Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa
File:                     34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa (raw, json)
Hash identifier:          VcROUlyR6W4fGExogFtuHaLn28z1TDfClniw2ySaSuA=
Subject key identifier:   05:58:BD:E0:59:22:53:0C:CE:EA:CD:1C:02:F1:A8:64:D2:47:0D:C6
Certificate issuer:       /CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
Certificate serial:       2B3E8F8D4FC0783017326F82C2AA9E075D25E0D9
Authority key identifier: 54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa
Signing time:             Mon 02 Jun 2025 17:55:01 +0000
ROA not before:           Mon 02 Jun 2025 17:50:01 +0000
ROA not after:            Mon 01 Jun 2026 17:55:01 +0000
asID:                     268252
IP address blocks:        45.236.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl
                          rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 12:08:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3e:8f:8d:4f:c0:78:30:17:32:6f:82:c2:aa:9e:07:5d:25:e0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
        Validity
            Not Before: Jun  2 17:50:01 2025 GMT
            Not After : Jun  1 17:55:01 2026 GMT
        Subject: CN=0558BDE05922530CCEEACD1C02F1A864D2470DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:8a:78:47:24:95:c9:da:4d:5a:fa:19:d5:
                    5f:fb:cb:1d:23:ff:f3:68:81:fd:bb:d5:79:95:9e:
                    33:e9:19:c6:f3:25:d1:f4:b5:1a:8c:ef:53:93:13:
                    3d:c3:28:5c:63:ed:db:ca:7e:56:49:13:e6:86:40:
                    40:06:cb:04:02:fa:ec:10:e3:f2:17:ee:fb:5e:9d:
                    7f:f9:91:dc:0c:12:ba:75:26:ed:7f:cf:3e:6c:84:
                    27:c8:f5:6b:61:c8:3e:24:9b:14:89:03:fd:c4:36:
                    bd:e1:64:e4:c0:ee:af:e2:45:f2:da:5c:b8:89:9a:
                    be:b3:db:52:98:bc:cf:3e:9d:55:96:79:48:24:5e:
                    ba:67:ce:f7:cf:7b:c6:17:9a:0a:6b:58:a0:57:19:
                    71:62:4d:79:23:a3:6a:36:18:27:98:9e:9a:9d:87:
                    c1:21:87:33:20:7e:5a:ed:33:5a:1c:e6:a4:d3:e1:
                    22:47:4b:27:19:43:c0:a6:f8:82:3c:01:74:3c:62:
                    cf:22:b8:c1:7f:9a:15:1b:ba:63:96:2c:43:6f:08:
                    5f:67:66:99:a0:07:ae:53:01:d6:06:bf:4d:44:2b:
                    97:c2:8e:d7:d5:be:ae:44:2e:06:65:bd:fe:2c:dc:
                    84:f3:49:36:06:78:9d:18:b4:0c:05:af:29:12:bb:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:58:BD:E0:59:22:53:0C:CE:EA:CD:1C:02:F1:A8:64:D2:47:0D:C6
            X509v3 Authority Key Identifier:
                keyid:54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/34352e3233362e3235342e302f32342d3234203d3e20323638323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:1e:7f:b2:1f:d9:4b:f7:0c:8a:84:7a:d8:66:a4:3d:11:bb:
