Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GW4bjzUPN9SVtEsi5BEemEhGQKy32tAimRqBrX5837aG/0/34352e3136332e3233362e302f32322d3234203d3e20323637393434.roa
File:                     34352e3136332e3233362e302f32322d3234203d3e20323637393434.roa (raw, json)
Hash identifier:          ME7qQ7gjIgTDADdxnJVD9L2PNxVZo5AL5+wBH/cPSK4=
Subject key identifier:   CA:A9:BC:52:23:02:AD:6F:0A:E7:58:C0:DE:5B:98:32:22:05:29:35
Certificate issuer:       /CN=E262A648FBF6492A2D7694F232DF644ADE5580A8
Certificate serial:       013E1C678F949A7F2526EB0DACD8C5EB53FA5953
Authority key identifier: E2:62:A6:48:FB:F6:49:2A:2D:76:94:F2:32:DF:64:4A:DE:55:80:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E262A648FBF6492A2D7694F232DF644ADE5580A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GW4bjzUPN9SVtEsi5BEemEhGQKy32tAimRqBrX5837aG/0/34352e3136332e3233362e302f32322d3234203d3e20323637393434.roa
Signing time:             Wed 30 Apr 2025 16:17:33 +0000
ROA not before:           Wed 30 Apr 2025 16:12:33 +0000
ROA not after:            Wed 29 Apr 2026 16:17:33 +0000
asID:                     267944
IP address blocks:        45.163.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GW4bjzUPN9SVtEsi5BEemEhGQKy32tAimRqBrX5837aG/0/E262A648FBF6492A2D7694F232DF644ADE5580A8.crl
                          rsync://rpki-repo.registro.br/repo/GW4bjzUPN9SVtEsi5BEemEhGQKy32tAimRqBrX5837aG/0/E262A648FBF6492A2D7694F232DF644ADE5580A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E262A648FBF6492A2D7694F232DF644ADE5580A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 15:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3e:1c:67:8f:94:9a:7f:25:26:eb:0d:ac:d8:c5:eb:53:fa:59:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E262A648FBF6492A2D7694F232DF644ADE5580A8
        Validity
            Not Before: Apr 30 16:12:33 2025 GMT
            Not After : Apr 29 16:17:33 2026 GMT
        Subject: CN=CAA9BC522302AD6F0AE758C0DE5B983222052935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:c9:93:fc:2b:cb:df:4a:8f:30:72:6c:34:
                    38:6d:fb:9a:30:e8:dc:ff:fe:e1:4e:0f:e2:2c:86:
                    92:e5:1d:2c:f4:29:7f:f2:e6:fe:59:27:83:cd:8b:
                    e0:a9:9b:ae:e9:3a:6e:a2:df:fb:45:c7:15:32:ee:
                    fa:3f:a2:a3:22:57:64:58:7a:94:1e:9b:5a:63:8f:
                    72:2b:15:be:e4:be:0e:f9:00:3c:31:38:c3:66:51:
                    80:04:75:26:1a:7c:bc:8f:22:b8:c2:3b:47:ab:e6:
                    68:82:d9:f1:ce:a5:b8:3a:72:f4:23:a2:48:2c:a8:
                    65:0a:41:16:8a:ae:87:44:30:86:b6:92:1b:ed:6a:
                    0b:1e:4b:73:c0:b9:a9:70:b3:9c:82:13:ec:69:19:
                    59:92:6d:4f:86:d9:b9:19:1f:42:26:b0:14:d4:6d:
                    28:b9:fd:e8:df:07:e9:5f:03:84:67:90:9f:7c:2a:
                    b2:93:d6:d5:da:d1:ce:6e:9c:e7:9d:86:cd:d0:49:
                    cd:c4:c7:c8:fb:f9:c6:99:ab:59:71:1d:25:8a:06:
                    8f:8c:80:5a:1b:9f:dd:6c:40:4c:24:f2:66:21:91:
                    65:b0:57:37:24:ce:82:2f:ce:ad:ac:ae:e8:22:3e:
                    f7:d1:d3:98:a6:4d:ed:68:5f:14:07:6d:da:1b:7c:
                    dd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A9:BC:52:23:02:AD:6F:0A:E7:58:C0:DE:5B:98:32:22:05:29:35
            X509v3 Authority Key Identifier:
                keyid:E2:62:A6:48:FB:F6:49:2A:2D:76:94:F2:32:DF:64:4A:DE:55:80:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GW4bjzUPN9SVtEsi5BEemEhGQKy32tAimRqBrX5837aG/0/E262A648FBF6492A2D7694F232DF644ADE5580A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E262A648FBF6492A2D7694F232DF644ADE5580A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GW4bjzUPN9SVtEsi5BEemEhGQKy32tAimRqBrX5837aG/0/34352e3136332e3233362e302f32322d3234203d3e20323637393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:0f:78:5d:87:95:7a:2e:dc:fa:7f:29:5d:f3:5a:9f:c8:65:
         cc:13:df:98:6a:26:4e:f6:2c:2e:76:02:61:bc:52:e0:a6:bb:
         61:c4:70:d5:8f:24:d1:f1:01:73:94:c8:f2:fe:a4:ec:68:b1:
         d4:23:99:95:2c:0a:60:04:6f:94:78:da:e3:d3:9e:61:f7:2d:
         0d:df:67:83:62:4a:9e:02:ed:0f:32:e1:7f:49:47:62:43:65:
         15:35:24:b2:e9:0a:b4:a1:b4:c3:92:8a:95:82:4f:98:3c:71:
         94:6c:b1:aa:83:4f:aa:c8:45:9b:02:35:04:27:56:67:11:c1:
         63:57:46:eb:f2:d3:b2:39:21:36:d3:b8:92:63:86:f2:d2:1a:
         db:49:63:c3:b6:04:0e:cf:3f:91:43:91:d2:ce:1c:54:9d:cd:
         a4:eb:cd:40:3e:2c:92:4a:27:83:5d:23:bc:f4:63:86:f3:70:
         21:f7:09:57:eb:5a:35:e2:ba:c0:e8:53:6f:d3:51:0b:e4:7b:
         e5:03:86:7f:6a:96:eb:95:78:8f:cf:ce:9f:a2:8e:f3:1f:f0:
         0b:d1:e6:a3:d9:71:03:c1:e2:73:e7:53:33:1d:de:44:15:04:
         2b:5d:b4:da:f0:89:c0:b0:0c:91:63:14:7d:6f:0e:8e:30:26:
         11:de:16:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:11:52 2025 by rpki-client