Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/34352e3136302e3233362e302f32322d3234203d3e20323638343334.roa
File:                     34352e3136302e3233362e302f32322d3234203d3e20323638343334.roa (raw, json)
Hash identifier:          MRDJZnxwxFrCGgYjkRGEcHpzQ74ilO1b7trT9O4CHPU=
Subject key identifier:   03:9C:7D:94:0B:5C:55:26:29:F4:9A:0A:BF:96:E6:2F:90:2E:85:62
Certificate issuer:       /CN=C9AFDAFB3AF74A8CA0832B076914D7A4A4425648
Certificate serial:       40B05DE391E10181C01A4741EF9A40A0899C575C
Authority key identifier: C9:AF:DA:FB:3A:F7:4A:8C:A0:83:2B:07:69:14:D7:A4:A4:42:56:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/34352e3136302e3233362e302f32322d3234203d3e20323638343334.roa
Signing time:             Fri 21 Mar 2025 22:38:01 +0000
ROA not before:           Fri 21 Mar 2025 22:33:01 +0000
ROA not after:            Fri 20 Mar 2026 22:38:01 +0000
asID:                     268434
IP address blocks:        45.160.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl
                          rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 10:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b0:5d:e3:91:e1:01:81:c0:1a:47:41:ef:9a:40:a0:89:9c:57:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9AFDAFB3AF74A8CA0832B076914D7A4A4425648
        Validity
            Not Before: Mar 21 22:33:01 2025 GMT
            Not After : Mar 20 22:38:01 2026 GMT
        Subject: CN=039C7D940B5C552629F49A0ABF96E62F902E8562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:9e:26:d6:1f:29:08:6f:b6:22:a6:bb:c5:
                    4d:bf:f0:41:f0:8b:e3:68:97:8c:8e:54:a1:1c:60:
                    dd:82:7d:b0:87:12:e5:cf:c3:bc:6d:94:f8:70:0f:
                    77:6c:31:86:19:58:6b:e6:72:f0:88:c5:23:4b:0c:
                    57:af:9b:a4:9c:b7:c5:9d:27:f7:ec:32:ce:e3:51:
                    15:c8:1f:4d:f9:2b:62:0d:cc:b3:8f:3b:58:a1:e6:
                    cf:bd:3e:08:2e:d6:7c:80:72:39:48:9e:36:2b:85:
                    54:14:b2:63:66:6d:a8:84:7b:3a:75:c8:dc:40:97:
                    a2:f5:33:19:51:8e:95:7a:5e:43:76:4c:95:0d:b0:
                    0d:37:a1:4f:d8:e7:0f:81:da:de:6f:da:d2:ea:8d:
                    2f:15:f9:24:7d:7f:9e:f5:a1:1d:08:f4:69:2a:3e:
                    c4:c2:a7:d8:67:64:b3:49:e3:dd:2f:29:09:b1:f5:
                    1a:f9:86:72:af:2d:4a:4b:95:3b:5e:d2:bf:aa:dd:
                    bd:78:19:b3:5b:93:26:26:44:b1:20:d2:9d:b1:05:
                    0b:13:b8:26:1a:04:ef:22:8f:4a:06:61:05:cf:62:
                    6b:1a:64:cc:55:78:cd:91:57:d7:27:d2:34:34:6c:
                    b4:1e:ff:5f:17:a1:3a:a5:60:ad:dd:75:b2:99:d0:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9C:7D:94:0B:5C:55:26:29:F4:9A:0A:BF:96:E6:2F:90:2E:85:62
            X509v3 Authority Key Identifier:
                keyid:C9:AF:DA:FB:3A:F7:4A:8C:A0:83:2B:07:69:14:D7:A4:A4:42:56:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/34352e3136302e3233362e302f32322d3234203d3e20323638343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:2f:c0:32:cf:6e:51:3d:63:43:96:c0:49:82:f8:27:f5:e8:
         15:68:21:aa:ad:40:ce:7e:db:8b:84:23:90:45:d2:43:3b:aa:
         e6:a0:39:02:e4:eb:7a:b1:ec:92:f2:68:d7:d4:6f:f8:2b:bf:
         4b:5c:b6:df:46:0c:88:4e:c1:53:bc:83:bd:7b:71:a3:3e:f7:
         31:17:f2:00:cd:33:0d:0c:70:a3:15:27:f6:b1:eb:e6:05:27:
         85:37:d7:3f:53:01:6f:d8:95:c6:68:92:0e:e1:02:30:c8:98:
         17:01:b6:c7:3c:0c:61:2e:b0:17:ef:6c:a2:3f:7d:d1:13:18:
         89:4d:6b:45:45:5b:bb:16:2a:08:f3:80:42:cd:c6:a9:a0:cd:
         79:95:f3:03:5c:9a:79:48:31:05:36:cd:57:bf:b2:98:c7:4e:
         d8:54:09:dc:0e:5f:e7:8a:bc:db:80:97:e2:52:68:6d:2e:5b:
         ce:74:06:9a:c3:72:7b:b4:c4:b9:07:96:d4:99:02:45:ef:92:
         e8:41:69:c9:71:ce:47:e1:b0:f8:99:9f:dd:a8:02:15:0e:ec:
         7e:ae:09:1d:ad:d6:53:25:10:a7:41:7c:d3:01:61:8a:f5:56:
         06:57:a6:33:0b:9a:50:01:61:6e:9e:88:ae:40:81:79:ba:12:
         4b:11:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:55:35 2025 by rpki-client