Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231342e302f32332d3233203d3e203631363134.roa
File:                     34352e3233322e3231342e302f32332d3233203d3e203631363134.roa (raw, json)
Hash identifier:          V0uN2aJop4yyuCm41pWlDWjKI+f4JvI7TX/m0+a6nS8=
Subject key identifier:   6C:F3:4E:93:39:03:31:64:92:A4:D0:39:00:AF:B8:24:91:31:57:7B
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       5DFDDB98411946C3B617BA5CE15634D8E951FBEB
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231342e302f32332d3233203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61614
IP address blocks:        45.232.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fd:db:98:41:19:46:c3:b6:17:ba:5c:e1:56:34:d8:e9:51:fb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:84:96:e1:28:68:5a:af:d8:69:6b:7c:7e:
                    ce:a5:49:4d:be:07:56:47:f5:4a:cc:1b:f2:73:b6:
                    d5:c9:dd:4f:92:6b:83:75:1f:cc:3a:a5:54:ff:6e:
                    b4:d4:78:5d:94:d6:21:92:fb:63:39:1b:54:60:c2:
                    9d:58:db:c0:3a:fd:d4:7d:77:09:68:13:32:ce:8a:
                    4c:88:7e:32:90:ce:a7:28:55:72:1a:45:23:75:de:
                    ee:12:a1:b3:58:98:90:1d:a0:0a:13:5a:77:05:df:
                    6b:50:5a:ea:f9:bc:58:91:e7:b2:51:d7:35:35:82:
                    d0:1b:ca:62:47:3f:b5:9b:5d:bf:de:c9:4d:e2:78:
                    17:dc:bd:dc:eb:04:68:73:8f:84:76:e9:11:9a:28:
                    d5:e3:20:af:65:f3:bb:a1:9c:69:03:e1:e7:ed:79:
                    7f:03:18:21:c5:02:bd:7a:21:49:a4:e1:cd:88:cc:
                    d6:45:7d:a1:94:59:db:b1:e8:c8:b3:21:8e:05:9d:
                    27:6b:54:b5:a0:79:2b:b4:24:11:9d:f5:fe:04:6a:
                    20:71:b3:25:74:a6:92:08:a0:d0:b2:c6:01:f3:df:
                    f9:92:3a:e5:41:84:5b:f1:4a:c2:9d:da:cd:46:6f:
                    51:9e:d8:12:92:21:2d:f0:01:d5:80:b3:8d:10:8e:
                    2b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F3:4E:93:39:03:31:64:92:A4:D0:39:00:AF:B8:24:91:31:57:7B
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231342e302f32332d3233203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:4c:5b:5e:7d:9f:3e:56:cc:45:75:ad:bd:ca:37:f3:9a:2a:
         e5:1e:ce:4b:a8:fd:28:1d:ef:45:e3:5a:ce:2d:30:05:d7:db:
         9b:40:d8:00:dd:7c:11:57:f0:6f:d2:d4:3f:93:0c:f9:47:f9:
         fb:f6:89:8b:ab:aa:cd:f9:de:9a:05:a1:bf:24:e2:77:24:44:
         60:f1:fb:a0:c4:36:fd:4e:4e:2f:eb:aa:3a:80:4f:af:15:12:
         17:35:33:dd:58:00:cb:f2:b3:a8:28:63:95:6c:7e:06:b2:f5:
         22:e7:47:14:9e:6f:13:84:67:49:fa:a3:e6:cc:03:f0:39:6c:
         14:a1:70:40:38:fa:31:de:12:f8:1a:15:92:5d:3f:79:df:5f:
         5a:16:cb:83:35:10:a6:e7:7c:b2:55:28:44:84:a6:c3:72:2d:
         05:5d:97:88:35:ba:e6:49:d7:49:19:13:f0:21:69:d4:21:81:
