Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa
File:                     34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa (raw, json)
Hash identifier:          QRux96G/lfgz7O4EjHPAERqDHHHWAhFqgGE1GI68Qng=
Subject key identifier:   7F:EA:75:6E:DA:0F:EC:F1:73:73:4C:B6:D7:CC:E2:E7:7D:15:E2:B4
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       50018943168837D4FE1CB89BAE3462C55A547C1D
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa
Signing time:             Fri 07 Mar 2025 03:00:37 +0000
ROA not before:           Fri 07 Mar 2025 02:55:37 +0000
ROA not after:            Fri 06 Mar 2026 03:00:37 +0000
asID:                     269184
IP address blocks:        45.181.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:01:89:43:16:88:37:d4:fe:1c:b8:9b:ae:34:62:c5:5a:54:7c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Mar  7 02:55:37 2025 GMT
            Not After : Mar  6 03:00:37 2026 GMT
        Subject: CN=7FEA756EDA0FECF173734CB6D7CCE2E77D15E2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f6:bf:de:10:dd:29:a5:3a:ad:a7:1d:b9:bd:
                    fa:7d:c6:cb:d9:79:31:64:97:fc:e3:39:6f:61:2a:
                    1b:00:1c:93:76:d8:a9:fe:64:cc:ae:58:6f:42:80:
                    bf:f0:f1:cf:72:63:6c:df:f7:92:6a:38:26:00:7c:
                    6e:88:0a:b3:a7:9c:53:f3:a0:20:1d:e9:62:a6:f8:
                    16:7b:d8:1c:7a:52:9c:33:11:a8:5d:7f:38:38:f5:
                    2c:c8:09:10:a7:30:bb:92:49:cc:78:db:3a:a2:37:
                    f4:4e:26:27:0b:1a:18:ad:f1:c5:25:c9:b4:a1:18:
                    dc:98:0c:39:c4:de:2a:4c:dd:3c:eb:38:4f:e0:5c:
                    dc:72:19:c4:21:9e:b3:47:69:6c:c3:10:0b:84:c4:
                    65:d8:13:33:f5:25:29:e2:29:8a:aa:cf:16:7d:f5:
                    25:05:15:7e:59:7a:11:ac:af:52:c5:7c:5d:73:cf:
                    65:be:73:c5:c2:65:76:b7:5e:ac:95:ad:7e:66:5d:
                    8a:48:f3:ca:3c:ef:0a:b4:b4:01:53:ac:e9:c4:26:
                    97:ce:9f:c1:7a:94:87:5c:53:24:c1:24:bb:1b:c4:
                    ce:11:cf:f7:50:b4:81:eb:17:60:9c:ca:70:98:ee:
                    99:75:06:57:4d:20:61:e3:7d:d5:e7:e7:ac:da:d4:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EA:75:6E:DA:0F:EC:F1:73:73:4C:B6:D7:CC:E2:E7:7D:15:E2:B4
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:4b:e9:98:b7:e0:1c:ee:0f:1a:c7:42:48:02:13:32:a6:46:
         59:92:cd:f4:d0:30:08:3c:3a:59:48:fe:92:59:bd:5c:e3:b4:
         67:e1:79:a3:f0:05:be:dd:da:62:bd:0e:4a:84:cf:30:bc:17:
         06:7f:f8:db:27:b1:69:23:30:04:76:46:2c:29:89:d3:4b:c2:
         fb:17:ce:c9:aa:2d:ea:d7:60:f8:66:d4:cf:55:89:60:e5:11:
         22:4e:39:4d:5f:4d:99:41:eb:93:bf:68:06:bb:18:9a:2d:d7:
         6e:df:d9:21:82:99:7a:03:ee:8f:cb:e5:15:b8:fc:34:6a:92:
         ba:69:7b:d2:86:d5:45:6d:d6:1e:fe:cd:c9:b3:c1:c8:22:59:
         e6:9f:88:91:8e:cc:da:e7:d0:fa:e0:28:5f:dc:69:95:87:a0:
         35:a5:80:31:0f:bf:8c:68:23:22:00:1c:13:24:fb:8d:32:0a:
         bd:b8:04:21:ad:4f:8b:94:ad:25:48:30:a3:53:72:2b:83:0a:
         e3:10:99:b9:05:d8:59:cb:be:9f:04:f6:3b:3f:9e:a5:13:cc:
         8e:11:0a:ff:35:6f:91:ed:dd:64:89:e4:eb:f8:92:9f:56:f1:
         e5:67:8f:fd:1b:c9:c5:d5:2d:b8:71:cc:6a:cd:4a:1e:ca:ee:
         91:54:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:03:07 2025 by rpki-client