Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
File:                     3137302e38322e3136382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          lUbXQpRHgGjtKeiTZmMb2PKbYixz7UfahyPa9iA2MXg=
Subject key identifier:   A1:BC:88:17:23:59:C2:A3:BE:B3:28:93:A1:C7:D7:B6:6D:4C:41:31
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       0B645FC448B9FFBFCF47ECCFA245E9B894E38D9F
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
Signing time:             Thu 06 Mar 2025 02:06:27 +0000
ROA not before:           Thu 06 Mar 2025 02:01:27 +0000
ROA not after:            Thu 05 Mar 2026 02:06:27 +0000
asID:                     52545
IP address blocks:        170.82.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 21:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:64:5f:c4:48:b9:ff:bf:cf:47:ec:cf:a2:45:e9:b8:94:e3:8d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Mar  6 02:01:27 2025 GMT
            Not After : Mar  5 02:06:27 2026 GMT
        Subject: CN=A1BC88172359C2A3BEB32893A1C7D7B66D4C4131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:8e:ea:b3:95:70:b8:a0:b3:af:2e:d4:1c:
                    ae:95:c8:e9:9e:3c:09:9d:1c:10:51:5b:45:9e:a7:
                    f9:f0:58:41:ae:fe:c3:e7:bc:9a:5a:cc:cc:26:21:
                    bb:23:49:8c:64:55:b5:c5:40:25:8f:4a:1b:c4:d2:
                    f1:48:77:64:82:23:b4:0f:9f:c1:f5:ab:3a:ab:85:
                    d4:75:f0:93:31:7e:67:96:a6:e6:b6:fb:54:60:f6:
                    ab:9a:29:b4:d2:20:82:cd:3d:51:58:f6:3a:6e:07:
                    32:9b:3f:e4:94:9c:c4:af:7f:98:a7:c3:53:89:71:
                    2f:23:d5:fb:e1:20:43:1d:8a:48:a4:e7:52:4e:db:
                    58:79:23:6c:44:a7:56:e6:ff:dd:5c:5d:ca:ae:71:
                    de:4d:38:1d:21:e3:c3:5c:e3:12:90:4d:86:3a:a4:
                    d8:c5:7b:ab:64:34:17:4d:49:e2:29:92:25:b1:f4:
                    fb:8f:1c:da:35:b8:61:10:f0:d1:62:91:27:d6:49:
                    d1:cb:5e:30:75:ef:78:65:5e:ca:7a:7f:c7:df:a6:
                    8c:71:8a:ff:16:9b:bb:e1:58:29:98:fe:50:a2:3c:
                    dc:13:a8:72:fd:96:b5:21:57:bb:0f:37:cf:46:25:
                    19:71:42:23:da:c4:ce:18:bb:91:12:89:48:69:f3:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BC:88:17:23:59:C2:A3:BE:B3:28:93:A1:C7:D7:B6:6D:4C:41:31
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:26:92:5d:42:b7:81:b5:db:e3:1d:2e:32:16:de:c1:e5:67:
         f3:6d:8e:87:a4:63:64:42:7e:33:40:3a:54:bb:a5:85:11:53:
         cc:88:1d:d6:6c:75:74:7e:89:4c:51:17:a3:7d:25:b7:ef:20:
         c3:b2:db:87:c6:04:cb:66:52:69:19:5d:88:d1:6d:b7:fc:3d:
         ef:ee:f4:56:55:9d:b3:95:b2:67:97:e9:42:96:3d:3c:15:1f:
         d6:11:ec:fd:b9:f9:ba:2e:6b:20:f5:72:3f:cd:5c:27:54:2e:
         7e:fd:ab:e3:84:49:a6:af:31:d8:52:69:08:a3:1e:3e:b0:3a:
         65:f7:86:7c:0e:0a:23:3a:c5:0e:75:1f:1c:f0:61:7a:b8:19:
         98:4d:8d:63:0e:2b:1e:22:cd:4e:8f:74:75:75:50:b2:7c:7d:
         3f:5e:20:58:fb:c9:79:8d:89:a7:ea:b8:85:5e:1c:bb:dd:9c:
         eb:53:6d:12:d6:3e:e6:9d:21:ee:39:95:f5:7d:dc:20:9d:75:
         58:93:73:f7:1d:5f:9b:14:cd:98:76:25:0d:9b:8d:52:c0:22:
         b0:75:9b:ef:ef:9b:61:06:1e:d7:ab:c4:dd:5b:eb:68:0d:df:
         26:fa:f2:5a:70:46:d1:22:5b:e0:ea:eb:7b:f9:cc:6e:dd:58:
         b2:e3:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:07:48 2025 by rpki-client