Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3231302e302f32332d3233203d3e20323636323530.roa
File:                     34352e362e3231302e302f32332d3233203d3e20323636323530.roa (raw, json)
Hash identifier:          iQA35epZ5yUnPFFoRwLNTZNXTTLwmVjNYOy/CoKUPe8=
Subject key identifier:   CA:3E:14:7F:B5:0C:48:D9:55:93:3D:98:FB:B8:57:81:69:37:56:66
Certificate issuer:       /CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
Certificate serial:       6F39C8A8317D9BDD3D80963122B667497FCBB0F3
Authority key identifier: A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3231302e302f32332d3233203d3e20323636323530.roa
Signing time:             Thu 17 Apr 2025 17:42:37 +0000
ROA not before:           Thu 17 Apr 2025 17:37:37 +0000
ROA not after:            Thu 16 Apr 2026 17:42:37 +0000
asID:                     266250
IP address blocks:        45.6.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl
                          rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:39:c8:a8:31:7d:9b:dd:3d:80:96:31:22:b6:67:49:7f:cb:b0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
        Validity
            Not Before: Apr 17 17:37:37 2025 GMT
            Not After : Apr 16 17:42:37 2026 GMT
        Subject: CN=CA3E147FB50C48D955933D98FBB8578169375666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1c:2c:d2:3a:4f:20:78:4b:22:e0:94:b4:6a:
                    c5:74:f5:9e:4a:3c:e3:4e:00:0e:41:4b:ab:f9:ca:
                    f9:1d:f0:95:09:ca:e0:43:80:ba:56:2f:b9:c4:ce:
                    31:27:2a:e0:1f:c9:90:ff:bd:96:df:96:49:b3:98:
                    fd:4e:da:a0:b3:36:c1:be:22:14:46:f5:f4:e2:28:
                    2a:1e:02:36:62:b5:bb:6c:83:ad:78:ff:0d:b9:d7:
                    c0:00:e5:05:59:32:74:a0:5e:a9:81:cf:04:52:a5:
                    b8:e8:59:d4:18:ca:13:7f:30:75:7c:37:67:75:53:
                    26:03:0a:2b:8a:02:0b:d8:82:96:38:58:bf:5d:e3:
                    0e:d8:32:ce:30:9f:48:01:26:63:8b:f5:22:6f:c7:
                    52:d6:1c:4c:cd:11:67:19:da:1b:d2:bf:f6:f6:00:
                    21:3c:71:1b:d8:dd:e1:6f:11:f6:54:d5:2c:03:7a:
                    12:ef:74:01:9a:cb:cb:34:eb:a0:38:ff:bd:a5:fc:
                    b8:21:40:d0:77:a8:b2:1b:a0:44:35:24:3b:cd:75:
                    e7:bf:18:7d:53:b7:a0:5f:8e:85:b8:59:05:90:28:
                    36:3c:1c:a3:8c:dc:d5:72:80:16:8b:7b:5d:05:e7:
                    01:2c:f4:80:ab:ac:d8:7a:82:8f:26:6e:b4:b4:eb:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3E:14:7F:B5:0C:48:D9:55:93:3D:98:FB:B8:57:81:69:37:56:66
            X509v3 Authority Key Identifier:
                keyid:A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3231302e302f32332d3233203d3e20323636323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:c5:4f:da:29:38:a1:73:c3:62:df:f2:60:a6:6e:16:95:5c:
         3e:97:49:fc:e7:b7:28:e2:10:20:32:13:4e:e5:08:67:a1:c8:
         b4:42:b2:31:5e:56:c9:34:04:78:17:a0:ed:1d:80:2d:07:95:
         62:9d:8f:fe:2f:6d:e1:32:2b:97:b4:dd:97:27:0d:c4:c7:60:
         f5:a0:9b:a0:81:9f:58:11:08:d9:76:58:cb:17:85:fc:3c:04:
         35:62:89:9c:02:bd:aa:08:f4:40:21:c5:2e:51:81:b1:8d:b9:
         2d:33:3f:c5:5a:05:5c:67:b2:fa:9c:c5:37:e0:bc:2e:49:6a:
         1e:0f:8f:57:f7:d7:48:cc:bb:c9:69:7a:45:6e:19:ea:32:90:
         89:aa:7a:6d:f8:86:27:4c:1f:36:d9:fa:da:05:5e:f4:03:5f:
         f9:45:8a:d1:ad:de:bd:c6:90:b2:98:87:c7:28:9e:23:76:7b:
         3f:5c:62:d1:2d:bb:48:bc:ff:ad:55:12:d2:b5:8b:be:ad:61:
         79:11:65:48:6b:9b:54:27:16:7e:95:b7:01:af:08:0b:ba:cd:
         d4:8e:d6:07:aa:6f:b6:d0:e2:92:6b:88:9b:f4:82:11:4d:5e:
         fd:8d:e7:49:d3:cf:e6:f4:c3:f4:f7:f5:11:95:62:98:70:a9:
         12:99:f2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:43 2025 by rpki-client on console.sobornost.net