Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139362e302f32322d3232203d3e20323632363136.roa
File:                     34352e3138352e3139362e302f32322d3232203d3e20323632363136.roa (raw, json)
Hash identifier:          onYQVN8yYPGfzmjeHgxAUYGsnxzdG40oozz2VxBS+JI=
Subject key identifier:   21:E1:88:ED:ED:00:6F:53:4A:BB:78:E9:D4:20:00:09:4A:E5:2E:0F
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       1E1445BE42D7316101F37EE645ABBC0E019858EF
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139362e302f32322d3232203d3e20323632363136.roa
Signing time:             Thu 06 Mar 2025 05:00:18 +0000
ROA not before:           Thu 06 Mar 2025 04:55:18 +0000
ROA not after:            Thu 05 Mar 2026 05:00:18 +0000
asID:                     262616
IP address blocks:        45.185.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 10:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:14:45:be:42:d7:31:61:01:f3:7e:e6:45:ab:bc:0e:01:98:58:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Mar  6 04:55:18 2025 GMT
            Not After : Mar  5 05:00:18 2026 GMT
        Subject: CN=21E188EDED006F534ABB78E9D42000094AE52E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:9a:52:d3:cb:22:71:1e:cb:e4:b9:bf:93:
                    72:5e:5c:86:42:88:f3:8d:1d:d2:e8:75:54:29:41:
                    6c:27:22:5e:68:d3:74:4e:3d:83:d0:b8:ba:1e:79:
                    d9:b9:44:8e:22:62:44:e8:7c:cd:01:b5:ff:4c:1e:
                    3e:24:97:0e:73:29:49:25:53:5a:05:01:12:43:48:
                    b6:6e:7b:96:e0:bd:7f:86:95:33:0e:2f:dc:e4:fb:
                    7c:fc:18:77:47:6c:d1:f9:d8:59:c7:d7:af:70:77:
                    97:7c:b3:98:3d:8a:88:e6:91:25:37:78:ae:58:1c:
                    c4:69:91:08:9c:20:5f:c6:ac:50:f8:87:68:4c:4e:
                    c7:26:5f:aa:48:53:4d:58:f0:98:db:3d:21:ec:9e:
                    6a:93:3e:23:5e:ad:a3:d7:9a:c2:fc:86:41:a9:a2:
                    b4:1f:5f:39:3e:1a:38:50:c6:d8:b3:7a:6f:a0:9e:
                    62:96:99:3c:1d:dd:78:31:0f:49:3b:89:93:62:b3:
                    24:0d:ea:fa:e7:e0:9b:1c:4e:6a:20:f4:5d:ea:fe:
                    6b:31:c2:11:65:7b:c3:26:2d:fb:39:09:5a:90:2c:
                    a0:2b:47:ab:1d:51:5c:74:83:80:13:ae:f1:81:df:
                    e5:7c:30:2c:bf:a6:d2:1e:93:27:d3:18:48:e3:d9:
                    d3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E1:88:ED:ED:00:6F:53:4A:BB:78:E9:D4:20:00:09:4A:E5:2E:0F
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139362e302f32322d3232203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:61:63:9e:e3:84:12:51:2d:bf:a2:60:7b:bb:d1:10:df:3a:
         ec:23:92:5e:f6:b5:b8:ec:73:c0:86:ce:0c:5d:b5:4d:6c:2f:
         a1:44:d3:3c:0a:08:af:98:a7:6a:64:41:3f:a6:ef:98:84:8d:
         19:17:99:4f:8d:d5:8f:a3:50:1c:21:38:04:27:00:f0:68:7f:
         c2:ab:c2:7c:e1:1b:95:3c:77:e2:a4:68:d8:3a:ce:62:88:f8:
         87:0e:50:61:47:67:41:b3:be:73:ca:20:53:e7:d0:0e:05:d7:
         ec:ab:c5:ab:73:92:34:34:85:90:3c:c4:54:ca:c2:49:04:94:
         2f:e0:55:ba:b4:4b:2c:07:d5:7d:ed:54:76:9d:fb:c2:e6:a3:
         89:2a:d7:44:d6:6a:54:c0:d7:4f:25:45:83:4f:c3:bb:fb:1c:
         54:8f:e3:f6:b0:d8:2e:62:e3:57:b5:f4:d3:eb:69:ce:66:9b:
         80:c3:7b:db:51:f2:c2:8f:ab:8a:00:67:67:f4:43:ad:fc:00:
         15:a3:29:32:7b:51:b5:f9:24:43:7b:ee:dc:c9:99:5b:ca:6d:
         65:38:f9:00:58:c1:79:09:f6:91:d1:f5:06:86:de:63:3a:b8:
         63:1f:03:c4:41:cd:08:82:84:75:3b:5d:19:5a:c6:8a:a7:2e:
         96:84:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:42:58 2025 by rpki-client