Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134382e302f32332d3233203d3e20323637393633.roa
File:                     34352e3136362e3134382e302f32332d3233203d3e20323637393633.roa (raw, json)
Hash identifier:          /c2ZRulE+hBwckZWCmHv8QvmvF07j7GuqJSAmn95wgE=
Subject key identifier:   1F:6C:DD:DB:8B:21:40:4E:1C:47:3D:65:44:7B:DF:3A:E8:40:87:FD
Certificate issuer:       /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial:       43D47714D2B554CC6B21141F39A660715322B488
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134382e302f32332d3233203d3e20323637393633.roa
Signing time:             Thu 20 Mar 2025 19:32:02 +0000
ROA not before:           Thu 20 Mar 2025 19:27:02 +0000
ROA not after:            Thu 19 Mar 2026 19:32:02 +0000
asID:                     267963
IP address blocks:        45.166.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl
                          rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d4:77:14:d2:b5:54:cc:6b:21:14:1f:39:a6:60:71:53:22:b4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
        Validity
            Not Before: Mar 20 19:27:02 2025 GMT
            Not After : Mar 19 19:32:02 2026 GMT
        Subject: CN=1F6CDDDB8B21404E1C473D65447BDF3AE84087FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:a3:a8:b7:23:7a:6a:d5:67:e5:67:6d:af:
                    c9:5f:bb:38:57:d7:c4:cf:d2:c8:dd:35:99:99:94:
                    79:81:c8:33:f3:ce:b5:8f:6f:c6:4d:af:65:42:6f:
                    b0:51:5d:ea:e7:d9:d0:2c:23:ed:58:99:33:12:3b:
                    de:46:08:0f:b5:98:56:f6:69:24:d3:01:b7:33:90:
                    f3:59:3c:8c:90:50:e9:1e:e5:ca:1a:77:c2:90:ac:
                    5a:89:a2:7f:a2:1f:12:c5:e9:55:b3:2e:c7:54:27:
                    56:b9:a2:16:8f:01:69:27:cf:cd:3b:97:74:ad:d5:
                    ab:f1:3c:a5:dd:63:45:5b:a5:16:d0:2a:00:5c:06:
                    67:16:fe:02:67:35:07:f3:d4:36:2c:a5:90:a4:e4:
                    93:cd:56:5c:b6:ba:ef:de:36:77:e0:82:a0:9c:2d:
                    b3:52:71:f6:b6:2b:0f:3a:02:21:64:91:cb:83:52:
                    b9:9b:9a:e8:30:54:c5:5d:e6:12:9c:82:dd:6b:a0:
                    7d:cf:3b:cd:4e:fe:8c:04:a1:15:31:4a:d4:bd:72:
                    03:1f:96:45:25:59:94:07:c0:d1:3b:3b:b0:93:15:
                    42:a5:90:f3:4f:8d:57:79:20:54:45:da:4b:1a:2b:
                    25:f5:b4:ec:70:66:e0:37:73:67:75:a7:ae:85:da:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6C:DD:DB:8B:21:40:4E:1C:47:3D:65:44:7B:DF:3A:E8:40:87:FD
            X509v3 Authority Key Identifier:
                keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134382e302f32332d3233203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:56:63:f9:2b:bb:29:e7:70:ce:23:47:23:79:52:f3:c6:a5:
         9d:54:98:c0:ea:b9:f9:27:47:51:1a:3d:d9:65:f9:cf:80:ce:
         d4:fc:0b:be:f2:fd:fc:30:52:63:67:31:a6:80:cb:26:04:11:
         63:68:ae:6b:f7:db:6a:d6:e1:6d:b0:c7:7c:4e:16:39:b7:7d:
         c0:75:b4:c8:fd:1e:6b:6f:60:a8:8e:ba:35:e9:fd:54:7b:f2:
         27:46:81:93:7b:0e:ea:e0:64:c5:09:0c:82:0a:a0:34:bc:e7:
         2b:16:43:07:f8:91:b7:3c:01:19:a5:74:7d:2c:9d:1a:a1:94:
         68:c8:bd:6f:be:75:01:5f:31:b2:e3:e0:8d:3c:dd:c7:f2:48:
         69:27:69:22:38:04:12:f2:80:21:5a:0e:1a:a8:f4:85:ae:78:
         fc:1c:b6:42:69:d5:d4:a5:09:5e:d1:bd:62:18:c1:bc:09:e4:
         2d:29:ff:a5:d2:de:99:7f:3d:99:fe:fd:3c:e0:c3:76:62:96:
         7a:01:9f:6a:35:16:65:7b:4a:cc:1e:c6:16:69:c0:13:66:87:
         3b:a3:cf:a8:ae:0e:91:6e:67:bd:99:80:99:c8:40:3d:f3:5d:
         8c:0f:4c:96:15:d5:1a:08:98:a7:2e:79:89:d6:c4:53:fb:e8:
         24:e6:54:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:02:08 2025 by rpki-client