Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33362e302f32322d3234203d3e20323639353937.roa
File:                     34352e3138312e33362e302f32322d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          l37C39w6ZiUkm3oCgity8o1e20IHpQuVPGqeuzo86W4=
Subject key identifier:   63:F8:4D:BD:DB:4E:DB:5E:56:60:A7:FD:E9:DF:8E:D5:08:04:44:70
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       5E461DD6B21B286B0690330B500745F4BF89D147
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33362e302f32322d3234203d3e20323639353937.roa
Signing time:             Thu 06 Mar 2025 14:43:12 +0000
ROA not before:           Thu 06 Mar 2025 14:38:12 +0000
ROA not after:            Thu 05 Mar 2026 14:43:12 +0000
asID:                     269597
IP address blocks:        45.181.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:46:1d:d6:b2:1b:28:6b:06:90:33:0b:50:07:45:f4:bf:89:d1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Mar  6 14:38:12 2025 GMT
            Not After : Mar  5 14:43:12 2026 GMT
        Subject: CN=63F84DBDDB4EDB5E5660A7FDE9DF8ED508044470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:82:e7:7f:28:64:e7:4c:70:a7:55:af:03:
                    61:74:4e:c2:fb:58:57:68:e9:59:13:19:62:86:cf:
                    bb:52:70:96:ab:1c:11:0b:95:20:6a:3b:03:40:2c:
                    14:71:0e:d2:dd:0b:b5:6d:dd:35:ba:12:6b:2d:03:
                    7a:03:55:38:41:01:be:fa:bf:be:60:35:83:9b:1b:
                    5f:e2:87:7a:a2:b6:4d:2e:d0:0b:7f:19:76:8e:50:
                    40:e8:63:ad:74:d9:be:9e:ef:c4:0c:0b:a2:8a:74:
                    57:dd:3a:dd:08:29:72:b6:c5:1e:c6:41:67:01:89:
                    3a:fd:bf:04:df:44:09:0c:6d:e8:0e:9c:5b:66:df:
                    ce:3e:26:dd:bd:8f:f6:1e:bd:dd:bf:f4:63:ab:14:
                    a4:2a:df:a9:4f:e1:02:42:a7:3f:a6:98:1b:b8:68:
                    47:d4:5c:92:07:a1:37:fc:13:64:39:67:8c:80:07:
                    90:54:ab:0e:31:b4:05:19:a2:ee:d9:f5:a3:96:9f:
                    65:41:48:b1:7e:04:33:d8:01:23:78:b2:24:14:d2:
                    c7:c2:19:47:ae:20:2a:4c:10:61:42:4a:d2:e6:57:
                    47:fd:9e:77:60:61:2d:25:66:74:86:bf:04:94:cc:
                    95:6f:39:4e:2e:82:ad:d2:7e:60:ab:73:7a:21:a2:
                    82:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:4D:BD:DB:4E:DB:5E:56:60:A7:FD:E9:DF:8E:D5:08:04:44:70
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33362e302f32322d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         eb:bd:a3:fc:64:3a:7a:f7:42:3e:be:29:1e:7a:e7:01:2f:9d:
         6a:a7:53:ec:59:a2:b4:75:44:a7:7e:78:a8:53:4a:ba:29:59:
         06:a0:39:7d:f1:e7:e6:19:5b:1a:39:99:17:bb:4f:13:a6:d9:
         a9:32:b4:f6:2e:e9:7f:61:fa:6d:9a:a9:5f:3e:ba:07:f1:16:
         8f:ee:24:95:c7:34:ab:e8:2c:5a:ab:bf:9a:db:85:fa:37:e1:
         24:0d:df:e4:2e:ab:7b:7e:ff:63:32:2b:8c:e2:2a:1e:88:7a:
         f1:b2:cc:0f:60:cb:8d:5c:65:15:eb:b9:d2:1b:48:47:98:31:
         15:24:67:50:49:8f:5e:47:6e:29:04:60:e0:1c:c4:94:c7:44:
         4f:fe:42:9d:9d:dd:55:c0:ab:e3:bc:1a:44:38:59:44:6c:8a:
         4c:ee:86:e8:4b:05:2b:4c:ed:7c:57:9e:9d:a0:ce:16:2a:e0:
         1b:68:16:7b:ca:77:21:19:e9:18:ac:f6:00:f4:1a:9f:2c:25:
         af:0e:49:35:d3:95:de:96:02:3a:db:c4:dd:dc:fe:f0:30:f5:
         8f:78:69:c4:c0:16:aa:f2:b0:54:35:e8:26:25:15:06:ed:d4:
         80:cb:6d:0b:fe:29:b3:43:9a:71:ea:3b:76:d9:e6:ed:f8:3b:
         9f:06:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:21:28 2025 by rpki-client