Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e3232362e35362e302f32332d3234203d3e203532353733.roa
File:                     34352e3232362e35362e302f32332d3234203d3e203532353733.roa (raw, json)
Hash identifier:          Yt9/CyukffdPiKXWXqi3/SEVxNIriznp3DhzHQAdckw=
Subject key identifier:   CD:94:98:9F:41:D4:E9:1C:67:B6:41:CA:47:10:63:7F:94:88:6D:07
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       5EF1182419618302E422804AE3A782837DEE45B7
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e3232362e35362e302f32332d3234203d3e203532353733.roa
Signing time:             Thu 20 Mar 2025 13:36:19 +0000
ROA not before:           Thu 20 Mar 2025 13:31:19 +0000
ROA not after:            Thu 19 Mar 2026 13:36:19 +0000
asID:                     52573
IP address blocks:        45.226.56.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f1:18:24:19:61:83:02:e4:22:80:4a:e3:a7:82:83:7d:ee:45:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Mar 20 13:31:19 2025 GMT
            Not After : Mar 19 13:36:19 2026 GMT
        Subject: CN=CD94989F41D4E91C67B641CA4710637F94886D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:f6:5b:4d:8d:8a:29:01:24:89:f8:26:d2:
                    1c:f0:f3:7c:da:e1:f0:53:98:72:8b:9e:b0:1d:b8:
                    71:ee:ec:ab:bd:be:f0:87:2f:1e:cc:02:4b:36:9e:
                    55:2b:0c:c7:39:da:db:a4:00:26:9b:d4:da:4d:8d:
                    b0:cf:f3:92:2c:5c:9f:49:1c:e6:f4:64:a2:ec:6a:
                    c5:43:f6:38:ad:8c:ac:78:df:f8:87:d7:4c:6c:ac:
                    1a:59:cf:a4:9b:0b:02:43:d6:ae:6e:9a:15:15:5f:
                    c8:09:2d:95:00:9b:6d:c7:f9:95:94:67:66:b6:79:
                    96:2a:b1:6c:4e:db:2d:6a:37:d4:2b:27:3d:21:cc:
                    94:e4:1e:92:fd:27:46:3d:40:45:16:33:f5:af:5c:
                    61:6f:b9:eb:06:e7:8c:d6:81:d2:71:7e:0c:ce:6b:
                    e0:4f:b4:9c:1b:7d:94:1e:c0:3b:1a:f8:f5:d3:6a:
                    fb:7d:4d:c1:20:4f:65:cb:37:b0:a0:55:67:92:f3:
                    d1:e5:a0:ef:c5:40:66:28:02:6c:41:92:be:86:05:
                    25:64:67:61:0a:bf:de:26:c9:da:16:aa:25:d9:5e:
                    b7:04:d3:e6:55:dd:e1:c2:84:44:83:36:23:41:de:
                    82:7e:a3:4e:c2:23:da:c8:b2:9d:d5:99:9a:66:36:
                    fe:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:94:98:9F:41:D4:E9:1C:67:B6:41:CA:47:10:63:7F:94:88:6D:07
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e3232362e35362e302f32332d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:8d:ca:af:6b:48:b9:84:c8:d0:24:09:09:dc:63:3a:66:02:
         48:84:64:a4:e7:74:b2:6e:48:9d:57:43:0a:5b:16:8f:79:a9:
         e0:0b:aa:68:7f:40:1d:70:5c:19:4d:86:d5:e6:50:ef:69:a6:
         70:db:67:39:17:55:92:2d:77:d2:b2:3d:94:27:e9:ed:83:ec:
         a3:db:ae:03:33:2f:57:0a:6a:0c:c1:65:13:c7:ed:8b:59:20:
         6f:ad:a7:b7:3b:41:cd:c7:04:c4:6c:d9:c2:b1:ff:65:bd:a1:
         5d:4e:10:9e:8b:8a:4a:42:fd:0e:0e:ad:64:fe:87:15:0e:82:
         28:41:19:33:13:e3:8a:5d:6e:f8:48:50:5a:6e:2b:a7:c6:42:
         c5:95:92:de:e8:54:c7:f4:f0:b2:d2:9b:42:77:89:9f:35:9d:
         4a:fd:d2:0f:ac:28:16:50:34:08:ef:6f:39:32:5d:80:45:27:
         46:dc:d9:62:ae:a7:21:a4:98:67:41:1a:4a:ee:ba:d6:13:87:
         4b:6c:a3:a2:b4:56:ff:f5:5a:06:ca:cc:24:98:fd:e6:c0:46:
         63:a3:f2:29:14:e3:89:03:86:df:43:c0:8d:74:85:bf:2b:bd:
         bb:f0:26:a3:0b:77:cd:47:63:2f:77:41:7b:2f:dc:f2:2f:14:
         dc:29:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:42 2025 by rpki-client on console.sobornost.net