Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/34352e3232352e3231302e302f32342d3332203d3e20323636393732.roa
File:                     34352e3232352e3231302e302f32342d3332203d3e20323636393732.roa (raw, json)
Hash identifier:          LZEIITnF1CA3NGwnYwFAPjoIPJRqZ/hlSABw34/oscY=
Subject key identifier:   B5:F4:E8:10:63:DB:EA:B4:E1:7A:02:43:92:37:DA:15:DB:EA:B1:5D
Certificate issuer:       /CN=636E414FA84D71600AE3616725B19B3EA6BCD75B
Certificate serial:       381EA195C968807492CA91739824246483BC3E13
Authority key identifier: 63:6E:41:4F:A8:4D:71:60:0A:E3:61:67:25:B1:9B:3E:A6:BC:D7:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636E414FA84D71600AE3616725B19B3EA6BCD75B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/34352e3232352e3231302e302f32342d3332203d3e20323636393732.roa
Signing time:             Mon 31 Mar 2025 14:36:15 +0000
ROA not before:           Mon 31 Mar 2025 14:31:15 +0000
ROA not after:            Mon 30 Mar 2026 14:36:15 +0000
asID:                     266972
IP address blocks:        45.225.210.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/636E414FA84D71600AE3616725B19B3EA6BCD75B.crl
                          rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/636E414FA84D71600AE3616725B19B3EA6BCD75B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636E414FA84D71600AE3616725B19B3EA6BCD75B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1e:a1:95:c9:68:80:74:92:ca:91:73:98:24:24:64:83:bc:3e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636E414FA84D71600AE3616725B19B3EA6BCD75B
        Validity
            Not Before: Mar 31 14:31:15 2025 GMT
            Not After : Mar 30 14:36:15 2026 GMT
        Subject: CN=B5F4E81063DBEAB4E17A02439237DA15DBEAB15D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5f:2c:35:d6:bc:25:d0:d2:a1:95:92:60:6b:
                    91:f7:9f:f3:7c:ae:95:04:d6:7d:e6:80:09:50:4d:
                    c9:cf:92:6f:16:0c:f8:0c:3c:2e:2c:ef:88:9e:f3:
                    a7:95:06:c3:da:d8:86:74:25:b2:24:c5:96:7f:bc:
                    15:cc:ba:27:02:f6:6b:f2:0e:55:57:f3:dd:32:b1:
                    71:1f:6b:1c:28:97:3b:ab:fa:82:15:57:b0:b8:8f:
                    52:88:c5:9e:3a:cc:26:34:56:c5:a5:48:50:89:42:
                    9a:e6:94:cf:17:ad:e1:eb:f7:d3:bc:80:be:b5:25:
                    19:99:2a:52:3c:f5:c1:13:33:91:68:34:f4:66:d6:
                    b7:57:ec:07:e3:60:05:12:a0:7f:9a:3f:2d:fd:d2:
                    15:ea:a3:45:59:a2:e0:a1:f4:65:cc:06:eb:4e:1a:
                    c3:76:3d:98:65:da:95:ce:00:4e:4a:2e:ae:99:3c:
                    13:55:90:fa:63:5e:70:71:96:ce:f6:24:b5:27:95:
                    57:b5:a4:e5:2b:86:3a:ec:c4:08:53:e6:5a:98:8e:
                    17:ff:48:94:d9:2b:3c:2f:23:17:06:0b:db:11:80:
                    be:52:60:e9:e7:93:c9:3d:c0:6e:9c:fb:ee:e8:01:
                    95:21:e2:40:44:1b:51:18:fc:e6:2f:84:9e:98:8b:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F4:E8:10:63:DB:EA:B4:E1:7A:02:43:92:37:DA:15:DB:EA:B1:5D
            X509v3 Authority Key Identifier:
                keyid:63:6E:41:4F:A8:4D:71:60:0A:E3:61:67:25:B1:9B:3E:A6:BC:D7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/636E414FA84D71600AE3616725B19B3EA6BCD75B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636E414FA84D71600AE3616725B19B3EA6BCD75B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/34352e3232352e3231302e302f32342d3332203d3e20323636393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:79:c2:fd:26:9f:b1:91:4e:79:9e:6a:3f:a8:53:4d:ca:51:
         ae:a3:2f:de:99:22:07:6d:83:ca:01:cf:8d:d8:9a:89:10:0b:
         2f:fd:d7:25:78:a8:c1:c7:ea:9f:f9:b8:99:ab:6b:28:a1:59:
         0b:b0:b5:b5:f5:8b:90:f8:22:be:ee:70:ce:f0:a6:4b:a3:94:
         90:ad:7a:56:cc:11:ad:6a:2c:53:a7:1f:a8:a6:2e:2e:84:d0:
         79:be:71:2c:80:7c:71:d5:fa:ff:34:ec:2c:98:6c:cc:5a:11:
         78:59:be:e4:17:59:de:64:52:75:b3:10:8e:04:64:e6:95:c1:
         3e:66:a1:c4:47:0e:4d:fa:dc:a4:b2:49:e6:ab:ef:4b:83:1f:
         31:ab:e3:9b:00:6c:a3:91:de:c1:6f:19:4c:fe:7d:90:ea:05:
         b4:48:f7:13:be:97:b0:96:92:04:30:26:fc:fb:18:32:c3:35:
         02:d9:b1:11:b4:03:ed:06:f9:d9:a5:37:31:0b:27:24:d6:0d:
         67:1e:0e:4a:87:9f:53:c3:b1:fe:ab:01:11:1a:13:55:4a:b1:
         97:29:cc:46:74:97:88:3d:42:93:34:c9:d3:d1:4b:3c:9d:5e:
         96:ec:86:5e:a8:1c:9d:f9:59:7f:a3:80:ba:88:e7:c0:57:3d:
         ee:cf:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:37 2025 by rpki-client on console.sobornost.net