Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235322e302f32342d3234203d3e20323638323532.roa
File:                     34352e3233362e3235322e302f32342d3234203d3e20323638323532.roa (raw, json)
Hash identifier:          n4PZzGd69ZdMz3Bxp3e9vDKftD5Aa8i6l25Z1t7YfUo=
Subject key identifier:   A6:C5:59:91:7F:D7:82:49:38:18:C4:45:82:57:E3:0F:A2:A6:B4:CE
Certificate issuer:       /CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
Certificate serial:       6A7B032428A9FD289EEC32ED0B8E2BEEF9D183F8
Authority key identifier: 54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235322e302f32342d3234203d3e20323638323532.roa
Signing time:             Mon 02 Jun 2025 17:55:02 +0000
ROA not before:           Mon 02 Jun 2025 17:50:02 +0000
ROA not after:            Mon 01 Jun 2026 17:55:02 +0000
asID:                     268252
IP address blocks:        45.236.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl
                          rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 04:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:7b:03:24:28:a9:fd:28:9e:ec:32:ed:0b:8e:2b:ee:f9:d1:83:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
        Validity
            Not Before: Jun  2 17:50:02 2025 GMT
            Not After : Jun  1 17:55:02 2026 GMT
        Subject: CN=A6C559917FD782493818C4458257E30FA2A6B4CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:93:35:7c:6e:2f:85:a9:ce:3d:12:0c:18:3c:
                    6d:a5:6f:4b:b0:90:8e:7e:69:f7:07:00:ef:cc:b3:
                    f1:1e:e9:7c:bb:be:c3:60:04:c4:0e:0d:24:e8:bc:
                    c9:c5:31:52:f6:b3:b8:63:5d:d7:ba:7b:47:17:43:
                    b4:d8:a9:0f:1f:78:24:e0:4f:0e:45:70:33:a6:5e:
                    8d:a7:ce:21:21:ed:a0:b4:58:05:7f:35:6f:d1:6c:
                    fc:06:f9:c7:18:93:12:3a:3b:ef:81:c5:c3:89:17:
                    2a:17:8c:aa:b1:88:1e:65:58:c0:52:e6:f7:41:83:
                    58:6f:30:9a:6c:26:31:48:52:74:19:14:01:5c:bb:
                    58:39:7c:52:d5:47:fb:9b:ed:eb:2e:68:6d:37:5b:
                    4a:aa:98:09:66:8c:22:34:4d:d4:84:11:80:6c:7f:
                    4d:c3:2d:7e:20:b0:dd:3c:df:ab:33:74:ca:e0:3e:
                    a4:74:14:bf:0d:89:7a:47:ba:8b:a4:5d:c5:9e:bd:
                    2e:8f:51:60:2e:d5:bc:4c:05:e2:32:02:89:14:ac:
                    57:ff:df:b0:9b:44:fe:56:f6:f4:90:77:52:cc:d2:
                    d0:b3:8e:a8:9f:f7:d5:08:e4:b0:73:43:6c:ee:90:
                    45:c1:a3:15:d7:7e:1c:b9:2d:42:e9:87:d7:15:92:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C5:59:91:7F:D7:82:49:38:18:C4:45:82:57:E3:0F:A2:A6:B4:CE
            X509v3 Authority Key Identifier:
                keyid:54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235322e302f32342d3234203d3e20323638323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:3c:9d:67:93:7a:82:b8:2a:b0:fa:c9:b1:48:a2:49:23:
         d5:39:1c:17:93:6f:89:00:6f:14:a9:ae:e8:a2:c3:45:6f:76:
         04:1a:93:81:ba:5f:e5:fb:42:e1:74:af:e9:9d:1e:e1:dc:4c:
         8d:2f:72:5e:24:e7:44:e2:c7:c1:8d:ef:25:5b:e6:d4:dc:1d:
         47:37:a4:9a:76:6e:61:a4:14:e1:3f:1e:cd:b2:d6:25:6b:7c:
         8a:0b:e2:bf:7d:f5:c6:17:2f:df:53:a8:f3:68:b1:05:21:cf:
         b5:e1:f6:7d:a4:40:69:74:79:89:aa:cc:80:ca:80:8b:b2:80:
         c4:2e:22:3c:31:eb:75:0f:77:79:36:6c:17:53:8b:ab:e4:04:
         9c:06:86:41:58:59:25:7f:7c:48:e4:83:c3:3c:03:78:db:cd:
         c7:73:9d:ad:4c:b9:30:74:0d:78:47:bb:0c:92:db:bc:cd:34:
         dd:46:2a:ec:4f:24:aa:45:43:42:79:cb:93:22:b3:e4:4f:a5:
         11:89:b7:a5:43:a1:c1:4f:33:f1:80:9a:fe:b7:93:86:a3:b4:
         60:39:5b:f8:2c:e1:4b:ca:9e:65:97:18:ac:0e:89:22:fb:eb:
         8e:71:00:52:86:61:cc:bb:b5:46:ab:ed:a8:d7:17:60:13:45:
         80:6f:be:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:28:56 2025 by rpki-client