Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa
File:                     34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa (raw, json)
Hash identifier:          TwqBD3JT44V/mocHHyh35R8/FBomj7Jp5hEPxyTNDpI=
Subject key identifier:   42:91:CD:94:6C:8C:1E:0F:83:84:29:C6:37:24:F1:92:86:E8:D6:CC
Certificate issuer:       /CN=EEAED5639DA591A226FB7469252567652499ADA3
Certificate serial:       54FCBFF43069565B7E2ABD8C11A4C2E2BE4D5321
Authority key identifier: EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa
Signing time:             Fri 06 Dec 2024 16:59:21 +0000
ROA not before:           Fri 06 Dec 2024 16:54:21 +0000
ROA not after:            Fri 05 Dec 2025 16:59:21 +0000
asID:                     268077
IP address blocks:        45.168.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.crl
                          rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fc:bf:f4:30:69:56:5b:7e:2a:bd:8c:11:a4:c2:e2:be:4d:53:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEAED5639DA591A226FB7469252567652499ADA3
        Validity
            Not Before: Dec  6 16:54:21 2024 GMT
            Not After : Dec  5 16:59:21 2025 GMT
        Subject: CN=4291CD946C8C1E0F838429C63724F19286E8D6CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:6b:5d:72:ed:81:28:db:a9:28:8f:d1:b2:
                    27:0d:11:9c:d2:72:0f:a4:7d:50:a1:9a:77:4b:29:
                    bf:f7:a0:f9:85:e4:06:25:89:d5:50:7f:81:d8:fa:
                    fd:bc:73:c4:93:48:d5:d4:e0:7f:75:52:d7:68:d9:
                    78:45:80:a3:44:b2:9d:58:57:fc:a3:1b:53:23:9e:
                    5e:d3:26:f4:4b:9a:c7:87:1f:f6:2d:be:37:5e:07:
                    ef:a0:c2:24:f3:31:d6:c1:ae:5c:81:16:98:41:9a:
                    99:99:eb:9c:03:fc:79:7b:3a:4f:00:02:a8:96:2d:
                    fc:7f:e3:79:65:ad:df:82:f0:57:c4:57:45:72:7e:
                    7b:b3:3a:c3:5a:6c:a6:d8:40:6a:c0:3d:45:e6:52:
                    e0:ef:6f:ad:83:38:1f:7c:3d:f3:8e:4c:ad:e8:19:
                    53:33:68:b2:07:32:7f:55:73:06:8e:b3:ff:a0:35:
                    b9:2b:ed:63:98:a7:b4:61:fe:42:87:7f:fb:c8:e9:
                    27:2c:98:53:41:4e:cd:f9:94:1c:77:4c:d9:85:24:
                    0c:e1:aa:43:e8:1a:95:bb:fb:f7:dc:21:7d:8b:ec:
                    fa:df:cb:6b:87:82:0a:50:17:7a:d3:65:0e:9b:ab:
                    c9:46:78:6d:e5:48:ed:09:76:ad:57:06:bd:a8:ab:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:91:CD:94:6C:8C:1E:0F:83:84:29:C6:37:24:F1:92:86:E8:D6:CC
            X509v3 Authority Key Identifier:
                keyid:EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:0f:3d:19:34:69:e2:c7:91:f2:9b:14:02:03:1a:42:ff:3a:
