Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e37312e3230382e302f32332d3233203d3e20323639353937.roa
File:                     34352e37312e3230382e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          oPDvY2p71YOY5jgCU50POF61xBcznXLp4vaDeNpz9zE=
Subject key identifier:   29:9A:77:C0:D5:E6:14:8B:31:1A:FE:68:49:C3:46:8B:B0:06:79:0B
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       59C634DD4948EA4399B0581E7FEE09F9F7928351
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e37312e3230382e302f32332d3233203d3e20323639353937.roa
Signing time:             Thu 06 Mar 2025 14:43:12 +0000
ROA not before:           Thu 06 Mar 2025 14:38:12 +0000
ROA not after:            Thu 05 Mar 2026 14:43:12 +0000
asID:                     269597
IP address blocks:        45.71.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c6:34:dd:49:48:ea:43:99:b0:58:1e:7f:ee:09:f9:f7:92:83:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Mar  6 14:38:12 2025 GMT
            Not After : Mar  5 14:43:12 2026 GMT
        Subject: CN=299A77C0D5E6148B311AFE6849C3468BB006790B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:79:57:2c:03:3e:1c:26:7f:35:ef:0a:7e:
                    16:df:53:6e:fb:c8:b2:e6:74:2d:eb:c4:b7:14:e9:
                    2c:5a:6e:a1:96:2e:53:83:31:39:cb:1f:50:20:be:
                    93:ff:1d:4e:5b:ec:82:75:05:08:cc:4c:60:4d:f0:
                    02:f8:c6:eb:31:13:39:67:33:4c:bf:09:ed:96:1b:
                    2f:47:41:66:e9:e1:a6:22:fb:27:7d:af:03:05:cf:
                    c7:b9:03:40:9b:1a:00:b5:fd:a8:0c:0f:4e:bd:ec:
                    28:36:14:74:99:46:66:fb:69:1e:cf:e6:a8:93:dd:
                    6b:c3:a4:23:7f:92:48:29:bf:a4:a4:d6:d5:80:3d:
                    66:69:48:d7:b1:af:22:f9:d0:d0:81:ec:33:c2:c5:
                    e6:db:1d:90:f3:5c:eb:b8:9d:22:08:31:6d:07:d5:
                    29:a5:4a:57:b7:53:26:48:88:d8:8b:f3:06:3c:98:
                    3a:00:67:da:10:27:67:a6:4c:01:73:21:a9:3d:6d:
                    1c:70:03:1c:d6:23:5b:5d:4e:14:65:2d:ca:b3:b7:
                    03:07:bd:2e:d8:7b:0e:25:81:8c:da:c2:f5:d2:4b:
                    27:fd:20:d0:86:ad:70:b6:8e:41:75:5e:9e:99:9d:
                    af:05:0e:8f:d0:3b:76:39:3e:51:bc:77:5e:0e:1c:
                    fe:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9A:77:C0:D5:E6:14:8B:31:1A:FE:68:49:C3:46:8B:B0:06:79:0B
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/34352e37312e3230382e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:c3:fb:25:73:79:6a:bc:a1:dc:14:bb:ab:06:fe:44:d9:7e:
         18:e5:82:0f:68:24:4b:97:02:d3:85:75:4b:b2:ef:d2:17:7c:
         38:24:1e:72:40:75:8d:c9:bf:e9:a8:a8:e2:5c:b9:02:50:26:
         fc:cf:21:63:08:1a:43:a8:53:2b:2b:dd:60:a3:b3:85:c4:90:
         45:61:e9:6f:ff:c1:15:dd:57:51:61:d4:4c:d1:f4:ad:ae:7e:
         1c:77:26:8f:66:66:2d:61:b1:40:c7:d9:83:45:da:54:71:bf:
         d1:88:bc:fe:c1:37:06:d0:14:44:4e:3b:94:59:ec:19:57:36:
         7b:31:cf:03:ad:ba:a6:83:0d:59:8c:99:7f:37:6b:d7:07:4f:
         90:ab:0e:61:96:b6:59:0b:9b:87:19:a7:3d:f8:58:e7:4f:1b:
         b9:78:fb:e7:a2:f1:fd:34:ad:73:11:13:31:6d:9a:5a:b3:fb:
         af:b6:0d:51:fa:7a:13:f2:3c:30:d8:fe:90:f4:c6:ad:c6:1e:
         d6:c2:7a:27:01:2f:3c:01:38:7f:8b:fb:46:cb:38:b4:ea:87:
         9b:8b:52:3f:65:38:5b:ad:87:75:da:91:06:9d:fa:c2:1f:08:
         cd:f5:a3:18:4e:34:ac:09:72:5b:4f:3f:f7:78:44:09:eb:29:
         f4:09:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:42 2025 by rpki-client on console.sobornost.net