Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33362e302f32332d3233203d3e20323639353937.roa
File:                     34352e3138312e33362e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          z98fIBPxV/gVBBb2Ac/6sItrz6HtoHs5SRprIY0m+mA=
Subject key identifier:   AD:C5:9B:6D:D9:85:69:EF:A6:70:71:FF:74:5E:91:06:1B:6E:5A:F5
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       04AC5553A3F117F6DB77C9870B5AF74973E2D9B6
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33362e302f32332d3233203d3e20323639353937.roa
Signing time:             Thu 06 Mar 2025 14:43:11 +0000
ROA not before:           Thu 06 Mar 2025 14:38:11 +0000
ROA not after:            Thu 05 Mar 2026 14:43:11 +0000
asID:                     269597
IP address blocks:        45.181.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 02:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ac:55:53:a3:f1:17:f6:db:77:c9:87:0b:5a:f7:49:73:e2:d9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Mar  6 14:38:11 2025 GMT
            Not After : Mar  5 14:43:11 2026 GMT
        Subject: CN=ADC59B6DD98569EFA67071FF745E91061B6E5AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:52:52:63:69:77:5b:f5:43:d9:02:0f:7f:
                    08:9b:9e:16:43:1e:cc:ab:e4:30:10:46:7a:f6:81:
                    e1:eb:da:1a:ca:a0:9c:5a:4d:eb:7d:1b:0b:56:3e:
                    37:6b:79:18:a0:f6:0b:50:aa:f7:98:e2:48:d4:f2:
                    36:e3:64:25:b1:2a:39:0c:26:e6:7c:ae:63:17:4d:
                    57:65:ce:91:bc:02:f7:a7:79:03:bd:92:f4:d7:39:
                    72:e8:c3:7d:11:5f:5e:98:61:2c:ee:0f:0d:d1:f8:
                    48:05:7d:47:44:5f:b8:09:ae:e4:ef:72:17:fc:3a:
                    88:ff:db:1f:51:b6:7a:bf:dd:93:fa:e3:76:f6:0d:
                    0c:d3:7e:a4:79:0a:00:c9:67:d9:b7:66:6d:58:e5:
                    e2:0e:0e:8b:9e:03:9d:ea:43:11:b5:d8:45:bc:53:
                    e1:fc:ee:e5:c7:68:69:24:fe:26:7c:ec:da:83:df:
                    da:eb:29:d5:ca:17:f0:1e:b7:4e:69:42:f7:a0:f3:
                    cb:a5:cc:e9:3b:fd:e7:ac:9a:b0:77:ff:e2:6f:4b:
                    cf:6d:c3:ed:d7:99:3f:39:8b:c6:22:34:b1:76:b0:
                    41:53:2e:c2:14:fc:9b:34:89:ea:55:cc:ce:bd:c8:
                    0e:83:d0:40:5b:63:b6:af:fd:3b:a9:4d:36:e6:35:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C5:9B:6D:D9:85:69:EF:A6:70:71:FF:74:5E:91:06:1B:6E:5A:F5
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138312e33362e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:1d:ea:f0:06:1f:d6:e5:59:da:7c:1a:f4:a5:70:3c:e5:25:
         3f:53:7f:38:15:31:88:f6:d9:6c:9a:6a:9f:1a:19:20:a9:83:
         e5:ee:30:e4:b2:f5:b7:27:fb:ae:fa:fe:af:d9:38:cd:eb:58:
         28:6f:31:cc:9a:db:ec:d8:e7:f8:4d:bf:28:0f:a5:a3:04:4d:
         3d:5e:f3:fc:4e:cb:6b:52:a2:8f:0b:a9:0c:ee:b2:d9:37:01:
         ac:4e:81:9b:d3:d1:33:c2:bd:41:45:a5:27:63:ad:b8:bc:f1:
         ff:bb:b7:86:30:85:3d:fd:2d:81:bc:93:8c:0e:3e:a5:f2:4b:
         5e:a5:10:80:f6:b2:97:23:10:cb:1c:01:d2:8c:31:7a:4a:dd:
         f8:92:5f:20:0e:e7:c4:8f:07:7a:bb:e0:ae:5d:d5:58:de:98:
         82:ca:9f:49:b4:f7:5a:30:cd:6e:7b:e9:f0:24:c3:da:ff:f6:
         34:b3:0d:c3:2f:c6:20:d0:f7:b0:67:42:ff:45:38:ef:f5:e9:
         50:ca:21:7e:29:a8:56:d0:7b:52:b2:5d:52:52:3b:f7:3b:f7:
         4d:d2:aa:c9:92:26:51:e2:9a:f4:59:9e:e9:e4:8e:cf:08:1d:
         c1:7f:8a:c0:24:9c:b7:3f:4d:38:19:72:d9:27:8c:e6:bc:d4:
         54:d5:51:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:36 2025 by rpki-client