Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa
File:                     34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa (raw, json)
Hash identifier:          4HY/TAFL3gyDZMXuigQ2nE9WO1ncW+700JaMse4s6CY=
Subject key identifier:   93:E6:EF:1B:05:60:3F:47:AA:DC:56:70:C0:5F:82:3B:FE:EB:82:35
Certificate issuer:       /CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
Certificate serial:       254C09D2479E97ABA0FB19CF741CDD779F709262
Authority key identifier: 96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa
Signing time:             Thu 06 Mar 2025 10:13:35 +0000
ROA not before:           Thu 06 Mar 2025 10:08:35 +0000
ROA not after:            Thu 05 Mar 2026 10:13:35 +0000
asID:                     266967
IP address blocks:        45.226.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl
                          rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4c:09:d2:47:9e:97:ab:a0:fb:19:cf:74:1c:dd:77:9f:70:92:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
        Validity
            Not Before: Mar  6 10:08:35 2025 GMT
            Not After : Mar  5 10:13:35 2026 GMT
        Subject: CN=93E6EF1B05603F47AADC5670C05F823BFEEB8235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:37:28:9f:3c:4d:25:71:88:d9:f2:2d:ac:45:
                    f8:ae:62:5d:a7:3a:70:b6:91:14:70:21:8f:ae:5c:
                    a3:94:93:e5:e3:b5:6b:eb:48:19:9c:88:4b:da:19:
                    8f:4f:be:10:53:37:e9:90:99:fc:18:f9:1f:4f:a0:
                    5b:21:c4:99:67:c9:03:14:fa:45:33:cc:f7:a8:fe:
                    e2:99:22:c0:0d:63:24:40:7e:f6:bf:c1:44:91:2e:
                    87:03:94:a8:96:50:fd:eb:b8:0f:56:a0:73:f4:b1:
                    85:7d:35:d6:93:33:3c:15:ec:c0:07:45:ac:4b:68:
                    2a:39:2e:32:1c:e6:7d:a1:23:45:be:9d:df:f8:1c:
                    a4:b5:26:84:cd:7d:61:cb:0d:f0:98:ba:7b:33:d4:
                    b9:8f:78:aa:1b:18:be:63:06:17:64:ef:2e:b4:32:
                    02:65:37:b2:31:7d:7d:fd:05:9b:09:b4:a0:a7:1b:
                    2c:55:c2:64:83:19:b1:c9:96:b2:4e:9d:0d:5d:c9:
                    54:75:64:fe:0a:ef:ac:8c:30:db:ae:05:68:f3:63:
                    23:6b:bf:e6:82:64:77:d0:75:7f:2c:ba:40:e9:39:
                    5c:be:c4:17:63:1f:0b:f2:20:46:63:79:a1:5d:4a:
                    4d:be:00:23:52:90:eb:c0:e2:c8:ba:34:ff:e7:d3:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E6:EF:1B:05:60:3F:47:AA:DC:56:70:C0:5F:82:3B:FE:EB:82:35
            X509v3 Authority Key Identifier:
                keyid:96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f5:c5:45:63:9d:42:74:31:f4:da:c5:fb:31:8b:9e:c8:85:
         73:80:ad:09:36:30:d7:48:fd:a3:b5:81:19:af:ba:57:13:c8:
         8b:6e:3f:e9:5f:63:e8:60:1d:0b:e8:13:c1:2d:87:c0:34:9e:
         18:6f:59:38:07:9a:05:78:8c:ba:dd:5c:5b:4c:98:c5:9c:f7:
         3e:08:42:48:73:5c:9e:9a:f4:d2:b7:98:c1:21:78:5b:5b:02:
         e4:64:28:0f:22:e0:d0:1d:cf:d1:e6:31:3f:5a:57:05:3a:e2:
         9d:cc:5a:38:43:2f:92:3b:00:55:f8:a5:70:84:9a:bd:4c:79:
         e5:57:6f:83:3f:65:1a:da:52:cb:c1:6d:1a:e8:4b:a0:42:3f:
         1b:f8:83:72:8f:37:a9:55:04:37:cf:42:4c:61:31:62:0b:50:
         69:94:0f:41:50:79:c6:7f:50:36:f4:89:ff:9a:14:63:a1:e9:
         c2:f0:88:a7:f7:db:a3:e1:29:31:7e:9b:7c:29:32:5f:f8:14:
         aa:57:3e:5c:f2:36:c7:d7:a2:e8:e5:a6:23:4e:5e:64:4c:b6:
         c5:1a:60:02:8b:f2:01:a4:0a:4b:48:bc:d1:46:d3:5b:8e:52:
         c1:46:fa:63:bc:db:cc:37:72:72:b2:4f:69:55:a4:46:c9:87:
         f6:f2:3a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:28:49 2025 by rpki-client