Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231322e302f32332d3233203d3e20323635383939.roa
File:                     34352e3136332e3231322e302f32332d3233203d3e20323635383939.roa (raw, json)
Hash identifier:          PwlpxI9haDgCSbzvec1FY2NEbANRom7F2YIzoiMwU08=
Subject key identifier:   D7:E9:38:5F:95:FA:12:5C:C1:95:B6:C7:56:B9:63:47:2C:94:E8:B4
Certificate issuer:       /CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
Certificate serial:       7BF2665342AED9BDEB01B77BE5C273AD372DCFA3
Authority key identifier: 50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231322e302f32332d3233203d3e20323635383939.roa
Signing time:             Tue 31 Dec 2024 18:17:36 +0000
ROA not before:           Tue 31 Dec 2024 18:12:36 +0000
ROA not after:            Tue 30 Dec 2025 18:17:36 +0000
asID:                     265899
IP address blocks:        45.163.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl
                          rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f2:66:53:42:ae:d9:bd:eb:01:b7:7b:e5:c2:73:ad:37:2d:cf:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
        Validity
            Not Before: Dec 31 18:12:36 2024 GMT
            Not After : Dec 30 18:17:36 2025 GMT
        Subject: CN=D7E9385F95FA125CC195B6C756B963472C94E8B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f0:c3:13:e3:f7:aa:cf:22:99:e8:db:ba:c5:
                    bb:da:d4:3e:a1:16:75:c4:9b:cc:98:83:ba:ff:80:
                    30:67:35:a8:bb:9e:8a:1a:49:33:b7:7e:9d:fe:f2:
                    48:c8:f0:7d:c5:54:51:e5:71:29:e9:fc:ab:af:4f:
                    39:61:b9:99:d8:f4:a0:5e:2d:e8:74:76:db:25:a1:
                    a1:f7:02:ad:85:d1:11:20:f1:65:e0:0a:27:60:df:
                    7d:a2:4a:0a:5e:d3:b4:d0:c4:f6:b2:a7:b1:3e:ec:
                    56:d3:ec:61:74:43:7f:7b:1a:f6:65:3b:67:95:97:
                    eb:60:c9:63:6e:ba:65:0e:01:70:95:f8:ff:05:d7:
                    fa:e1:4b:09:1f:8f:8d:d9:6e:59:91:11:0a:bf:5c:
                    60:f4:75:b0:3b:31:5c:2a:1a:ce:92:ef:ca:3a:e9:
                    f8:0b:1d:3b:6b:06:82:6f:c1:f6:30:83:0f:c2:9a:
                    af:84:38:73:dd:69:cf:94:5b:96:29:9a:b1:6f:8c:
                    51:ae:1b:a2:07:ad:6e:08:11:bc:0f:c8:a1:06:22:
                    36:fa:2c:e9:d1:0f:77:38:de:26:3c:14:b7:94:17:
                    c9:29:ea:cc:e9:c9:07:c1:26:fc:dd:c8:96:dc:0b:
                    46:97:b3:2d:4a:82:cc:3d:43:3c:58:53:4b:81:5a:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E9:38:5F:95:FA:12:5C:C1:95:B6:C7:56:B9:63:47:2C:94:E8:B4
            X509v3 Authority Key Identifier:
                keyid:50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231322e302f32332d3233203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:0f:c4:a4:a6:7b:6c:4d:92:a9:00:c7:b8:68:b4:72:f8:f8:
         64:4b:5e:ba:21:3e:af:c0:fd:04:38:82:9f:94:66:f8:fe:75:
         f3:ab:15:e2:c9:34:f3:fd:e7:06:1a:3b:1f:46:ba:7a:c6:64:
         dc:6b:e9:7f:89:bb:7d:2b:02:b5:72:51:0d:12:cf:18:44:77:
         29:75:11:43:98:a7:b4:90:95:e2:d5:0d:33:76:4e:d4:20:58:
         54:fa:bf:06:0a:5b:12:73:48:0b:97:16:b0:a9:42:7a:b0:91:
         0d:3d:64:a3:7a:46:93:9c:2b:14:92:a5:43:a7:f8:cd:90:73:
         ce:e7:1f:0e:49:2d:a9:96:d8:91:a3:98:90:0f:6a:e0:22:23:
         a0:65:03:e5:7f:4f:2c:54:92:cd:b2:c2:82:59:be:9a:3d:0c:
         22:53:d9:60:6e:d6:03:5f:48:da:0c:68:ed:e3:32:c6:84:34:
         f1:58:b1:ac:c0:01:55:0e:36:f6:77:ca:49:43:ca:c1:f6:12:
         df:00:e9:43:47:fd:a7:fc:1c:a0:c3:5b:31:ad:00:8b:da:cf:
         d7:1b:b6:d3:b4:34:f8:01:8b:f2:03:2e:7e:b3:ce:91:ed:1c:
         ff:6b:e0:dc:fa:1a:4e:80:76:cb:6c:db:3f:95:28:7a:ff:85:
         f9:5a:b0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:04 2025 by rpki-client on console.sobornost.net