Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137392e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138392e3137392e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          eE/d6ISZ2ylNGPKV71hPnrHKcXAsfqNI4X8lNug8Kis=
Subject key identifier:   F7:3B:2A:1C:91:1F:07:81:B7:59:BD:2B:2F:8F:3F:F6:AC:1B:5E:BA
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       261D742AD9303FE06A9F367F8F6F69EFD82715C7
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137392e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 06 Mar 2025 14:43:12 +0000
ROA not before:           Thu 06 Mar 2025 14:38:12 +0000
ROA not after:            Thu 05 Mar 2026 14:43:12 +0000
asID:                     269597
IP address blocks:        45.189.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1d:74:2a:d9:30:3f:e0:6a:9f:36:7f:8f:6f:69:ef:d8:27:15:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Mar  6 14:38:12 2025 GMT
            Not After : Mar  5 14:43:12 2026 GMT
        Subject: CN=F73B2A1C911F0781B759BD2B2F8F3FF6AC1B5EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:94:56:7a:5e:95:dc:0c:6d:10:24:bd:a9:
                    82:18:2a:f7:cc:46:bd:82:fa:5b:f2:88:32:b7:0d:
                    a3:10:ec:1c:86:a4:9f:c7:21:1e:b4:5e:bf:f6:a6:
                    49:71:33:94:d0:01:4b:90:86:80:ab:cd:a5:c0:e6:
                    92:0a:05:1d:2d:d3:f8:49:80:4a:9f:03:10:6d:e6:
                    2f:ef:bf:20:a7:6c:a6:d7:bf:53:84:e7:21:7b:5f:
                    27:8b:5c:13:a8:40:7d:c0:f4:ca:a0:63:6b:5b:19:
                    1d:51:5d:e3:5d:d6:4c:b3:5d:ca:07:81:ef:ec:9e:
                    2e:fb:1e:35:03:21:ba:e5:e3:79:7b:f2:cb:7f:d9:
                    7c:84:8e:57:ed:06:6f:35:89:04:64:c3:66:2e:f8:
                    e8:a2:24:e5:6e:45:2c:de:17:77:9d:4c:59:82:d3:
                    4c:93:ee:3b:78:4f:c6:82:94:a5:f9:f5:34:89:07:
                    4a:1c:00:b1:40:fd:35:0e:79:9d:b7:4d:c5:39:02:
                    fa:70:2d:5d:ee:4f:32:d4:f1:60:4f:3b:06:ad:3f:
                    55:dd:f8:5a:1e:db:c4:7d:87:58:bd:26:ff:84:f5:
                    08:6c:26:76:fc:86:6e:54:14:64:74:ec:50:a2:e0:
                    7d:8f:3a:8d:23:e8:51:60:8c:f5:76:49:78:d3:e6:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3B:2A:1C:91:1F:07:81:B7:59:BD:2B:2F:8F:3F:F6:AC:1B:5E:BA
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e3138392e3137392e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:e8:c0:32:65:75:0b:dd:f1:c9:60:89:74:2f:e0:82:46:31:
         b4:f3:be:d2:cb:72:e9:fa:81:30:d8:89:6e:1e:22:a5:4e:0d:
         d6:ae:af:6c:69:02:f9:59:bb:c6:cb:cd:4d:5e:71:47:ad:52:
         65:fe:2a:30:d3:f8:35:c6:1f:40:eb:5f:2e:23:50:df:dc:5d:
         41:53:b4:a9:b7:31:24:ac:5d:f0:b3:9e:04:83:06:53:56:c0:
         4f:36:1e:7c:f1:42:6a:d7:29:24:2f:d4:d6:81:d5:2e:d8:b1:
         f3:9d:6e:42:b3:23:93:1e:82:41:c5:80:35:a3:50:35:b0:a5:
         03:d3:1d:b2:01:16:8a:a9:67:d3:06:f7:9e:7f:2c:a6:a2:3f:
         19:11:8c:14:ea:e4:0d:9d:b3:f3:9e:a8:a1:a7:fc:fb:e7:1a:
         f1:01:da:1a:a9:d2:20:66:34:55:f5:83:8e:22:05:27:20:e4:
         92:7b:d2:ac:a3:4a:9c:12:f7:d9:97:6f:29:68:ed:a7:56:da:
         0a:57:f9:54:f6:c3:27:01:cb:5f:8f:72:3d:76:0e:e0:f5:7c:
         88:4f:58:8c:b9:ee:4e:e0:b4:65:9a:e9:59:98:60:a7:53:85:
         80:1c:0e:eb:0b:bd:c1:38:fa:9f:6e:5b:d0:3f:2f:53:be:31:
         30:e6:78:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:42 2025 by rpki-client on console.sobornost.net