         9a:a7:3a:15:c4:3b:99:0b:2c:59:05:87:f3:68:f7:a2:7d:50:
         16:da:b2:16:1d:da:6d:ea:df:07:96:db:99:75:19:c7:04:33:
         ae:db:76:4d:4f:d6:47:da:e8:50:77:86:c8:f1:be:4f:6b:8a:
         b5:b4:d3:9d:96:b1:60:09:c3:f3:cd:0d:61:67:7e:91:40:bf:
         04:9e:85:45:60:62:4e:08:b4:33:61:a5:7b:15:e9:21:0c:24:
         2a:ec:e3:31:5d:45:af:3e:45:c3:53:8a:c1:5a:fe:9f:96:57:
         65:23:ce:e7:2b:e5:9d:3c:05:af:ba:44:a7:0e:bb:4b:4f:3a:
         af:c3:28:bd:7c:ac:dc:94:d8:47:71:56:76:88:11:7f:d6:2d:
         3e:0f:79:9e:e0:f7:a5:b1:69:27:18:94:0b:88:ed:87:0c:23:
         37:1e:3e:1e:7f:ef:49:5e:8a:bc:69:85:2a:cd:5e:f9:8b:e4:
         47:07:01:ff:54:b4:7d:fc:9c:98:83:df:8c:fd:65:9b:3c:a3:
         73:b6:42:b2:29:e2:08:ef:21:74:77:05:48:52:b6:af:70:d5:
         79:3d:60:bd:a5:ea:8d:d7:c5:3f:a6:9c:72:5e:1b:f2:9a:81:
         28:74:bd:1e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKz6PjU/AeDAXMm+CwqqeB10l4NkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQzOTVBNTQ1RDAwMDhDN0Y0Q0IwMzRERDlEOTBDREM0
MUQ5NUFFNDAeFw0yNTA2MDIxNzUwMDFaFw0yNjA2MDExNzU1MDFaMDMxMTAvBgNV
BAMTKDA1NThCREUwNTkyMjUzMENDRUVBQ0QxQzAyRjFBODY0RDI0NzBEQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3Ip4RySVydpNWvoZ1V/7yx0j
//Nogf271XmVnjPpGcbzJdH0tRqM71OTEz3DKFxj7dvKflZJE+aGQEAGywQC+uwQ
4/IX7vtenX/5kdwMErp1Ju1/zz5shCfI9WthyD4kmxSJA/3ENr3hZOTA7q/iRfLa
XLiJmr6z21KYvM8+nVWWeUgkXrpnzvfPe8YXmgprWKBXGXFiTXkjo2o2GCeYnpqd
h8EhhzMgflrtM1oc5qTT4SJHSycZQ8Cm+II8AXQ8Ys8iuMF/mhUbumOWLENvCF9n
ZpmgB65TAdYGv01EK5fCjtfVvq5ELgZlvf4s3ITzSTYGeJ0YtAwFrykSu90FAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBVi94FkiUwzO6s0cAvGoZNJHDcYwHwYDVR0j
BBgwFoAUVDlaVF0ACMf0ywNN2dkM3EHZWuQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1BDVlMzdkVmWHVxRkNSNmEyR0h6WVNwOVVYWllUWUdGSjhVTmJjdkxU
SnYvMC81NDM5NUE1NDVEMDAwOEM3RjRDQjAzNEREOUQ5MENEQzQxRDk1QUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Mzk1QTU0NUQwMDA4QzdG
NENCMDM0REQ5RDkwQ0RDNDFEOTVBRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dQQ1ZTM3ZFZlh1cUZDUjZhMkdIellTcDlVWFpZVFlHRko4VU5iY3ZMVEp2LzAv
MzQzNTJlMzIzMzM2MmUzMjM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7P4wDQYJKoZIhvcNAQELBQADggEBAIUef7If
2Uv3DIqEethmpD0Ru5qnOhXEO5kLLFkFh/No96J9UBbashYd2m3q3weW25l1GccE
M67bdk1P1kfa6FB3hsjxvk9rirW0052WsWAJw/PNDWFnfpFAvwSehUVgYk4ItDNh
pXsV6SEMJCrs4zFdRa8+RcNTisFa/p+WV2Ujzucr5Z08Ba+6RKcOu0tPOq/DKL18
rNyU2EdxVnaIEX/WLT4PeZ7g96WxaScYlAuI7YcMIzcePh5/70leirxphSrNXvmL
5EcHAf9UtH38nJiD34z9ZZs8o3O2QrIp4gjvIXR3BUhStq9w1Xk9YL2l6o3XxT+m
nHJeG/KagSh0vR4=
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:07 2025 by rpki-client