Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/34352e3233312e33362e302f32322d3234203d3e20323637323230.roa
File:                     34352e3233312e33362e302f32322d3234203d3e20323637323230.roa (raw, json)
Hash identifier:          YfFqYAjWQxr3WlTttHr97Z9Lj82F3Z/n3Y6JNlslAGU=
Subject key identifier:   12:86:47:97:D8:CC:00:60:E6:51:D6:12:CE:18:D7:8B:7C:9D:AE:98
Certificate issuer:       /CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
Certificate serial:       10BB7BD7BF2409EAEF18C7AA27EE75BD15A4F956
Authority key identifier: 4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/34352e3233312e33362e302f32322d3234203d3e20323637323230.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     267220
IP address blocks:        45.231.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl
                          rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bb:7b:d7:bf:24:09:ea:ef:18:c7:aa:27:ee:75:bd:15:a4:f9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100F7434E2D340525DD2C3DBB4918ABF5839F3B8BB8F76A8016B9294C60520A058BF41BB6A032905993CE3ACC77AD736F7E27923318A3FAD5EC9EDF6C293C813C28F8BF6F12ABEDC0D1835F883CD456DF9F973B6B5847134132588FC52DD573B9B6317B69C43BFF6BBB59FAE998372F670D15415453FA818773BC8C225EB01F690F639C7C16BD6C49D15860B36F891F9D18DD60E5E910CD223D871D9F473B55964C3D731E4F165D290EFE95C19B469E597CCAF8ED46598376D42C54EB23FF1BB969AA0F475D054AB975FED5BC8E26787198C8F0A27B4CC7CFC6793B097FEAD5C0E86F57990D2C3EC16AD3EE94DAB7966451E2E18FF8A40188CCC722B32BCFD815C30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:43:4e:2d:34:05:25:dd:2c:3d:bb:49:18:ab:
                    f5:83:9f:3b:8b:b8:f7:6a:80:16:b9:29:4c:60:52:
                    0a:05:8b:f4:1b:b6:a0:32:90:59:93:ce:3a:cc:77:
                    ad:73:6f:7e:27:92:33:18:a3:fa:d5:ec:9e:df:6c:
                    29:3c:81:3c:28:f8:bf:6f:12:ab:ed:c0:d1:83:5f:
                    88:3c:d4:56:df:9f:97:3b:6b:58:47:13:41:32:58:
                    8f:c5:2d:d5:73:b9:b6:31:7b:69:c4:3b:ff:6b:bb:
                    59:fa:e9:98:37:2f:67:0d:15:41:54:53:fa:81:87:
                    73:bc:8c:22:5e:b0:1f:69:0f:63:9c:7c:16:bd:6c:
                    49:d1:58:60:b3:6f:89:1f:9d:18:dd:60:e5:e9:10:
                    cd:22:3d:87:1d:9f:47:3b:55:96:4c:3d:73:1e:4f:
                    16:5d:29:0e:fe:95:c1:9b:46:9e:59:7c:ca:f8:ed:
                    46:59:83:76:d4:2c:54:eb:23:ff:1b:b9:69:aa:0f:
                    47:5d:05:4a:b9:75:fe:d5:bc:8e:26:78:71:98:c8:
                    f0:a2:7b:4c:c7:cf:c6:79:3b:09:7f:ea:d5:c0:e8:
                    6f:57:99:0d:2c:3e:c1:6a:d3:ee:94:da:b7:96:64:
                    51:e2:e1:8f:f8:a4:01:88:cc:c7:22:b3:2b:cf:d8:
                    15:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:86:47:97:D8:CC:00:60:E6:51:D6:12:CE:18:D7:8B:7C:9D:AE:98
            X509v3 Authority Key Identifier:
                keyid:4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/34352e3233312e33362e302f32322d3234203d3e20323637323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:0b:8e:00:fd:46:03:34:0d:30:4f:e4:47:37:69:c1:05:4d:
         1b:b3:f8:0d:00:a9:54:fc:fb:cd:9b:68:2b:51:98:02:69:b8:
         de:0b:e8:31:16:db:90:2d:23:b3:25:e1:17:93:66:8a:6b:a9:
         84:a9:3f:0a:da:20:61:7f:94:7f:b9:d4:ea:f2:fb:b0:ca:6d:
         7d:aa:41:11:7f:f4:9c:cf:d4:df:82:97:00:1f:ea:2b:bc:32:
         dd:d1:48:77:34:b1:6d:06:97:8b:46:34:3c:de:62:20:04:de:
         dc:6c:0f:e4:26:45:7c:b8:f2:f9:79:20:76:51:a7:80:f9:a5:
         19:c0:ba:2f:a4:2b:54:39:41:f1:9e:f9:23:7a:19:ce:8e:09:
         c4:d4:2d:d3:8a:53:06:00:40:36:78:36:27:19:28:24:99:11:
         c1:74:be:cc:bd:1b:a6:5d:04:1f:3c:70:fd:f7:36:06:22:2b:
         ed:d7:7a:8b:ac:bd:3a:63:a2:f7:2b:8f:ce:14:d2:09:57:db:
         3f:7e:34:a0:b8:4b:f7:96:be:3d:b1:34:d6:16:96:cd:ae:42:
         73:d5:df:da:c9:47:bc:9c:c4:8b:d7:c2:ec:9c:b1:8e:29:55:
         41:7f:bc:05:76:2b:4c:a2:f7:fb:4d:af:b7:fc:c0:ec:1b:37:
         36:8e:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:32:36 2025 by rpki-client