Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139382e302f32342d3234203d3e20323632363136.roa
File:                     34352e3138352e3139382e302f32342d3234203d3e20323632363136.roa (raw, json)
Hash identifier:          v5gsKffW/brvLu0ol4Vgcdn+CfuQSXFMZwJmpyimk1k=
Subject key identifier:   8D:64:03:FC:FF:CF:3C:15:CA:3F:FE:29:BA:1D:1B:86:9B:0A:27:7D
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       4D859318408398E8746B9E2FA4D866947122A439
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139382e302f32342d3234203d3e20323632363136.roa
Signing time:             Thu 06 Mar 2025 05:00:16 +0000
ROA not before:           Thu 06 Mar 2025 04:55:16 +0000
ROA not after:            Thu 05 Mar 2026 05:00:16 +0000
asID:                     262616
IP address blocks:        45.185.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:85:93:18:40:83:98:e8:74:6b:9e:2f:a4:d8:66:94:71:22:a4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Mar  6 04:55:16 2025 GMT
            Not After : Mar  5 05:00:16 2026 GMT
        Subject: CN=8D6403FCFFCF3C15CA3FFE29BA1D1B869B0A277D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:97:ab:0c:70:89:50:0b:60:29:c8:25:40:
                    b0:4a:3b:74:5e:57:c5:ae:30:10:e1:b3:03:9e:c8:
                    c2:a0:7a:5a:d9:9e:5a:00:a5:3d:85:a7:13:d6:87:
                    68:d1:6b:ea:f4:a3:da:f8:c7:a3:55:5a:cb:5b:5c:
                    a8:30:02:c3:20:a7:76:21:0a:c9:78:88:66:1b:46:
                    98:3b:63:e5:c2:c3:69:00:90:19:0f:75:17:bc:9f:
                    bf:3b:55:ba:46:54:33:2f:91:0b:13:e8:50:ec:b2:
                    a6:fd:1d:d0:85:8d:43:2c:19:a7:01:38:d4:a3:20:
                    ad:fa:9c:52:5f:cd:bc:1f:95:7d:52:23:4d:38:e5:
                    57:5d:94:0d:a4:b5:f7:7d:5a:d4:f5:86:4e:4e:99:
                    5f:a4:68:0e:87:93:d7:e2:56:54:cf:69:40:71:02:
                    6c:45:ba:c4:be:7a:7a:aa:68:db:cd:5c:f3:9b:89:
                    76:0f:54:60:ce:7d:44:b1:c6:2d:c0:71:7b:b2:4f:
                    47:ac:68:93:98:43:88:85:b7:b0:3c:76:b3:b5:93:
                    05:8d:5e:08:64:f4:49:62:b8:b0:31:ba:b3:b4:f3:
                    13:71:58:9a:84:46:17:96:90:83:99:55:f0:23:b4:
                    37:2e:59:79:d4:ad:db:4c:38:e1:b9:77:b3:1b:d9:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:64:03:FC:FF:CF:3C:15:CA:3F:FE:29:BA:1D:1B:86:9B:0A:27:7D
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139382e302f32342d3234203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:4d:7b:6b:85:cd:b8:8e:50:b1:27:1b:c6:0f:8e:04:67:21:
         dd:21:cb:6e:3a:29:36:a2:24:c5:02:0f:50:2d:cb:9a:90:17:
         5d:f6:fd:d8:62:d9:2b:4e:23:67:47:d8:f1:13:9b:4c:29:3f:
         18:e9:88:4e:cd:32:63:ed:fb:d8:4c:dc:d4:94:61:95:be:e9:
         c9:9c:b7:fa:ab:4d:31:f3:9a:8c:65:99:b0:00:fc:24:fb:f6:
         58:c3:55:68:c8:4f:c4:c8:37:01:cc:dc:89:4d:c9:a9:7f:45:
         ab:85:30:5d:f4:c6:95:d6:04:8c:3c:23:1d:af:f2:18:97:65:
         0c:bf:21:7c:cf:f5:34:ea:f5:9f:80:f9:12:5a:c7:11:bc:e2:
         1c:c0:d3:7b:4d:07:ab:8b:ab:31:69:f3:f9:30:e4:77:e6:95:
         30:82:a7:c3:8c:82:b9:5e:73:c5:bc:2a:20:22:8c:ba:c6:6b:
         5e:37:76:9e:ad:26:32:58:cd:ac:9b:02:ce:b6:d2:a6:71:40:
         66:6c:42:1b:ce:d0:0d:9b:67:86:4a:71:16:d6:80:fe:7a:94:
         61:c2:0b:5e:23:b1:d0:1a:d9:3f:6f:43:16:2a:cf:76:9e:3a:
         12:8c:d7:a7:02:94:e0:e7:19:ac:7a:e2:07:bf:89:dd:05:6d:
         f5:93:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:43:44 2025 by rpki-client