Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/34352e3138312e3235322e302f32322d3234203d3e20323639323036.roa
File:                     34352e3138312e3235322e302f32322d3234203d3e20323639323036.roa (raw, json)
Hash identifier:          eF/jcrjcMT1tgm2BM/aKP4XsF8KNRmoUhM2IduUz0Pw=
Subject key identifier:   F2:CD:D7:DC:AD:FB:B6:64:1F:AB:23:4A:38:D2:34:5C:B9:44:5B:18
Certificate issuer:       /CN=6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E
Certificate serial:       6BE8CB190875847ECAA4D5C2AC8BFDF3353F53CB
Authority key identifier: 6B:E6:60:36:B7:C7:6E:29:D8:AF:C6:5A:1B:85:B9:D1:5F:CC:97:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/34352e3138312e3235322e302f32322d3234203d3e20323639323036.roa
Signing time:             Tue 17 Jun 2025 17:07:57 +0000
ROA not before:           Tue 17 Jun 2025 17:02:57 +0000
ROA not after:            Tue 16 Jun 2026 17:07:57 +0000
asID:                     269206
IP address blocks:        45.181.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.crl
                          rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 22:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e8:cb:19:08:75:84:7e:ca:a4:d5:c2:ac:8b:fd:f3:35:3f:53:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E
        Validity
            Not Before: Jun 17 17:02:57 2025 GMT
            Not After : Jun 16 17:07:57 2026 GMT
        Subject: CN=F2CDD7DCADFBB6641FAB234A38D2345CB9445B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:2a:cb:de:8f:dd:52:9d:ed:ea:cf:60:c8:
                    b6:8a:74:1b:56:de:0e:ca:f0:22:a5:e2:d5:77:b0:
                    d4:9b:11:ae:ba:fa:82:f3:f0:fd:2c:fd:50:37:c6:
                    9c:f5:a7:74:62:e4:b7:69:75:a5:ec:ec:eb:a3:5e:
                    a2:7f:fb:63:c1:46:90:2e:43:46:7d:df:62:8d:46:
                    e1:b1:24:25:2a:14:2e:3d:e6:07:dc:6e:8d:a4:a1:
                    f4:17:49:af:5d:67:6d:c5:59:dc:26:24:fb:e2:00:
                    ff:dc:ef:a5:f5:52:3c:45:96:db:08:64:d9:d2:33:
                    05:b1:39:cc:52:8c:d3:f1:81:98:a2:6d:6f:2b:2c:
                    21:3c:36:0c:89:40:d1:13:68:fc:94:29:e4:f5:94:
                    3f:4e:96:75:02:ff:20:89:9c:d8:30:10:60:f6:da:
                    d1:47:0f:a5:95:73:68:ee:7b:a4:ce:77:d0:b1:33:
                    7f:02:70:a7:ec:de:26:41:b9:51:f7:f5:d5:1a:59:
                    3b:df:8b:c5:ce:93:05:14:e3:6c:33:a0:ec:45:73:
                    8e:bb:36:6e:41:46:9f:11:bb:d8:62:9d:9e:70:41:
                    2e:26:b2:ab:18:9e:b5:ad:e7:e6:bd:de:08:34:ab:
                    e6:50:fe:5f:7b:a8:60:72:08:a4:65:b3:d2:bd:be:
                    0d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CD:D7:DC:AD:FB:B6:64:1F:AB:23:4A:38:D2:34:5C:B9:44:5B:18
            X509v3 Authority Key Identifier:
                keyid:6B:E6:60:36:B7:C7:6E:29:D8:AF:C6:5A:1B:85:B9:D1:5F:CC:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/34352e3138312e3235322e302f32322d3234203d3e20323639323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:44:70:21:1b:1b:5d:c0:5f:a7:a9:92:61:be:83:0f:91:d6:
         b1:a6:ac:9e:93:f1:d2:ab:b7:18:89:b4:2f:d1:91:47:03:91:
         a8:dd:41:e9:44:b7:3d:ad:50:63:cf:f6:3f:87:6b:7b:31:4c:
         3c:f5:fa:3e:7c:31:37:12:9a:a2:8a:3e:ad:99:11:1a:12:b2:
         ac:5d:c5:c8:01:e4:3a:20:b2:00:88:dd:7c:53:d9:a4:eb:7f:
         0d:2a:1a:a8:ef:e9:da:41:06:bb:74:f4:4b:e9:8a:0b:e6:f6:
         ba:d5:83:49:9e:b0:73:cb:cd:b1:20:18:6f:0c:0e:bc:d2:59:
         1c:02:c9:ea:70:2d:f6:46:11:7c:81:70:b7:a8:8d:66:45:74:
         6f:bf:aa:b0:df:a1:58:54:09:18:ad:10:81:e6:1d:86:2e:3c:
         c1:1c:49:6c:4b:50:54:44:ef:b7:6c:e3:3b:66:a2:8e:4e:b3:
         50:5e:b2:52:d2:03:aa:a3:a2:13:bb:cc:a8:1f:61:65:e9:6b:
         59:ae:03:92:13:f0:9a:f8:e8:ed:6f:94:04:b0:69:6f:ca:75:
         fc:12:8a:2e:01:23:6c:60:49:c8:bb:90:f2:77:c7:01:a5:e9:
         fb:e2:c5:ae:f7:0d:31:9a:58:67:cf:67:cf:6a:c3:18:5c:39:
         4e:fa:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:45:30 2025 by rpki-client