Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235322e302f32322d3232203d3e20323638323532.roa
File:                     34352e3233362e3235322e302f32322d3232203d3e20323638323532.roa (raw, json)
Hash identifier:          5E6akeHOz2rutjbhEdqPKy/DJHgS6RFkK3BcVIPPRD4=
Subject key identifier:   7B:99:64:6F:C6:00:33:08:AD:97:87:AD:F3:8D:B5:7D:59:59:B7:31
Certificate issuer:       /CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
Certificate serial:       6A3E6AF09F13C0B563C1662DA5E22E0E2BDEFB87
Authority key identifier: 54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235322e302f32322d3232203d3e20323638323532.roa
Signing time:             Mon 02 Jun 2025 17:55:02 +0000
ROA not before:           Mon 02 Jun 2025 17:50:02 +0000
ROA not after:            Mon 01 Jun 2026 17:55:02 +0000
asID:                     268252
IP address blocks:        45.236.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl
                          rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 11:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3e:6a:f0:9f:13:c0:b5:63:c1:66:2d:a5:e2:2e:0e:2b:de:fb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
        Validity
            Not Before: Jun  2 17:50:02 2025 GMT
            Not After : Jun  1 17:55:02 2026 GMT
        Subject: CN=7B99646FC6003308AD9787ADF38DB57D5959B731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:95:5e:21:42:98:6b:9c:9e:12:2c:7f:4c:
                    d0:ba:ec:e6:12:6a:2c:f0:bb:72:22:a2:87:7b:80:
                    79:d9:38:c4:ed:2a:60:e6:3f:7f:cc:36:ad:df:03:
                    ff:b8:2a:5f:8c:3c:f0:93:c3:a2:8b:80:51:e3:b4:
                    5b:a0:77:87:12:cc:32:8a:6e:0a:c6:00:cf:44:fd:
                    7c:b9:e0:f1:d1:4f:83:cc:78:ff:9d:35:65:8b:b0:
                    e6:ab:dc:97:10:97:bf:da:e7:26:8e:df:39:fa:71:
                    dd:d7:98:1e:fb:68:ae:c1:cf:69:c0:1f:de:69:84:
                    42:2a:b1:dd:c9:04:32:a7:4b:28:e1:ee:39:58:31:
                    77:cd:8f:f3:0b:77:79:ef:b3:3d:56:e9:ad:94:4f:
                    ed:75:dc:c2:d6:9e:1e:5d:84:05:7a:12:21:12:6f:
                    c6:f2:b5:69:de:f2:24:52:ec:74:ac:61:e3:ad:94:
                    fb:d4:71:07:5b:24:0b:8f:c1:b0:b3:88:7c:ac:dd:
                    c4:28:28:cd:e6:70:21:a2:6a:54:90:28:83:70:15:
                    c4:37:6e:2d:a5:28:18:c6:46:7d:05:70:c7:c2:0f:
                    fc:e5:77:f5:21:ec:cc:70:e9:8e:eb:04:52:47:f7:
                    cc:f5:6c:09:31:b4:69:41:f5:93:e7:eb:41:04:be:
                    a3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:99:64:6F:C6:00:33:08:AD:97:87:AD:F3:8D:B5:7D:59:59:B7:31
            X509v3 Authority Key Identifier:
                keyid:54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235322e302f32322d3232203d3e20323638323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:11:31:35:b2:3d:85:a3:01:37:16:ce:62:8e:2a:93:96:b3:
         d1:1f:50:22:ad:43:61:2d:37:9d:f1:77:9a:ea:55:f3:dc:58:
         e5:f2:3d:a2:8c:c0:39:fb:c9:3d:e2:91:00:8e:53:28:61:f6:
         20:64:ef:d9:ea:2e:16:c9:3e:f6:fc:d9:76:d0:e1:f7:38:a0:
         41:26:ee:48:41:3c:b5:2f:eb:81:2d:dd:dd:54:1e:1b:85:d4:
         30:dc:de:f1:77:73:bc:5f:1b:67:27:c0:93:2b:6a:d8:a2:68:
         4d:7e:68:ba:4d:ba:90:86:ad:71:b7:9e:1d:91:ec:fb:5f:de:
         ca:9c:dc:7e:6e:b8:f4:0f:0d:cb:6b:63:04:46:f5:18:c2:4c:
         97:13:b4:17:01:8e:3a:62:73:b2:e6:57:16:12:f2:f1:5e:0d:
         78:71:9b:b7:be:11:a7:a8:97:d7:32:a2:2d:e5:c3:1f:20:8e:
         f3:12:9f:a4:da:a2:55:c6:58:61:b6:0f:fa:21:94:bd:f6:58:
         05:1b:56:be:ee:42:a1:25:c1:a4:8d:eb:21:79:26:61:57:51:
         9a:ab:74:6f:10:b0:f5:a5:6d:fe:ba:42:d4:37:e3:0f:34:7b:
         6c:e4:a0:3d:1c:d6:5c:1b:07:3f:25:9f:48:99:4f:61:1a:4f:
         5e:97:7a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:38:06 2025 by rpki-client