Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/34352e3232362e3133382e302f32332d3233203d3e20323636393637.roa
File:                     34352e3232362e3133382e302f32332d3233203d3e20323636393637.roa (raw, json)
Hash identifier:          fsIdvnW/xBFbECbrPj/8Gph0WrWPtClpH4+zuWiA8ng=
Subject key identifier:   8B:7E:41:02:9F:DB:AE:7C:3A:A1:B8:BA:D7:5C:E0:94:8A:25:07:24
Certificate issuer:       /CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
Certificate serial:       32651FBE130D070E99CFD98AF9762D49BD4966A1
Authority key identifier: 96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/34352e3232362e3133382e302f32332d3233203d3e20323636393637.roa
Signing time:             Thu 06 Mar 2025 10:13:36 +0000
ROA not before:           Thu 06 Mar 2025 10:08:36 +0000
ROA not after:            Thu 05 Mar 2026 10:13:36 +0000
asID:                     266967
IP address blocks:        45.226.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl
                          rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:65:1f:be:13:0d:07:0e:99:cf:d9:8a:f9:76:2d:49:bd:49:66:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
        Validity
            Not Before: Mar  6 10:08:36 2025 GMT
            Not After : Mar  5 10:13:36 2026 GMT
        Subject: CN=8B7E41029FDBAE7C3AA1B8BAD75CE0948A250724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:a9:54:42:6a:a4:52:6e:89:b9:f5:83:55:
                    e0:9c:96:aa:9c:f9:ab:a0:c5:95:c6:53:e2:2a:24:
                    ce:74:d9:0b:51:7d:41:82:73:00:99:27:3c:42:a5:
                    99:8d:c2:58:d3:ce:eb:b0:74:44:75:cb:9d:1d:84:
                    94:e4:f0:54:0c:26:a1:14:75:84:01:04:c8:e7:10:
                    52:7d:ab:82:49:06:79:9a:ca:d9:2b:59:01:f2:23:
                    66:bd:99:1f:ae:e7:35:27:6a:8f:5e:19:ed:72:30:
                    f7:d9:d2:7a:3e:63:40:fb:f1:89:f9:a0:6e:27:40:
                    50:f2:b4:7a:0f:9e:49:1e:8f:8b:d3:58:da:2b:ef:
                    f9:65:3e:dc:32:a8:05:12:64:4c:15:32:ec:ec:f5:
                    e1:91:d0:fc:3f:c2:05:f7:77:e5:fa:b7:df:7e:4b:
                    8b:43:46:c1:34:99:4d:f1:26:ae:d8:f6:b3:cf:52:
                    27:e1:0c:15:3b:b1:1a:28:d0:ac:86:7d:66:4c:14:
                    d3:70:45:ed:0c:5d:52:e2:a4:85:82:01:f8:06:42:
                    c1:30:4e:9f:3d:12:14:5e:bf:61:9f:67:77:ae:48:
                    2e:bb:63:c9:06:aa:e6:c8:8d:15:e5:75:6c:c0:92:
                    0f:ed:2b:7b:f1:18:3b:b8:58:26:26:0d:8f:a1:a6:
                    b7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7E:41:02:9F:DB:AE:7C:3A:A1:B8:BA:D7:5C:E0:94:8A:25:07:24
            X509v3 Authority Key Identifier:
                keyid:96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/34352e3232362e3133382e302f32332d3233203d3e20323636393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:6c:7f:95:09:85:58:93:6c:f5:2f:c7:84:ee:1e:bc:10:01:
         81:d3:1e:0c:85:1a:2f:be:cf:b1:90:9f:40:cb:7d:b5:b3:57:
         d2:80:a7:8b:19:ef:9b:a5:c8:7a:64:69:93:29:63:ec:e9:5f:
         34:43:13:4a:00:7d:05:66:db:50:89:f1:28:5b:86:94:a3:06:
         c2:74:31:e3:ea:6c:4f:f1:ca:e2:55:c1:a1:80:dd:d8:3b:45:
         fa:58:90:c1:0d:27:e9:68:dc:0b:33:9c:a4:19:1f:c9:e4:f6:
         dd:fc:5f:bb:01:f0:ea:47:4a:f2:b6:b4:c5:fa:44:34:49:d7:
         b6:40:82:46:65:b6:2b:35:c3:6a:8e:a5:7f:f0:9c:8e:d8:9e:
         f0:b1:4d:a6:1b:3e:e5:39:90:cb:72:d7:9a:63:84:3c:5f:11:
         1d:49:c1:d1:de:4c:13:d1:58:90:06:98:9b:ab:e9:73:ee:99:
         0f:53:e6:cb:29:fa:d4:19:d4:76:b7:12:8e:0f:b2:16:0d:51:
         6e:8c:2f:83:d0:cc:52:2a:b2:32:be:88:4c:30:a0:44:b5:1d:
         b5:8d:ae:d8:0a:26:f1:1a:27:07:d3:e5:cb:a4:eb:f7:98:33:
         b8:bf:44:18:35:c2:c1:39:3d:49:13:2b:7d:41:ad:79:e4:9a:
         32:3f:af:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:25 2025 by rpki-client