Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3231312e302f32342d3234203d3e20323636323530.roa
File:                     34352e362e3231312e302f32342d3234203d3e20323636323530.roa (raw, json)
Hash identifier:          JTL2cw0v9E1LrZPYJwCbOhFw+YR/GMEKif8Zb33ZP6M=
Subject key identifier:   92:6D:34:6B:BB:B3:53:FE:91:96:69:88:1B:EB:A3:A3:8A:E4:AF:EE
Certificate issuer:       /CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
Certificate serial:       1D5063D601F4B8594E0A43356C597DE501410E2C
Authority key identifier: A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3231312e302f32342d3234203d3e20323636323530.roa
Signing time:             Fri 18 Apr 2025 17:42:39 +0000
ROA not before:           Fri 18 Apr 2025 17:37:39 +0000
ROA not after:            Fri 17 Apr 2026 17:42:39 +0000
asID:                     266250
IP address blocks:        45.6.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl
                          rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:50:63:d6:01:f4:b8:59:4e:0a:43:35:6c:59:7d:e5:01:41:0e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
        Validity
            Not Before: Apr 18 17:37:39 2025 GMT
            Not After : Apr 17 17:42:39 2026 GMT
        Subject: CN=926D346BBBB353FE919669881BEBA3A38AE4AFEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:aa:50:e6:12:c3:1f:a4:59:a4:d4:02:e6:
                    ec:ea:54:22:de:5a:ff:57:d9:07:7c:be:2e:6c:85:
                    47:10:24:c5:85:f7:de:13:9c:d5:43:4f:73:9b:7d:
                    70:31:8e:ec:30:2e:5a:7e:6f:3e:93:2b:e3:a8:71:
                    ad:2a:ac:96:2b:ce:99:83:79:22:b4:be:a9:be:bf:
                    bc:04:71:b2:c4:0f:34:fd:95:fb:9a:09:ce:6b:49:
                    0a:8e:68:86:cb:c5:18:ab:a3:50:74:c2:2c:74:bc:
                    2c:f6:be:6b:c8:57:14:91:22:f9:fa:f3:69:b4:3d:
                    1d:dc:f3:8f:1d:0d:27:08:a4:b7:d4:2c:a4:71:f1:
                    b3:ff:ad:30:5c:df:57:15:91:06:45:4e:a4:b4:1b:
                    5d:49:51:44:58:6e:7f:e6:ae:9f:65:e7:76:ea:1e:
                    2a:42:0e:09:47:a3:15:ef:fe:5b:ed:f1:ae:84:41:
                    07:e9:46:e6:e1:e8:3a:e6:77:45:d1:42:ca:f2:34:
                    6b:f4:fa:94:8f:f1:d6:2b:d8:2e:58:3f:c1:23:7e:
                    c1:6a:69:cc:7c:01:e0:31:25:21:e6:60:71:ee:cb:
                    a8:8d:e0:94:ca:56:50:65:5b:63:89:64:51:0c:6a:
                    bd:e8:2c:13:a2:90:48:72:a2:b9:87:6b:57:16:f4:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6D:34:6B:BB:B3:53:FE:91:96:69:88:1B:EB:A3:A3:8A:E4:AF:EE
            X509v3 Authority Key Identifier:
                keyid:A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3231312e302f32342d3234203d3e20323636323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:a7:1c:98:c0:57:29:d4:1a:e4:df:4c:16:34:ad:33:29:df:
         8f:64:ff:14:07:ae:8f:e5:79:d9:7d:bd:08:79:33:83:1e:b1:
         d7:2e:d0:da:71:84:54:f0:25:47:bf:90:65:ff:b2:63:87:c3:
         93:90:ae:b7:d7:59:ab:c1:7e:26:b1:e6:55:71:e9:e4:4d:7d:
         e5:71:b1:68:30:07:df:ab:a0:9b:b7:5b:c0:8c:1d:b0:94:1d:
         85:6e:13:8d:82:af:ad:6a:26:00:a7:2d:da:7d:61:98:49:a3:
         78:a6:52:e9:99:39:a9:c7:e0:30:bd:5c:74:57:6c:73:54:7f:
         7e:b3:e6:68:3e:3b:cb:94:4c:e1:93:be:86:5e:87:7e:0c:50:
         d3:cb:e5:e3:be:aa:41:0c:62:4e:5c:c2:9f:6f:ba:08:49:26:
         16:7f:4f:d3:0e:57:ca:c2:a9:47:b2:a1:0d:c1:11:c6:cb:12:
         34:73:65:49:07:60:0b:fd:1e:36:fd:22:42:d4:92:c0:9a:dc:
         77:6d:92:8c:85:c2:f7:c4:3a:db:c5:bc:07:66:59:2d:97:2c:
         1c:e4:18:95:65:aa:2a:d1:f4:b0:ab:5e:a7:de:f5:69:35:88:
         00:b7:5c:09:d3:5d:a1:c3:34:15:41:8a:4d:c4:7a:68:33:4b:
         93:d2:29:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:43 2025 by rpki-client on console.sobornost.net