         60:f0:f6:7d:d5:73:5a:b5:e8:4d:13:21:f9:10:0f:17:ce:b3:
         f8:84:4b:42:33:80:01:70:c3:5e:a4:26:2a:64:f3:6e:b8:57:
         b3:ba:68:a4:71:23:6d:a6:41:84:94:b7:ca:10:35:2a:59:a9:
         93:88:6a:86:4a:96:90:b2:ae:84:b9:ee:49:02:4b:17:a9:76:
         47:d1:4b:18
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUXf3bmEEZRsO2F7pc4VY02OlR++swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlFMDExQjM4QjNBNjgxMEMxMERFMjg1RkQ4RDI1NkZB
QkNFREJBRjAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjNGOTg0OTZFMTI4Njg1QUFG
RDg2OTZCN0M3RUNFQTU0OTREQkUwNzU2NDdGNTRBQ0MxQkYyNzNCNkQ1QzlERDRG
OTI2QjgzNzUxRkNDM0FBNTU0RkY2RUI0RDQ3ODVEOTRENjIxOTJGQjYzMzkxQjU0
NjBDMjlENThEQkMwM0FGREQ0N0Q3NzA5NjgxMzMyQ0U4QTRDODg3RTMyOTBDRUE3
Mjg1NTcyMUE0NTIzNzVERUVFMTJBMUIzNTg5ODkwMURBMDBBMTM1QTc3MDVERjZC
NTA1QUVBRjlCQzU4OTFFN0IyNTFENzM1MzU4MkQwMUJDQTYyNDczRkI1OUI1REJG
REVDOTRERTI3ODE3RENCRERDRUIwNDY4NzM4Rjg0NzZFOTExOUEyOEQ1RTMyMEFG
NjVGM0JCQTE5QzY5MDNFMUU3RUQ3OTdGMDMxODIxQzUwMkJEN0EyMTQ5QTRFMUNE
ODhDQ0Q2NDU3REExOTQ1OURCQjFFOEM4QjMyMThFMDU5RDI3NkI1NEI1QTA3OTJC
QjQyNDExOURGNUZFMDQ2QTIwNzFCMzI1NzRBNjkyMDhBMEQwQjJDNjAxRjNERkY5
OTIzQUU1NDE4NDVCRjE0QUMyOUREQUNENDY2RjUxOUVEODEyOTIyMTJERjAwMUQ1
ODBCMzhEMTA4RTJCRDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs/mEluEoaFqv2GlrfH7OpUlNvgdWR/VKzBvyc7bVyd1PkmuDdR/M
OqVU/2601HhdlNYhkvtjORtUYMKdWNvAOv3UfXcJaBMyzopMiH4ykM6nKFVyGkUj
dd7uEqGzWJiQHaAKE1p3Bd9rUFrq+bxYkeeyUdc1NYLQG8piRz+1m12/3slN4ngX
3L3c6wRoc4+EdukRmijV4yCvZfO7oZxpA+Hn7Xl/AxghxQK9eiFJpOHNiMzWRX2h
lFnbsejIsyGOBZ0na1S1oHkrtCQRnfX+BGogcbMldKaSCKDQssYB89/5kjrlQYRb
8UrCndrNRm9RntgSkiEt8AHVgLONEI4r2QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FGzzTpM5AzFkkqTQOQCvuCSRMVd7MB8GA1UdIwQYMBaAFKngEbOLOmgQwQ3ihf2N
JW+rztuvMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJuaDlhZDJjNnZTamFQ
NWpUd1RIUXpDRXZLdm9XY3gxSnozaWtIU1NnYXlGLzEvQTlFMDExQjM4QjNBNjgx
MEMxMERFMjg1RkQ4RDI1NkZBQkNFREJBRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BOUUwMTFCMzhCM0E2ODEwQzEwREUyODVGRDhEMjU2RkFCQ0VE
QkFGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ybmg5YWQyYzZ2U2phUDVqVHdU
SFF6Q0V2S3ZvV2N4MUp6M2lrSFNTZ2F5Ri8xLzM0MzUyZTMyMzMzMjJlMzIzMTM0
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTM2MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3o
1jANBgkqhkiG9w0BAQsFAAOCAQEAyExbXn2fPlbMRXWtvco385oq5R7OS6j9KB3v
ReNazi0wBdfbm0DYAN18EVfwb9LUP5MM+Uf5+/aJi6uqzfnemgWhvyTidyREYPH7
oMQ2/U5OL+uqOoBPrxUSFzUz3VgAy/KzqChjlWx+BrL1IudHFJ5vE4RnSfqj5swD
8DlsFKFwQDj6Md4S+BoVkl0/ed9fWhbLgzUQpud8slUoRISmw3ItBV2XiDW65knX
SRkT8CFp1CGBYPD2fdVzWrXoTRMh+RAPF86z+IRLQjOAAXDDXqQmKmTzbrhXs7po
pHEjbaZBhJS3yhA1Klmpk4hqhkqWkLKuhLnuSQJLF6l2R9FLGA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:34 2025 by rpki-client on console.sobornost.net