Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/34352e3136322e33362e302f32322d3234203d3e20323638343934.roa
File:                     34352e3136322e33362e302f32322d3234203d3e20323638343934.roa (raw, json)
Hash identifier:          308U9YuTQinc/6h6pROcQyW/yhUpaoAEuJenvQ6ZLxc=
Subject key identifier:   45:08:2B:57:0C:C9:3A:88:02:0D:B1:45:04:98:26:40:D7:17:B6:EA
Certificate issuer:       /CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
Certificate serial:       6A98575CF58EA0E3E4E154A8480DE396EFD1F709
Authority key identifier: 67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/34352e3136322e33362e302f32322d3234203d3e20323638343934.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     268494
IP address blocks:        45.162.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl
                          rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 21:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:98:57:5c:f5:8e:a0:e3:e4:e1:54:a8:48:0d:e3:96:ef:d1:f7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5f:2b:ec:a7:a9:7d:6b:46:3e:43:1f:4e:4b:
                    e5:12:09:54:ba:41:49:14:69:ab:72:48:3e:0c:45:
                    0c:af:8f:d2:da:cf:2e:db:09:db:13:75:d1:1a:28:
                    df:4a:6b:c3:a1:11:12:6b:9a:7e:c4:ba:23:83:85:
                    f4:20:a5:3b:b0:fa:6f:81:2a:98:34:08:50:40:c1:
                    7d:df:e5:2d:f0:36:fd:45:df:cf:e9:bf:b8:3e:26:
                    2c:61:ec:d2:7e:e0:24:9b:70:93:e9:d4:59:39:7f:
                    6c:cb:3d:af:76:53:7d:46:f7:4a:6b:f6:39:d9:2b:
                    60:28:e1:f5:71:ba:c5:33:e5:d9:4a:59:57:57:df:
                    f6:c9:20:07:39:1f:3b:89:51:02:5f:81:08:4e:74:
                    c9:14:fc:68:93:0e:70:58:a2:5c:50:ac:e9:5e:3f:
                    72:49:88:5b:98:fd:b2:44:93:29:6e:4c:ba:b9:14:
                    6e:f0:c8:b6:76:ab:56:7b:81:0d:f9:ce:7c:24:1a:
                    8e:5e:25:5a:b1:4a:9a:fe:55:0e:64:25:8b:93:ab:
                    3b:8e:4a:51:be:21:94:fa:d1:54:9b:6e:a7:c2:e9:
                    f5:d1:a1:dc:e3:9a:e6:10:64:44:49:b1:72:93:2d:
                    4b:b9:ea:e4:5a:76:af:3d:d0:ef:bc:38:9d:55:94:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:08:2B:57:0C:C9:3A:88:02:0D:B1:45:04:98:26:40:D7:17:B6:EA
            X509v3 Authority Key Identifier:
                keyid:67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/34352e3136322e33362e302f32322d3234203d3e20323638343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:de:39:91:18:63:ec:75:4d:f8:95:b4:cf:38:aa:4d:7a:e8:
         c0:3e:ab:65:94:bd:7b:a1:49:e2:a4:26:b6:90:47:e6:d1:2b:
         93:a4:a0:cf:fe:68:2f:86:f2:aa:0f:ac:9a:57:d4:d3:45:0f:
         9a:f8:ce:19:6d:39:7d:98:72:8a:10:c6:9a:5c:d1:cb:d5:24:
         c3:95:9d:e3:c3:f3:b1:fa:55:29:e4:51:0d:8e:30:aa:86:95:
         32:90:d7:ba:2e:c4:5e:61:c1:43:b6:f3:7e:d3:3c:2c:55:cb:
         52:b7:9e:ec:1d:8d:08:79:81:4e:e9:d6:13:69:de:9b:d0:9c:
         b4:d0:ad:a6:f8:52:36:41:cb:05:59:51:95:ee:fb:79:ee:25:
         30:ef:97:cf:61:cb:dc:6f:9c:c3:d5:e3:40:0c:02:b9:e0:ed:
         7c:6f:29:a9:39:4b:81:64:e2:ac:a4:32:08:a2:72:25:db:67:
         e4:48:5f:71:6e:4b:a6:3a:5e:a1:cb:df:22:05:07:8e:f7:42:
         74:65:e6:a6:68:b4:4a:0d:94:2f:9d:ac:d7:a3:b3:f3:ce:09:
         b6:3f:e1:76:8e:83:96:90:43:3e:78:bc:8e:72:fe:ba:b5:88:
         bf:74:9c:e8:14:9c:1d:b3:ff:fb:7b:22:37:cc:a4:f1:21:14:
         9c:d0:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:10 2025 by rpki-client on console.sobornost.net