Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/34352e3138392e3136332e302f32342d3234203d3e20323639373034.roa
File:                     34352e3138392e3136332e302f32342d3234203d3e20323639373034.roa (raw, json)
Hash identifier:          XvKHwTucpL6V1vqjhjUuSGKACFLp8zP1w8iCVngUczg=
Subject key identifier:   6E:56:98:CE:71:1B:C4:49:32:5E:0A:91:C3:A3:18:85:1D:B6:81:80
Certificate issuer:       /CN=B0C3C6B983747F871BB1AE8CE992EAC776B76AB3
Certificate serial:       7E14D7CE7F13A33BAAC252227A6A68A08AD3ADA0
Authority key identifier: B0:C3:C6:B9:83:74:7F:87:1B:B1:AE:8C:E9:92:EA:C7:76:B7:6A:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/34352e3138392e3136332e302f32342d3234203d3e20323639373034.roa
Signing time:             Tue 22 Apr 2025 19:50:25 +0000
ROA not before:           Tue 22 Apr 2025 19:45:25 +0000
ROA not after:            Tue 21 Apr 2026 19:50:25 +0000
asID:                     269704
IP address blocks:        45.189.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.crl
                          rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:14:d7:ce:7f:13:a3:3b:aa:c2:52:22:7a:6a:68:a0:8a:d3:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0C3C6B983747F871BB1AE8CE992EAC776B76AB3
        Validity
            Not Before: Apr 22 19:45:25 2025 GMT
            Not After : Apr 21 19:50:25 2026 GMT
        Subject: CN=6E5698CE711BC449325E0A91C3A318851DB68180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:ba:dc:82:57:e1:70:cc:44:0d:b6:18:16:
                    6a:dd:c1:f8:51:d6:e3:d1:a4:04:81:04:a1:b1:28:
                    e8:d6:b2:8d:b8:16:2a:8e:3c:ec:23:b8:f1:fc:55:
                    64:3f:47:39:2a:74:9b:98:f7:ed:cd:45:cb:51:5e:
                    3c:0f:54:f8:aa:04:ae:16:36:1c:a6:a8:b7:1f:e4:
                    c6:f7:f8:47:9a:c1:ba:d7:06:1d:b8:e7:1d:ba:c0:
                    29:d8:b9:a7:82:1c:06:b4:ae:f3:3a:76:a1:6a:b0:
                    f3:7d:52:d3:ea:e4:22:9d:2a:b2:ac:86:0e:61:fd:
                    bd:af:66:c8:56:b6:4e:b6:da:52:43:fc:a5:f9:49:
                    26:e1:50:a1:dd:9d:37:f9:02:f4:c7:c6:4b:85:9a:
                    29:15:71:81:df:c3:26:fe:d6:eb:f8:3d:9b:ee:07:
                    4e:7a:0f:b6:d4:38:74:75:7f:a2:55:00:f4:93:06:
                    1d:81:ce:21:cc:ef:cb:88:76:05:62:ef:29:de:e0:
                    4c:fd:66:f9:f7:ea:ab:f6:9d:86:e5:d9:9e:9d:52:
                    81:c3:5d:1f:49:7d:68:27:29:b2:42:48:b6:be:33:
                    fc:0c:9c:2e:c1:43:6e:53:4d:6c:05:2c:c6:cc:d4:
                    67:37:a7:57:42:79:59:e1:c2:a9:0f:25:17:6b:f3:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:56:98:CE:71:1B:C4:49:32:5E:0A:91:C3:A3:18:85:1D:B6:81:80
            X509v3 Authority Key Identifier:
                keyid:B0:C3:C6:B9:83:74:7F:87:1B:B1:AE:8C:E9:92:EA:C7:76:B7:6A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/34352e3138392e3136332e302f32342d3234203d3e20323639373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:0f:ec:1f:2f:df:d1:55:60:e0:7f:b3:af:11:eb:ca:b6:39:
         4e:d3:9b:16:4c:41:fe:6f:34:8a:57:7c:b4:96:7d:dc:54:73:
         6c:4c:a3:4e:93:cb:bb:c9:e8:13:dc:28:c2:f4:32:c0:53:95:
         b7:83:d7:fe:8a:3c:eb:4a:17:77:0e:df:9f:b9:15:da:9a:bc:
         68:07:70:3b:15:37:40:27:79:8e:72:11:d9:bc:cc:0e:32:29:
         3b:9a:0e:d0:11:b4:27:a8:e3:78:2d:70:f4:7f:49:1c:0e:57:
         77:6a:7e:d1:d5:14:42:3f:b0:19:ff:08:93:dd:20:8e:f9:c9:
         92:5b:2c:e2:e9:b8:d4:68:d8:fc:34:8b:40:82:67:0c:38:93:
         ac:e6:50:85:0d:d2:52:0c:1b:b5:1a:fe:20:cb:ac:f7:0b:77:
         2e:7f:4c:d3:12:e8:1b:e6:c4:29:aa:22:3a:25:de:7a:17:df:
         34:44:97:22:c4:19:da:a3:de:a4:73:24:50:db:fa:46:24:4c:
         35:f2:d3:b3:8c:fb:9e:df:ec:37:be:48:36:cd:71:a7:fc:78:
         eb:0f:c1:c0:33:9d:b3:69:fa:eb:ca:55:73:97:0a:bb:fc:8e:
         ff:67:c6:89:20:6d:e6:29:1e:df:70:8e:e3:93:89:80:17:ac:
         d9:e1:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:20 2025 by rpki-client on console.sobornost.net