Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/1/34352e3233372e3136302e302f32322d3234203d3e20323638323834.roa
File:                     34352e3233372e3136302e302f32322d3234203d3e20323638323834.roa (raw, json)
Hash identifier:          6KB/Sc9ea/ZXK9m9yOCEGkN+m5d8M+N1eX2oThjHjBU=
Subject key identifier:   97:F4:D7:F7:1F:11:C9:3B:95:FB:D5:F7:21:94:16:AA:61:C1:C6:C7
Certificate issuer:       /CN=2018095BF530FC3CA0AAD06E607CF9D16F4F8790
Certificate serial:       53D3A91BEC71D0CC0D5A0D99E0B5BD770643AF6D
Authority key identifier: 20:18:09:5B:F5:30:FC:3C:A0:AA:D0:6E:60:7C:F9:D1:6F:4F:87:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2018095BF530FC3CA0AAD06E607CF9D16F4F8790.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/1/34352e3233372e3136302e302f32322d3234203d3e20323638323834.roa
Signing time:             Thu 03 Apr 2025 13:02:52 +0000
ROA not before:           Thu 03 Apr 2025 12:57:52 +0000
ROA not after:            Thu 02 Apr 2026 13:02:52 +0000
asID:                     268284
IP address blocks:        45.237.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/1/2018095BF530FC3CA0AAD06E607CF9D16F4F8790.crl
                          rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/1/2018095BF530FC3CA0AAD06E607CF9D16F4F8790.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2018095BF530FC3CA0AAD06E607CF9D16F4F8790.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d3:a9:1b:ec:71:d0:cc:0d:5a:0d:99:e0:b5:bd:77:06:43:af:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2018095BF530FC3CA0AAD06E607CF9D16F4F8790
        Validity
            Not Before: Apr  3 12:57:52 2025 GMT
            Not After : Apr  2 13:02:52 2026 GMT
        Subject: CN=97F4D7F71F11C93B95FBD5F7219416AA61C1C6C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:47:a2:61:d6:3c:df:df:55:79:2e:8b:73:
                    0c:00:d4:32:60:29:80:79:f5:8c:48:05:a0:b0:8f:
                    43:b2:da:a9:8b:7b:76:e6:15:0d:8d:30:67:64:96:
                    bd:1d:78:38:07:30:f7:b3:fc:e8:3c:87:2f:df:2d:
                    19:9d:9a:c2:27:a3:fe:23:f1:e1:fd:e4:6c:ff:81:
                    5b:05:5a:e1:82:78:90:5f:68:58:16:8b:06:d1:6d:
                    26:ec:fe:67:91:5c:12:33:44:d9:29:3a:0a:01:a2:
                    37:93:97:31:22:cf:b6:8f:28:b2:61:d6:0b:b0:8a:
                    c7:a4:89:13:9b:a1:d6:dc:41:c9:79:33:45:1d:99:
                    98:3b:b0:92:90:c7:3c:c6:2d:80:e0:c8:b3:2e:bd:
                    7a:6c:e7:f0:38:7c:87:67:d2:bc:88:25:1c:2e:85:
                    c3:98:a3:81:56:f7:95:0f:bc:77:ec:ea:38:ba:6d:
                    a2:64:87:20:86:53:00:a9:37:c3:4f:ba:c3:cb:9f:
                    43:fa:48:d4:b6:45:7e:a1:f7:ea:fd:7a:91:ba:e0:
                    e3:92:3a:ca:65:0e:2a:c3:c0:fe:94:c4:10:cf:9e:
                    65:c1:d2:ba:61:fd:0a:b9:75:1f:d9:ef:41:86:88:
                    24:3b:4e:1c:18:0f:d4:da:ad:59:9a:52:d1:1d:e9:
                    ee:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F4:D7:F7:1F:11:C9:3B:95:FB:D5:F7:21:94:16:AA:61:C1:C6:C7
            X509v3 Authority Key Identifier:
                keyid:20:18:09:5B:F5:30:FC:3C:A0:AA:D0:6E:60:7C:F9:D1:6F:4F:87:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/1/2018095BF530FC3CA0AAD06E607CF9D16F4F8790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2018095BF530FC3CA0AAD06E607CF9D16F4F8790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26UE9MgXgrAqmRmad62XrR1DPbRedNDZsakBPAKPmxPy/1/34352e3233372e3136302e302f32322d3234203d3e20323638323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:8c:e2:1c:79:1e:92:83:95:3a:29:af:1e:a0:51:bc:72:90:
         20:dc:19:7c:6f:23:12:d6:17:b5:a0:d1:af:31:69:bf:33:0e:
         a8:8d:08:14:7e:c7:74:45:c9:b9:99:45:a7:90:62:1a:e0:87:
         a9:fb:50:26:2b:ba:a6:0d:e0:8d:16:85:97:d5:e3:f4:be:45:
         38:04:61:10:bf:52:e0:5a:7a:3d:60:3d:53:81:70:7f:21:54:
         2e:ee:24:c8:20:7b:29:a3:1b:be:94:0f:7e:64:21:2c:0e:04:
         4a:14:0c:f6:fe:12:9a:ee:a7:5b:fa:9f:01:0f:d9:ad:a8:66:
         3b:30:78:3c:d5:e2:a2:8b:3e:14:68:53:1f:0d:da:d9:c6:30:
         3c:71:f2:f3:2f:57:02:bd:a3:15:92:38:e3:5e:5d:7d:33:bf:
         a0:be:2e:9a:f6:4f:96:24:ae:83:2c:71:ba:52:4b:fb:ad:e3:
         19:34:2b:4f:0e:a5:fb:25:1f:57:65:33:56:e2:ce:ce:cf:5b:
         42:72:71:8b:5d:dd:38:d6:7c:46:24:1c:64:5e:16:30:d8:11:
         17:7c:45:23:2a:21:f1:05:2c:be:b0:d7:17:b4:a5:13:34:2d:
         6c:58:85:a5:eb:02:18:97:55:80:2f:13:73:e0:7e:3a:d0:9b:
         fe:cd:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:35 2025 by rpki-client on console.sobornost.net