Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139382e302f32332d3233203d3e20323632363136.roa
File:                     34352e3138352e3139382e302f32332d3233203d3e20323632363136.roa (raw, json)
Hash identifier:          gOncvU34LPjjYpuTnwg94jm+ljJBxX9e5WXq2OX0hLE=
Subject key identifier:   0B:63:AE:A5:D4:B3:D5:CB:9C:CD:AB:D3:3E:EB:1C:97:35:CE:63:EC
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       6457CCF06A7BCC87DFE3236032EEE92B0666BD5E
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139382e302f32332d3233203d3e20323632363136.roa
Signing time:             Thu 06 Mar 2025 05:00:18 +0000
ROA not before:           Thu 06 Mar 2025 04:55:18 +0000
ROA not after:            Thu 05 Mar 2026 05:00:18 +0000
asID:                     262616
IP address blocks:        45.185.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 10:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:57:cc:f0:6a:7b:cc:87:df:e3:23:60:32:ee:e9:2b:06:66:bd:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Mar  6 04:55:18 2025 GMT
            Not After : Mar  5 05:00:18 2026 GMT
        Subject: CN=0B63AEA5D4B3D5CB9CCDABD33EEB1C9735CE63EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:a0:a8:49:fc:a3:39:68:bb:2c:e1:3d:05:
                    9f:ed:ec:05:89:1f:a8:48:37:35:c4:bd:1e:71:8f:
                    be:76:ac:6b:2f:dd:aa:f8:3f:d8:18:84:55:39:c5:
                    96:99:7b:5d:40:56:fb:fa:1b:b4:36:58:79:ea:d8:
                    6b:d3:b9:a5:a0:8a:bf:a3:3a:39:0e:94:8b:58:f6:
                    f3:93:77:5d:ae:4a:ec:35:3f:69:4a:8b:4d:78:52:
                    51:29:91:1d:9b:73:6e:eb:4f:7f:9a:bf:eb:16:21:
                    63:05:0d:4a:e3:65:3b:52:bc:3e:c3:7b:57:65:86:
                    79:64:f9:72:e8:51:51:20:ca:00:b4:9a:06:90:56:
                    81:8e:dd:f7:af:73:28:92:b5:e5:7f:0e:2e:44:a4:
                    e1:b8:02:40:ff:69:90:eb:ee:14:78:b3:4c:f5:d2:
                    e0:78:92:f6:e1:67:48:fa:3d:ae:47:68:2a:9d:49:
                    cd:16:e1:8d:66:46:5b:bf:f4:72:43:15:4c:ea:b4:
                    66:52:05:06:ae:f8:02:60:2e:b2:9a:69:29:cb:ee:
                    16:57:b3:70:82:47:c5:14:79:73:c6:d3:1e:3d:5d:
                    e6:07:b6:e3:24:5c:86:f4:5e:e9:97:dc:4d:d0:e4:
                    76:b2:2e:b8:05:01:b6:c6:b5:5a:10:c1:6b:76:ba:
                    13:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:63:AE:A5:D4:B3:D5:CB:9C:CD:AB:D3:3E:EB:1C:97:35:CE:63:EC
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139382e302f32332d3233203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:00:96:a1:27:8d:47:58:9e:70:8a:ed:2e:be:ff:71:84:a6:
         6d:a3:2f:78:ad:d6:59:1b:15:0a:e3:6c:cf:ce:03:26:89:53:
         74:b8:43:62:bf:b0:56:3e:4f:99:ee:ab:ba:5b:06:7b:d6:49:
         29:3d:14:c5:1f:a0:dc:9c:56:15:6b:8f:97:e1:4d:0e:aa:94:
         36:6d:7a:41:72:62:29:ea:0e:03:ad:88:ee:aa:00:6b:fe:8e:
         9c:da:53:ed:ee:ce:e9:c2:87:47:18:0d:a7:a0:7b:a1:98:6e:
         a6:0a:94:92:1a:da:8f:59:7d:cc:cf:57:95:64:54:d7:b6:5a:
         4b:1c:7e:88:ef:46:15:ec:db:e2:67:53:c3:65:d6:4f:0d:ae:
         48:f9:86:68:82:c3:51:49:ce:62:26:7a:81:1f:df:10:81:67:
         b9:fe:22:0f:a1:f4:53:61:48:40:33:35:a6:06:cb:c8:55:6a:
         eb:e2:83:0b:b5:98:21:09:ef:a6:b5:49:31:59:5d:66:9d:6d:
         b1:a4:38:64:4d:a3:26:a9:59:18:58:6d:91:73:e7:8d:03:a6:
         30:5e:01:b1:fd:cc:3c:42:10:47:d2:2e:1e:f3:72:34:fa:c6:
         d3:e1:8f:97:f9:34:fd:d7:12:9a:0e:e2:ca:cf:63:12:96:67:
         79:37:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:48 2025 by rpki-client