Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/34352e3136372e34392e302f32342d3234203d3e20323637393935.roa
File:                     34352e3136372e34392e302f32342d3234203d3e20323637393935.roa (raw, json)
Hash identifier:          1zg9/SQqyhNBnUwF6WzjCyPAerUH5IrSFQy+BKpmStM=
Subject key identifier:   B9:52:90:86:33:4B:3C:F0:5C:0D:D1:90:82:38:20:1F:9A:03:36:BC
Certificate issuer:       /CN=697580E8392CC653843C7008AA3115A37A09736A
Certificate serial:       4BB2D0155E046ADCB8E3904551706A28D2BAC1A9
Authority key identifier: 69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/34352e3136372e34392e302f32342d3234203d3e20323637393935.roa
Signing time:             Thu 06 Mar 2025 21:19:29 +0000
ROA not before:           Thu 06 Mar 2025 21:14:29 +0000
ROA not after:            Thu 05 Mar 2026 21:19:29 +0000
asID:                     267995
IP address blocks:        45.167.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl
                          rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b2:d0:15:5e:04:6a:dc:b8:e3:90:45:51:70:6a:28:d2:ba:c1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697580E8392CC653843C7008AA3115A37A09736A
        Validity
            Not Before: Mar  6 21:14:29 2025 GMT
            Not After : Mar  5 21:19:29 2026 GMT
        Subject: CN=B9529086334B3CF05C0DD1908238201F9A0336BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f4:21:01:6e:cf:31:52:5c:38:5f:9c:db:bc:
                    81:f2:08:ec:26:4b:88:2f:47:3e:1a:31:12:92:31:
                    e6:3c:4a:7f:f4:b7:19:38:de:95:37:d9:da:95:fa:
                    07:3f:de:e7:13:3c:4f:bc:d0:53:61:c5:1b:68:d1:
                    c1:55:57:41:06:4a:ab:31:a7:5b:00:f4:43:3e:7e:
                    b9:1f:62:e5:c9:55:5f:50:fd:25:ef:de:fd:d8:0a:
                    c2:a1:b4:72:4a:d5:47:65:26:67:7e:84:1d:1b:b1:
                    09:7a:b2:33:d8:94:7d:68:3b:a6:65:51:d0:7e:81:
                    ea:58:d2:d6:1b:91:0f:1a:5d:0b:00:ba:17:aa:31:
                    69:5a:f5:1c:e4:bc:77:f5:41:ae:77:d2:70:b3:e6:
                    1e:78:63:14:12:46:29:75:51:27:44:c9:ec:5d:b7:
                    fb:3d:bf:49:95:f7:8f:78:58:06:19:9b:31:b2:8e:
                    89:48:91:0c:1c:0b:bc:cd:a1:68:a1:0c:98:e1:eb:
                    7c:b0:89:61:2b:d1:6d:2a:e4:d2:dd:25:4e:51:5a:
                    8a:a2:6d:ef:ee:bd:52:c4:cf:52:85:04:66:cf:65:
                    99:76:84:07:c5:07:a5:40:95:13:93:ad:e8:35:e6:
                    b8:f9:b7:e3:eb:82:ce:8b:b3:0d:15:3a:6d:62:8b:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:52:90:86:33:4B:3C:F0:5C:0D:D1:90:82:38:20:1F:9A:03:36:BC
            X509v3 Authority Key Identifier:
                keyid:69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/34352e3136372e34392e302f32342d3234203d3e20323637393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:03:23:8f:47:7f:7c:7b:26:76:94:8a:cf:d0:fd:3e:91:
         94:a6:b5:ab:2b:a7:e9:02:18:8a:b3:e0:6b:9e:9e:a2:9e:89:
         5b:5f:53:33:e3:6c:54:b6:e0:a5:99:b8:e3:5f:89:15:d1:a8:
         5a:75:3c:76:b1:39:38:a6:9b:77:53:bc:e2:d4:af:fb:4e:b9:
         18:50:c3:1e:13:4f:8e:e4:0b:c3:33:f5:0c:e1:43:69:ad:43:
         41:b8:18:b2:d4:dd:61:71:b5:43:d0:9f:e7:f4:d7:9d:97:da:
         f1:8d:79:15:cd:74:ea:d5:ef:f0:e3:18:1b:1b:47:df:de:b2:
         16:02:81:c6:21:56:13:5b:1d:96:de:28:05:3e:8c:c1:bd:36:
         c0:41:43:d4:76:ba:dc:dd:9d:d9:07:45:21:93:f6:2b:9d:f5:
         26:e6:b0:47:36:15:5f:e3:05:a0:9f:6a:f4:c1:0a:09:88:f8:
         70:84:38:6a:a9:d0:2b:f2:89:24:b8:f1:67:3e:78:94:68:1e:
         2b:90:b3:a7:75:e9:98:40:8f:ba:45:a8:d8:df:18:3b:df:ad:
         d2:8e:62:be:4d:89:22:0e:8e:6c:12:5a:68:69:7f:71:00:6f:
         7d:7b:08:32:1a:8b:39:3b:56:dd:69:63:2c:ab:0e:b5:75:6a:
         6f:0f:1d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:26:42 2025 by rpki-client