Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137362e302f32322d3232203d3e20323639353937.roa
File:                     34352e3138392e3137362e302f32322d3232203d3e20323639353937.roa (raw, json)
Hash identifier:          UsJ1otOzgMiNAlJFwu7CENGnb0/nAxUCbwr5AK7u4ns=
Subject key identifier:   00:05:48:90:50:5A:82:8E:58:0C:9D:04:28:2C:5B:C7:77:08:FB:3B
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       8A5C33DF1D597AFFAF438C71B7D14A217420BA
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137362e302f32322d3232203d3e20323639353937.roa
Signing time:             Thu 06 Mar 2025 14:43:11 +0000
ROA not before:           Thu 06 Mar 2025 14:38:11 +0000
ROA not after:            Thu 05 Mar 2026 14:43:11 +0000
asID:                     269597
IP address blocks:        45.189.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8a:5c:33:df:1d:59:7a:ff:af:43:8c:71:b7:d1:4a:21:74:20:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Mar  6 14:38:11 2025 GMT
            Not After : Mar  5 14:43:11 2026 GMT
        Subject: CN=00054890505A828E580C9D04282C5BC77708FB3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:6d:3c:bf:01:2b:01:7c:d4:49:b5:34:c2:
                    b9:cc:6a:16:fd:ae:61:90:fe:36:b9:1c:3e:0e:49:
                    31:35:7b:36:b4:be:50:9f:5b:6c:1f:2b:eb:20:25:
                    95:dd:62:d0:91:65:92:41:b4:3f:9f:cd:48:8d:a1:
                    95:79:b5:de:21:b0:b0:af:45:27:c3:d7:97:0b:6a:
                    7f:05:99:d8:62:f0:63:85:6d:01:76:44:9c:79:34:
                    2c:97:c5:af:6f:45:cb:64:73:76:24:f0:ce:f4:1a:
                    54:a8:86:b2:8c:dd:fd:f1:33:8b:b6:8a:df:94:2b:
                    c0:64:63:bf:4e:6e:54:0e:28:6a:d9:d6:f8:5b:7a:
                    e3:72:26:1e:fe:b4:0c:fd:70:c7:95:d6:f2:4f:f4:
                    44:eb:70:76:53:ec:3c:ff:6f:06:07:49:3a:83:f2:
                    42:92:34:c5:48:ea:67:67:34:fa:49:a4:8c:d6:e5:
                    fc:74:a9:49:06:e0:92:46:ed:a9:4b:2c:ca:0d:99:
                    c7:41:b4:40:bc:da:b3:54:56:1d:16:d6:bf:ab:67:
                    b4:6b:3d:5d:6e:93:24:f4:6b:d7:85:74:89:6b:fa:
                    68:15:ba:f7:a4:46:15:1c:38:43:4a:4a:59:ed:a6:
                    b0:89:ec:54:2c:92:ce:93:8f:78:f5:f2:b7:c0:22:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:05:48:90:50:5A:82:8E:58:0C:9D:04:28:2C:5B:C7:77:08:FB:3B
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137362e302f32322d3232203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:0d:e0:26:18:b0:11:0e:74:98:da:a0:80:88:30:93:79:bd:
         9a:ba:6b:3e:96:25:25:e6:0e:81:dd:01:70:f2:e2:6f:1a:8f:
         80:10:66:8a:a0:2a:02:d0:da:31:77:67:f8:ea:5a:0c:b8:84:
         c0:d1:19:42:9a:68:5a:af:1e:66:ea:01:bc:62:5f:68:1a:3e:
         6c:a3:39:9f:f6:d5:02:e9:91:be:9b:c5:5a:26:83:9f:46:ef:
         c8:b3:2c:0a:d5:0b:50:9f:d4:94:d4:1f:b2:d9:33:09:e5:03:
         8f:b4:7d:7b:8c:08:88:ba:d1:34:46:27:53:ba:1b:09:98:8b:
         32:0e:20:da:2d:55:bb:b1:a9:bb:9f:08:4c:b1:cb:2d:9c:8d:
         0f:97:eb:d0:b7:12:9a:d5:e7:c1:5f:7d:11:49:e7:dd:46:ba:
         1a:44:26:cf:d2:0e:0d:81:c8:d3:56:1f:1a:97:3e:fa:4a:3a:
         12:6e:52:11:d2:a6:d2:92:ca:03:ea:81:60:7e:49:13:06:73:
         d8:22:eb:6a:6c:ac:6e:2b:f0:50:36:57:eb:9a:4f:ca:87:0d:
         3e:7d:7c:6b:c7:a3:1d:5c:fb:9f:ec:fb:4b:27:7a:b1:3e:75:
         9d:df:21:f0:ad:53:1d:a8:2c:d4:a0:e4:0b:73:73:b7:70:02:
         8f:c0:1d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:21:38 2025 by rpki-client