:9a:0d:62:a8:a1:01:db:d6:fc:
                    68:53:54:b2:6d:6d:b2:1e:8d:58:b1:47:67:96:09:
                    09:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7B:14:EB:0B:C5:7D:E5:15:A1:E6:1F:4D:6A:52:36:C3:79:F5:4B
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/34352e3137362e3234332e302f32342d3234203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:f4:e5:66:8b:9d:c8:71:87:7e:41:ec:74:10:46:88:a2:f7:
         2d:40:c8:c5:6b:d3:53:79:5b:6a:80:96:23:ec:56:96:7c:35:
         84:1c:e1:68:50:f1:e3:88:04:e3:64:bd:81:09:8b:36:d9:ab:
         e3:d1:11:ba:31:d1:d3:fd:b5:7d:ea:5b:b0:1d:0b:41:03:56:
         36:75:89:90:28:48:0a:ed:6f:01:4b:f1:e3:25:10:79:b1:52:
         44:7a:cb:06:bf:c7:4b:63:af:03:1a:0f:d6:7d:8c:37:f0:22:
         c0:51:78:35:ab:fd:08:76:fe:12:c7:85:d1:e4:5c:05:41:ca:
         6a:59:b1:30:c0:de:c3:31:18:77:fe:ce:6b:dd:0e:fd:d9:d3:
         92:db:01:8c:a7:4c:f4:1f:b1:85:54:79:9d:98:fb:59:11:2e:
         a7:e2:08:5c:15:96:f8:04:2c:65:52:c9:5f:80:3c:00:d4:1c:
         5b:bd:21:12:06:8e:ca:1e:db:c6:eb:60:8c:40:dc:38:b9:0f:
         04:c1:3e:f3:b4:f3:f5:57:b5:1f:24:31:61:68:ef:79:4a:64:
         5c:23:57:7c:3f:50:b8:58:2b:a8:db:07:ff:da:ce:88:f6:26:
         34:6c:5d:64:55:86:7f:9e:56:c9:92:0f:1c:e3:3f:25:12:a1:
         2d:fd:93:59
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUJ3GF3qvzYVzF2+hXv+fufldVQzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY4RDhBRkYzM0U5ODQ2RjdEMDI0Njc0Q0ExM0JEODVB
NTUxODMzNTAeFw0yNTA2MTMxNDU3MDBaFw0yNjA2MTIxNTAyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTg3REFEQTYxQkFFMUVFNEEy
NTRGRkEyQjUzNzhCMDhDRDMyQjMyRkRGNTY0MkI4OUZGRDM5MUQ3OTVEQ0Q0RjE0
RkUzQjM3NkZBMzVGRTc0QTRBQ0QwOTdEQTg4MUEwRkZCRENFRkU5NDU3QURGMUFC
NEI1QjAyOEMxQjM4Njc0MzVENUY5NERCM0MzMjQyRUEyMTk2ODhBQTMxOTU4MzE3
ODRDNTJDQTM0RjFEOERDMkNBMTVGQkJEODBCMTZCNjE2QTVEMEIyRUIyQjI3RTBC
NEU0NkNDRDE3M0Y4MDQ2RTBDMjg3RTk1RTVFODk5OTk1ODBGNzg5NTY4RkJEODE2
RENFNUY3MDVGRTg1NDg1QUI4Q0QwQkYzQUVFMDkwMkIzQzg4NUMyM0RBMEJGOTZD
MTM3RjYyOTc5MzdGQTUzRDY1OEZFNDUzNEEwMUI0QkM3NjQ0MDI0NkQ4QTVGRUQ3
MUJFQTdGRTg2REFGQkRFNjc5ODdBNzU2MEZFRDgwQkY0NEREQjc1NjkxQTVBOEVB
N0VERUI3RDkyRUIwNkFDMDVDMEE5NUNGREZGN0UzMzg3REY4NzVFRDE5NEI0MEM1
NDIzMUI2NEM1ODlBMEQ2MkE4QTEwMURCRDZGQzY4NTM1NEIyNkQ2REIyMUU4RDU4
QjE0NzY3OTYwOTA5NzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqH2tphuuHuSiVP+itTeLCM0ysy/fVkK4n/05HXldzU8U/js3b6Nf
50pKzQl9qIGg/73O/pRXrfGrS1sCjBs4Z0NdX5TbPDJC6iGWiKoxlYMXhMUso08d
jcLKFfu9gLFrYWpdCy6ysn4LTkbM0XP4BG4MKH6V5eiZmVgPeJVo+9gW3OX3Bf6F
SFq4zQvzruCQKzyIXCPaC/lsE39il5N/pT1lj+RTSgG0vHZEAkbYpf7XG+p/6G2v
veZ5h6dWD+2Av0Tdt1aRpajqft632S6wasBcCpXP3/fjOH34de0ZS0DFQjG2TFia
DWKooQHb1vxoU1SybW2yHo1YsUdnlgkJdwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FN97FOsLxX3lFaHmH01qUjbDefVLMB8GA1UdIwQYMBaAFOaNiv8z6YRvfQJGdMoT
vYWlUYM1MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dpY29ZcmlobWtUMXha
QjZ2RGlpWGgyQWhEZDFRd1A3eGlRaFZBRFMzN1ZlLzEvRTY4RDhBRkYzM0U5ODQ2
RjdEMDI0Njc0Q0ExM0JEODVBNTUxODMzNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FNjhEOEFGRjMzRTk4NDZGN0QwMjQ2NzRDQTEzQkQ4NUE1NTE4
MzM1LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HaWNvWXJpaG1rVDF4WkI2dkRp
aVhoMkFoRGQxUXdQN3hpUWhWQURTMzdWZS8xLzM0MzUyZTMxMzczNjJlMzIzNDMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4MzkzNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LbDzMA0GCSqGSIb3DQEBCwUAA4IBAQDG9OVmi53IcYd+Qex0EEaIovctQMjFa9NT
eVtqgJYj7FaWfDWEHOFoUPHjiATjZL2BCYs22avj0RG6MdHT/bV96luwHQtBA1Y2
dYmQKEgK7W8BS/HjJRB5sVJEessGv8dLY68DGg/WfYw38CLAUXg1q/0Idv4Sx4XR
5FwFQcpqWbEwwN7DMRh3/s5r3Q792dOS2wGMp0z0H7GFVHmdmPtZES6n4ghcFZb4
BCxlUslfgDwA1BxbvSESBo7KHtvG62CMQNw4uQ8EwT7ztPP1V7UfJDFhaO95SmRc
I1d8P1C4WCuo2wf/2s6I9iY0bF1kVYZ/nlbJkg8c4z8lEqEt/ZNZ
-----END CERTIFICATE-----
Generated at Thu Jul 3 20:35:24 2025 by rpki-client