Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa
File:                     3137392e3130372e38302e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          Zpoahw33yIRexCmsC45OkyouIr46O1hQ6tPW8EIoi6w=
Subject key identifier:   65:5D:0B:A4:35:40:94:06:C9:37:54:DE:00:6B:EF:1A:AB:95:B1:8F
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       2C4923C61B1787C0953CD94678549C2402F19DEF
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa
Signing time:             Thu 06 Mar 2025 02:06:26 +0000
ROA not before:           Thu 06 Mar 2025 02:01:26 +0000
ROA not after:            Thu 05 Mar 2026 02:06:26 +0000
asID:                     52545
IP address blocks:        179.107.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 09:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:49:23:c6:1b:17:87:c0:95:3c:d9:46:78:54:9c:24:02:f1:9d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Mar  6 02:01:26 2025 GMT
            Not After : Mar  5 02:06:26 2026 GMT
        Subject: CN=655D0BA435409406C93754DE006BEF1AAB95B18F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:f0:df:5d:ff:15:cf:1e:45:26:20:8c:2b:
                    c4:d4:7e:a2:a1:ae:cf:94:0c:25:f4:47:44:d2:99:
                    7e:50:dc:68:ef:5d:73:10:08:8b:7d:b2:08:ed:37:
                    4f:87:3b:5f:08:e3:18:e7:42:f1:26:a2:24:e4:96:
                    1b:e2:d7:60:a7:28:5d:37:c5:b3:fb:67:79:ed:03:
                    97:d6:03:f3:60:3f:f2:70:72:a9:c2:e0:f6:13:91:
                    d7:fc:ca:53:21:da:e0:0b:67:bb:94:57:72:e5:ce:
                    70:cc:ce:8e:4e:48:10:2c:fc:69:d2:07:fc:6e:46:
                    75:66:15:a5:9b:2c:19:f0:d3:64:f7:fd:81:74:90:
                    23:34:e1:38:a7:e4:8b:d5:7c:97:e1:98:6f:a8:ec:
                    24:70:dd:e9:e1:cb:dc:54:1b:c1:42:bf:c1:cb:e6:
                    20:88:0b:c0:0b:47:71:5f:d0:96:f8:37:96:f9:ed:
                    8f:62:24:92:00:16:be:b2:be:73:3c:ad:32:87:45:
                    fa:cb:54:5a:8d:79:fb:8b:7f:ff:4d:7b:e6:dd:73:
                    42:c7:93:6c:d2:b5:0a:c6:62:1f:fa:ca:29:ff:70:
                    f9:cc:80:80:fc:4f:07:b7:ee:5b:f5:3d:68:fc:aa:
                    34:b3:90:fd:f5:b4:08:f2:a5:fd:43:b9:3c:cb:8f:
                    13:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5D:0B:A4:35:40:94:06:C9:37:54:DE:00:6B:EF:1A:AB:95:B1:8F
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:cc:ee:23:5f:a4:82:de:fb:c9:f1:f6:33:ae:54:c2:84:ca:
         7d:e7:de:a8:a4:63:ab:fe:ba:d5:ad:48:25:27:f8:94:56:cd:
         b9:a6:67:56:2a:d0:af:d6:eb:8b:86:9d:50:a9:02:87:ef:b2:
         7b:ee:83:95:74:63:02:67:00:2b:bb:f6:66:11:44:07:21:2f:
         06:ed:78:12:40:25:6d:f6:cf:ae:6e:aa:8f:aa:1c:7f:f9:88:
         b0:5e:3c:f5:3d:86:51:6f:67:75:e0:ad:b8:18:a5:3e:8d:8a:
         21:6d:d6:d3:9d:e5:89:fe:96:2c:bb:00:65:d8:c6:0c:17:d3:
         19:03:c0:4e:3b:5f:8a:6d:c3:44:38:68:e8:e1:24:29:02:00:
         55:8b:37:9b:c7:e5:82:d2:cd:71:24:47:dd:ca:b2:c5:0b:92:
         6f:55:80:a5:da:23:27:6f:be:66:ea:db:57:0e:f1:05:98:1c:
         bf:09:22:00:98:ba:de:cc:29:1e:ac:99:16:66:32:70:90:58:
         ef:a2:14:21:ad:31:7a:91:32:c2:99:59:94:99:1a:96:2f:58:
         55:14:e7:5b:55:15:bc:1e:31:d3:b8:53:1d:92:8a:41:44:d5:
         bd:12:de:44:5d:f4:79:d1:63:46:e4:6d:8c:27:d9:02:ec:88:
         ca:e3:e9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:08:26 2025 by rpki-client