Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31322e302f32322d3232203d3e20323638303335.roa
File:                     34352e3136382e31322e302f32322d3232203d3e20323638303335.roa (raw, json)
Hash identifier:          YLb6WJApVVz7oiNlwn4ROkT92U8V9oavMDJxialBGDw=
Subject key identifier:   05:08:EB:C4:08:4B:8B:FD:23:4D:4E:30:1D:BB:F1:80:5B:E8:1C:98
Certificate issuer:       /CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Certificate serial:       38A360BBF4BFCAE4DC915622A2F06455B6356C50
Authority key identifier: 50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31322e302f32322d3232203d3e20323638303335.roa
Signing time:             Thu 06 Mar 2025 09:45:12 +0000
ROA not before:           Thu 06 Mar 2025 09:40:12 +0000
ROA not after:            Thu 05 Mar 2026 09:45:12 +0000
asID:                     268035
IP address blocks:        45.168.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a3:60:bb:f4:bf:ca:e4:dc:91:56:22:a2:f0:64:55:b6:35:6c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50489A084AA380458A19AC12E8D87EDE0CC41542
        Validity
            Not Before: Mar  6 09:40:12 2025 GMT
            Not After : Mar  5 09:45:12 2026 GMT
        Subject: CN=0508EBC4084B8BFD234D4E301DBBF1805BE81C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a0:e4:b5:f5:cd:69:e7:d8:44:35:7a:5b:63:
                    c2:e5:76:ef:5e:b0:a3:67:87:6c:85:c7:70:82:04:
                    f9:22:9f:bd:cc:8a:43:92:06:71:15:5e:49:4e:b1:
                    d0:57:74:b5:c8:3e:5a:22:bb:c2:e0:ba:a7:38:2c:
                    36:a4:89:56:59:ad:e6:51:bd:cf:a1:54:a4:2a:3b:
                    75:27:8f:dd:39:e9:a0:a1:c7:e6:a5:e5:7e:94:70:
                    9a:c8:55:96:56:98:c3:0b:c7:af:3e:4e:47:29:cd:
                    e5:e6:80:4b:e6:3f:0f:38:f8:76:76:aa:b3:f7:b1:
                    93:55:74:ad:9d:5d:77:51:74:1e:9a:94:0f:1d:2c:
                    da:dc:06:4a:5a:bb:95:53:29:06:ec:1e:76:17:59:
                    a9:0f:3c:9a:bd:06:a5:12:ce:1a:d4:2b:36:78:04:
                    74:06:71:7e:9e:65:e2:41:27:af:3c:aa:94:dd:ae:
                    23:46:6a:18:c5:0a:63:6a:76:83:65:ef:87:f5:46:
                    89:e3:ec:8b:d4:6e:b2:e5:45:35:c1:fb:c5:a5:c4:
                    4c:46:cf:0b:e1:bb:0b:7a:98:33:cd:ba:68:68:0f:
                    58:a7:d6:e5:f8:e7:42:e5:df:32:c1:4d:37:c1:fd:
                    7c:23:5f:bb:c2:10:d0:38:5d:86:ea:45:7d:c4:36:
                    42:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:08:EB:C4:08:4B:8B:FD:23:4D:4E:30:1D:BB:F1:80:5B:E8:1C:98
            X509v3 Authority Key Identifier:
                keyid:50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31322e302f32322d3232203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:db:eb:63:74:2a:68:6b:35:90:14:3d:8f:50:44:05:5d:47:
         dc:aa:6f:dc:3d:6b:58:42:b7:1b:04:0e:65:37:2d:6c:48:5f:
         4a:d8:1b:5c:9a:d5:e2:b7:06:a8:0a:73:07:30:5a:9e:0e:aa:
         7b:d5:ee:cd:86:a0:a7:74:fc:4d:16:e0:aa:9f:8d:91:79:2e:
         9b:d6:cf:3c:f9:dd:b7:a5:2f:8b:2e:9e:9d:82:95:22:19:d1:
         b4:3a:2d:74:78:26:11:57:a1:76:d3:0c:74:fd:08:c6:d3:b9:
         ea:0f:ce:fe:ef:1a:fb:34:bd:69:b6:d4:3f:2c:88:79:a5:ae:
         a9:5c:84:74:09:bc:61:34:d0:2a:3f:aa:bb:60:cf:8c:8a:7b:
         7d:8d:e5:38:85:40:54:21:80:ba:94:18:b6:07:54:ba:ae:6a:
         b3:03:6e:41:1c:59:84:d5:b8:6e:11:3a:11:4c:cb:ce:df:7b:
         48:22:44:e1:04:d2:e7:cf:43:0b:4f:f7:db:80:1d:ef:76:93:
         c7:86:b2:37:b7:20:79:e8:d7:50:1b:0e:57:1f:6f:0f:86:44:
         bb:56:db:7d:b6:e8:46:be:24:35:86:a8:68:bc:54:b9:16:24:
         7e:62:5d:df:46:a1:11:00:98:a1:08:2e:bf:eb:9d:44:f1:31:
         5e:62:50:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:43:22 2025 by rpki-client