Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa
File:                     34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa (raw, json)
Hash identifier:          IBamR1ImfxAtdRGhZS/cxrEyDVg2bsI9t/AMPhzljVg=
Subject key identifier:   B2:9F:77:E7:BD:CD:08:7B:34:7D:A3:0D:61:1E:E4:4F:8C:47:61:5E
Certificate issuer:       /CN=A73D6D578C402A7DD8AED3B5544070906E2FE163
Certificate serial:       368F76216A8449AE3739AD63FA83367531540E3C
Authority key identifier: A7:3D:6D:57:8C:40:2A:7D:D8:AE:D3:B5:54:40:70:90:6E:2F:E1:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa
Signing time:             Thu 06 Mar 2025 06:47:26 +0000
ROA not before:           Thu 06 Mar 2025 06:42:26 +0000
ROA not after:            Thu 05 Mar 2026 06:47:26 +0000
asID:                     269092
IP address blocks:        45.179.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.crl
                          rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8f:76:21:6a:84:49:ae:37:39:ad:63:fa:83:36:75:31:54:0e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73D6D578C402A7DD8AED3B5544070906E2FE163
        Validity
            Not Before: Mar  6 06:42:26 2025 GMT
            Not After : Mar  5 06:47:26 2026 GMT
        Subject: CN=B29F77E7BDCD087B347DA30D611EE44F8C47615E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:43:58:52:cf:57:89:c6:2b:58:ea:b9:42:
                    30:92:72:43:6e:8c:7a:5a:ac:f4:67:a9:ce:3f:a3:
                    4c:18:15:20:8c:06:7a:5f:4d:57:44:38:98:a2:f4:
                    11:6e:63:c8:8c:ba:6d:41:69:d3:6c:70:04:12:11:
                    69:ff:aa:36:7e:f6:41:cc:fd:81:cf:f3:24:a4:23:
                    90:55:30:7b:2b:3f:08:7c:82:6e:46:4f:62:6a:d9:
                    26:41:22:59:10:58:f0:67:05:13:1f:24:14:72:70:
                    3c:3f:1a:7e:c3:30:32:3a:12:d2:95:f0:8a:6d:2d:
                    e5:eb:fa:1a:c2:9c:eb:56:c8:7e:b7:85:62:ba:96:
                    d8:5f:61:77:23:f2:fb:72:52:f8:24:13:47:ac:f8:
                    32:49:f0:73:e3:8c:00:04:04:11:0b:85:f1:02:0e:
                    a6:dc:61:25:07:36:c1:d6:7e:23:99:b3:f2:fc:fa:
                    73:44:9f:b2:44:4c:06:8d:be:58:dd:d8:11:dd:c9:
                    e8:24:db:47:b3:31:d0:e0:4d:8e:22:fb:1f:1f:aa:
                    0e:86:31:43:c6:2d:39:58:05:96:37:4f:fe:d9:bc:
                    87:e3:d3:a1:99:36:07:90:08:84:e2:cc:c4:cd:10:
                    1c:44:25:03:b7:6d:50:5a:5d:d4:f8:d6:7d:26:40:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9F:77:E7:BD:CD:08:7B:34:7D:A3:0D:61:1E:E4:4F:8C:47:61:5E
            X509v3 Authority Key Identifier:
                keyid:A7:3D:6D:57:8C:40:2A:7D:D8:AE:D3:B5:54:40:70:90:6E:2F:E1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:60:60:10:90:e6:3d:b8:be:9f:61:00:66:d2:e9:3f:7b:40:
         ff:83:4a:d5:54:54:ed:80:61:eb:84:29:c4:02:88:83:46:4e:
         b7:53:12:3a:22:2e:9a:90:61:95:f2:58:dd:ea:7f:04:31:91:
         fe:84:c1:76:54:3d:7b:95:5c:b5:55:db:32:68:42:22:dc:5c:
         cf:2d:ef:99:63:62:c4:61:33:9f:bb:67:27:6e:a5:c9:85:d1:
         b5:93:59:80:3d:95:bb:56:8b:76:1a:06:b1:e2:b5:86:7a:2b:
         7e:c3:fd:95:c0:54:74:5b:c6:9a:32:72:f8:98:1b:7e:2b:01:
         52:32:86:71:ec:d2:51:96:23:75:a0:32:c5:b0:41:fe:d3:d1:
         fe:f8:1d:bf:84:1e:3d:e8:54:49:57:df:14:84:65:dd:c9:fd:
         03:1d:87:39:12:7d:c6:90:a3:34:ea:60:20:20:16:6d:a7:c5:
         5d:64:8a:0e:67:48:3a:51:d5:2f:77:9f:c7:ec:2f:32:a5:3f:
         59:5d:2c:dd:6e:16:6d:23:d7:21:7a:1b:2e:21:89:bb:9d:dd:
         4a:43:30:3b:5e:31:2e:9e:3e:63:30:b9:87:5e:61:d1:d5:54:
         12:f9:99:4f:81:e4:a0:62:4d:21:09:a5:fa:1d:d2:ac:6f:e9:
         59:fc:d5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:09 2025 by rpki-client on console.sobornost.net