Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32322d3232203d3e20323634393936.roa
File:                     34352e3137392e3132382e302f32322d3232203d3e20323634393936.roa (raw, json)
Hash identifier:          ZAgKEDX8CdWHLrQNihNTl6c7Re50ydqYl2NwVUewhjM=
Subject key identifier:   59:2E:41:F6:DC:2A:C8:CD:48:4C:A5:A9:57:3B:1E:53:57:7D:22:D1
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       79078ECCD60675F999FF92410CB393FBBD66A0A8
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32322d3232203d3e20323634393936.roa
Signing time:             Thu 06 Mar 2025 08:50:10 +0000
ROA not before:           Thu 06 Mar 2025 08:45:10 +0000
ROA not after:            Thu 05 Mar 2026 08:50:10 +0000
asID:                     264996
IP address blocks:        45.179.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:07:8e:cc:d6:06:75:f9:99:ff:92:41:0c:b3:93:fb:bd:66:a0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Mar  6 08:45:10 2025 GMT
            Not After : Mar  5 08:50:10 2026 GMT
        Subject: CN=592E41F6DC2AC8CD484CA5A9573B1E53577D22D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:c9:9f:dd:7b:32:56:ad:2a:53:5e:d1:2b:
                    8b:db:72:e3:c5:10:c1:d2:36:49:5b:87:c4:3c:92:
                    e2:5d:ad:81:b0:99:8f:d9:b3:90:34:65:f8:29:40:
                    d3:98:b3:84:85:53:ce:3b:a9:64:a5:bc:cb:15:06:
                    f3:c5:e5:68:a3:42:7a:ce:90:78:94:f2:1f:46:66:
                    69:77:d5:d3:e9:26:ae:41:b2:dd:fb:d9:74:1a:93:
                    a2:84:bc:da:b5:83:d7:6f:15:86:1a:06:2d:3a:46:
                    ae:0a:69:ff:cf:ee:9b:3a:51:f6:6f:08:0c:e5:6f:
                    3b:f6:4c:85:0e:41:13:af:d7:f3:fa:b1:2c:49:cd:
                    ed:8d:f0:4f:96:84:21:16:ef:ec:ae:ee:f5:04:44:
                    8f:52:c7:cf:38:fa:0e:bb:69:70:90:7d:2c:b7:98:
                    55:60:f2:82:ce:5e:54:77:e6:fa:f1:a2:83:5f:62:
                    b0:4b:55:b4:42:f3:71:4e:e1:77:1b:0d:41:c8:e1:
                    c3:1c:a4:46:75:63:c9:8b:4a:bb:39:f3:68:d2:21:
                    0d:4a:f4:f0:c2:1e:72:63:57:8b:43:11:51:fc:e8:
                    47:5d:16:b2:3b:99:6f:d0:eb:f0:a2:0d:0b:30:9b:
                    01:1b:7a:e2:50:51:f3:a1:38:c2:7b:1d:1f:b4:9c:
                    fc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2E:41:F6:DC:2A:C8:CD:48:4C:A5:A9:57:3B:1E:53:57:7D:22:D1
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32322d3232203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:22:ad:97:3d:10:e6:1f:de:41:90:1c:6a:6f:3d:65:32:c4:
         ae:b0:23:68:91:2c:fd:fd:46:d2:98:ae:d8:95:af:b2:05:8f:
         34:e8:b3:11:7f:77:3e:68:aa:2d:3a:4c:fa:df:7d:b7:74:35:
         ed:f9:b4:86:49:e5:ac:80:1c:a9:90:b9:2c:bb:90:05:e3:b4:
         39:18:02:6a:47:1b:11:9a:df:89:12:e9:84:c2:ce:da:99:37:
         22:8f:21:96:44:2a:cc:8a:e9:9e:d1:2e:43:d6:07:8b:d8:5d:
         72:0f:1d:07:ce:91:f0:82:99:d8:b1:fc:38:a2:39:5e:fe:29:
         68:99:ce:c1:ec:b3:46:d9:1c:64:07:6e:ba:35:80:9c:73:f7:
         9e:3e:cf:ab:27:2b:3d:a7:92:b2:ac:b4:e6:aa:e2:1e:87:39:
         e0:65:08:42:fc:8c:05:79:6d:f0:7a:53:73:40:4e:72:c8:88:
         c7:63:d4:7b:c4:8a:e0:c0:74:2d:21:b3:fc:f9:66:5e:79:75:
         1f:11:9e:e5:48:6c:41:dc:9e:6f:61:1e:2e:73:f6:b9:c4:63:
         50:1a:4d:56:08:f1:5d:ff:af:3c:0f:07:9c:b7:b0:9f:c1:cc:
         13:91:d1:65:9f:d2:3b:b8:aa:74:d0:e8:44:b0:e3:ae:74:df:
         64:62:bb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:55 2025 by rpki-client on console.sobornost.net