Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa
File:                     34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa (raw, json)
Hash identifier:          I+Ww78nrqDFQJeSUCTyBI5VULHKBcS0W9+lh0BWLpDE=
Subject key identifier:   3D:CB:55:04:20:C0:C5:87:49:15:43:AA:4B:56:6A:2C:50:AD:F3:10
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       6221017DEA9E7CAA4158E66366BFA315665A2E01
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa
Signing time:             Wed 05 Mar 2025 21:52:43 +0000
ROA not before:           Wed 05 Mar 2025 21:47:43 +0000
ROA not after:            Wed 04 Mar 2026 21:52:43 +0000
asID:                     268533
IP address blocks:        45.162.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 05:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:21:01:7d:ea:9e:7c:aa:41:58:e6:63:66:bf:a3:15:66:5a:2e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Mar  5 21:47:43 2025 GMT
            Not After : Mar  4 21:52:43 2026 GMT
        Subject: CN=3DCB550420C0C587491543AA4B566A2C50ADF310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:b9:42:91:21:5a:a9:58:28:93:47:52:6e:
                    34:d7:16:d5:b5:22:32:b7:aa:fb:c9:59:93:35:b7:
                    b5:10:ae:e6:36:a7:86:bc:e4:31:9c:06:3b:e4:03:
                    25:bf:ce:e5:f8:bd:16:a3:ee:71:4a:c4:50:a1:8b:
                    14:dc:81:cd:79:a2:9d:82:9a:f9:bd:a6:f9:25:54:
                    59:54:43:a4:8f:f8:c3:be:14:bc:fc:8d:ca:d8:32:
                    9a:30:3d:ae:74:af:bd:5f:2d:ba:0f:ea:41:dc:35:
                    90:97:32:51:61:93:9f:ae:22:bb:b5:71:e5:ea:e7:
                    ac:25:17:9b:d2:bb:55:e7:41:79:a5:f7:d1:38:4b:
                    9e:a2:45:40:dd:dd:6b:fd:57:3d:64:ca:43:df:cb:
                    fc:2e:d6:22:3c:78:8f:84:ab:dd:88:25:cc:77:2d:
                    9a:67:78:9d:87:26:17:7e:b7:69:a4:0e:60:47:97:
                    59:c4:9b:71:0f:93:55:6c:ff:45:93:da:aa:4b:42:
                    8f:49:1b:a9:a6:65:09:92:fa:e1:f0:6c:72:60:88:
                    9e:7b:7f:37:ea:c5:53:bd:e9:a8:fc:32:d0:48:e7:
                    54:ad:02:33:42:08:85:2f:71:ad:0a:b0:47:82:a6:
                    b9:cb:a1:84:bd:68:53:b9:91:28:a1:ce:fc:c3:9f:
                    4c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CB:55:04:20:C0:C5:87:49:15:43:AA:4B:56:6A:2C:50:AD:F3:10
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:aa:85:83:18:24:81:2f:37:dc:5b:eb:63:07:1a:39:1c:ae:
         b3:99:53:8d:e0:5d:a1:e2:58:29:84:05:5a:8d:07:a3:3d:13:
         96:1d:86:69:91:a2:42:ff:52:27:32:a8:36:81:5a:75:2e:3f:
         36:9a:bd:02:cf:da:30:a6:1a:d9:5e:07:12:fb:6f:86:ed:ca:
         6d:00:83:c4:c4:07:69:3f:c7:07:e8:8b:9e:82:c2:b6:64:be:
         f1:d2:af:d2:95:8e:c6:bd:6f:87:a8:20:6a:1f:64:7b:b8:00:
         ef:1d:5d:f5:1c:6e:d6:7d:62:82:4d:4e:05:15:8a:a4:2c:b9:
         2c:d5:55:b1:f0:21:75:30:6c:ff:ec:2c:56:43:5a:a6:36:a5:
         76:f1:3c:d5:a0:20:ba:e6:f9:20:f9:5d:6f:3c:19:cc:72:57:
         7a:00:3d:b9:e9:67:5d:56:43:83:bc:f1:24:cf:1d:40:a8:e9:
         78:ac:1f:3f:dd:a6:81:68:51:e6:68:4b:74:46:ec:8d:cb:fe:
         f6:9f:ed:75:07:dd:1f:a4:84:79:43:b1:c7:87:fd:b9:c0:d0:
         2a:e3:05:73:7f:75:b6:e7:ec:f1:29:23:87:56:c8:24:ff:ce:
         31:b9:38:7b:bb:ed:73:3e:de:cb:70:37:4c:38:e5:e0:c4:3d:
         54:7b:1c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:48:58 2025 by rpki-client