Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131362e302f32322d3234203d3e20323636353834.roa
File:                     34352e372e3131362e302f32322d3234203d3e20323636353834.roa (raw, json)
Hash identifier:          nFdRqFDzIu4P92HIBvjFRyju0x50HDwPMP1PnelSqMU=
Subject key identifier:   9A:72:60:B7:FD:E4:F5:44:46:0D:7B:3F:61:C8:FC:1A:18:27:00:6F
Certificate issuer:       /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
Certificate serial:       1BD1B302138B95B864A373B6248557D8A063EE4C
Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131362e302f32322d3234203d3e20323636353834.roa
Signing time:             Thu 06 Mar 2025 20:24:37 +0000
ROA not before:           Thu 06 Mar 2025 20:19:37 +0000
ROA not after:            Thu 05 Mar 2026 20:24:37 +0000
asID:                     266584
IP address blocks:        45.7.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl
                          rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d1:b3:02:13:8b:95:b8:64:a3:73:b6:24:85:57:d8:a0:63:ee:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
        Validity
            Not Before: Mar  6 20:19:37 2025 GMT
            Not After : Mar  5 20:24:37 2026 GMT
        Subject: CN=9A7260B7FDE4F544460D7B3F61C8FC1A1827006F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:9a:9f:64:fd:b5:9a:6d:23:b5:0b:d3:38:
                    14:65:1c:98:8b:e2:02:66:72:8a:60:31:dc:8c:95:
                    29:b6:82:f7:38:3f:8d:a4:97:95:1b:e3:cf:09:67:
                    46:87:72:6d:4a:a5:f5:92:24:3e:15:a8:77:a4:cc:
                    dc:0f:5a:c0:80:6a:ec:9e:9a:b7:43:97:a1:9c:49:
                    14:6f:19:96:2b:31:6f:b3:e5:dc:9f:16:c3:17:26:
                    b2:1c:16:c6:77:8a:ba:13:79:55:ca:31:d3:d1:0c:
                    6c:3a:05:66:46:39:94:04:e3:a3:6a:bb:7e:4a:ee:
                    f6:a6:f6:55:9f:8e:1f:9e:a8:5d:ea:ba:c8:90:4e:
                    74:98:80:7a:97:f7:4d:7b:9f:71:b2:c2:8c:cf:83:
                    f6:e8:18:52:6b:31:97:a4:a7:2d:9c:44:1a:d9:3c:
                    de:0b:17:a8:a6:c6:b3:56:80:34:53:b5:e1:31:6e:
                    e0:9a:42:05:63:25:7f:cb:a4:e1:db:76:12:0d:8e:
                    1d:34:b9:bb:2b:a4:0b:4e:4b:e8:68:dd:da:91:3f:
                    1c:69:fa:a3:b6:a5:aa:9d:10:46:49:ff:9f:cb:c4:
                    8f:06:fa:90:7a:ec:33:6f:9c:11:ea:8b:44:b3:a4:
                    a9:22:cf:6e:5c:16:5d:9b:43:c5:58:25:04:eb:47:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:72:60:B7:FD:E4:F5:44:46:0D:7B:3F:61:C8:FC:1A:18:27:00:6F
            X509v3 Authority Key Identifier:
                keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131362e302f32322d3234203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:57:7e:ce:26:4e:44:68:a1:f4:a8:55:79:a1:6c:f0:7c:1d:
         3f:c5:54:d7:0c:1c:d9:a4:9f:55:a7:17:be:94:66:2d:6c:89:
         17:2e:8e:62:3d:28:e4:37:d7:e8:d9:d7:09:af:5b:26:5e:3d:
         c2:01:10:8d:13:3d:4f:02:d0:d8:0f:72:9f:85:7f:42:8b:66:
         aa:d0:e5:78:97:32:5f:59:2d:ec:dd:9b:93:60:f2:b4:e3:db:
         b5:9e:fc:ca:76:75:dc:89:67:5d:3a:d3:50:bb:b8:98:44:a6:
         f8:37:bf:83:03:e4:d3:2b:dc:27:42:ee:8d:1a:94:f9:92:ad:
         5b:a2:28:05:0b:35:73:b0:7b:da:58:80:93:c6:d8:4e:a7:0a:
         93:41:85:21:6c:8a:8f:e7:27:1b:0d:3d:4a:ff:fa:9b:ad:e3:
         73:f7:35:24:d9:60:af:36:ad:f0:06:39:5b:7c:c9:b1:d1:7c:
         f5:a5:ad:d4:88:cd:d2:a2:f8:f4:b6:4d:b2:a4:c4:be:a9:66:
         a1:a0:21:50:1c:af:c9:5e:c7:0d:84:42:df:f7:44:64:3f:df:
         32:b2:a0:a9:e3:a4:a0:c0:29:58:da:0a:1f:df:48:af:d1:bf:
         b4:6a:8e:a3:bd:cc:41:84:97:98:72:22:bf:16:a0:76:39:89:
         6d:12:7e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:58 2025 by rpki-client on console.sobornost.net