         15:48:11:7e:0d:cc:21:29:9d:b9:29:2a:1d:77:9e:f7:6d:2a:
         60:b9:7a:9c:da:3f:a9:a1:34:04:ed:2f:6d:7c:c3:47:7d:6d:
         b5:03:51:27:89:d8:06:93:bc:9f:48:12:42:07:80:0f:d2:1b:
         3e:f9:37:63:9a:9e:b4:b9:cd:47:2e:bb:45:03:57:69:df:d9:
         97:ee:4e:90:24:12:b8:62:07:10:97:38:87:db:7f:79:db:02:
         7d:8f:7c:a8:6b:7d:70:74:07:3a:1e:eb:9b:b0:1d:eb:46:65:
         d5:c1:10:f3:8f:c9:ed:b6:38:72:ae:32:11:20:18:ed:f3:c5:
         d0:5e:5a:23:7a:57:32:28:c4:db:fd:33:33:38:f9:bc:7d:e9:
         4c:0d:27:9f:88:a2:49:51:cf:2d:78:2d:05:00:4d:1e:11:70:
         56:3a:fb:15:34:65:ff:e3:12:dd:ef:d0:3f:13:bf:52:ac:62:
         1d:a3:32:c0:b3:94:f4:81:ac:55:db:c5:96:b4:a9:47:2d:41:
         89:a4:2e:78:14:5c:9f:a7:19:30:17:5a:b0:50:48:8c:5d:29:
         44:e4:4c:bc:85:bb:0c:83:a8:50:25:22:24:da:68:91:3d:c5:
         79:59:d7:de
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVPy/9DBpVlt+Kr2MEaTC4r5NUyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVBRUQ1NjM5REE1OTFBMjI2RkI3NDY5MjUyNTY3NjUy
NDk5QURBMzAeFw0yNDEyMDYxNjU0MjFaFw0yNTEyMDUxNjU5MjFaMDMxMTAvBgNV
BAMTKDQyOTFDRDk0NkM4QzFFMEY4Mzg0MjlDNjM3MjRGMTkyODZFOEQ2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTmtdcu2BKNupKI/RsicNEZzS
cg+kfVChmndLKb/3oPmF5AYlidVQf4HY+v28c8STSNXU4H91Utdo2XhFgKNEsp1Y
V/yjG1Mjnl7TJvRLmseHH/YtvjdeB++gwiTzMdbBrlyBFphBmpmZ65wD/Hl7Ok8A
AqiWLfx/43llrd+C8FfEV0VyfnuzOsNabKbYQGrAPUXmUuDvb62DOB98PfOOTK3o
GVMzaLIHMn9VcwaOs/+gNbkr7WOYp7Rh/kKHf/vI6ScsmFNBTs35lBx3TNmFJAzh
qkPoGpW7+/fcIX2L7Prfy2uHggpQF3rTZQ6bq8lGeG3lSO0Jdq1XBr2oq4DVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQpHNlGyMHg+DhCnGNyTxkobo1swwHwYDVR0j
BBgwFoAU7q7VY52lkaIm+3RpJSVnZSSZraMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENOTWJTUHU4cE01RGdNVExmdEd1Rk41SnVwZVFubkxRMnAzbzdiSHVR
djcvMS9FRUFFRDU2MzlEQTU5MUEyMjZGQjc0NjkyNTI1Njc2NTI0OTlBREEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFQUVENTYzOURBNTkxQTIy
NkZCNzQ2OTI1MjU2NzY1MjQ5OUFEQTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDTk1iU1B1OHBNNURnTVRMZnRHdUZONUp1cGVRbm5MUTJwM283Ykh1UXY3LzEv
MzQzNTJlMzEzNjM4MmUzMTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqKgwDQYJKoZIhvcNAQELBQADggEBAMUPPRk0
aeLHkfKbFAIDGkL/OhVIEX4NzCEpnbkpKh13nvdtKmC5epzaP6mhNATtL218w0d9
bbUDUSeJ2AaTvJ9IEkIHgA/SGz75N2OanrS5zUcuu0UDV2nf2ZfuTpAkErhiBxCX
OIfbf3nbAn2PfKhrfXB0Bzoe65uwHetGZdXBEPOPye22OHKuMhEgGO3zxdBeWiN6
VzIoxNv9MzM4+bx96UwNJ5+IoklRzy14LQUATR4RcFY6+xU0Zf/jEt3v0D8Tv1Ks
Yh2jMsCzlPSBrFXbxZa0qUctQYmkLngUXJ+nGTAXWrBQSIxdKUTkTLyFuwyDqFAl
IiTaaJE9xXlZ194=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:10 2025 by rpki-client on console.sobornost.net