Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/34352e3136312e352e302f32342d3234203d3e20323638343234.roa
File:                     34352e3136312e352e302f32342d3234203d3e20323638343234.roa (raw, json)
Hash identifier:          jxYq20MJWQKARPmt1Glw2ZeHsv2iNn23gkIsYP80OM4=
Subject key identifier:   0B:0C:87:DF:7D:91:D7:EB:DA:EE:8D:B2:8A:5E:7A:2C:3C:56:FE:B1
Certificate issuer:       /CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
Certificate serial:       6BAE46CFDCD911F20C2629C63DAFC6C0C649F53B
Authority key identifier: 93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/34352e3136312e352e302f32342d3234203d3e20323638343234.roa
Signing time:             Thu 06 Mar 2025 01:41:51 +0000
ROA not before:           Thu 06 Mar 2025 01:36:51 +0000
ROA not after:            Thu 05 Mar 2026 01:41:51 +0000
asID:                     268424
IP address blocks:        45.161.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl
                          rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ae:46:cf:dc:d9:11:f2:0c:26:29:c6:3d:af:c6:c0:c6:49:f5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
        Validity
            Not Before: Mar  6 01:36:51 2025 GMT
            Not After : Mar  5 01:41:51 2026 GMT
        Subject: CN=0B0C87DF7D91D7EBDAEE8DB28A5E7A2C3C56FEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:f9:da:78:cc:e5:d2:af:2b:8c:e4:15:dc:
                    b8:fb:62:72:c9:a7:a3:fc:ed:1a:38:54:86:49:28:
                    6d:14:35:e6:d3:9f:3d:f1:cd:61:6c:9e:ea:8f:d0:
                    d2:05:26:c7:aa:57:66:11:d6:08:1e:30:6b:f5:66:
                    17:a3:02:de:09:ac:b5:77:58:d8:6b:2a:99:4a:de:
                    2d:9d:fa:eb:c0:68:2b:21:34:3a:43:76:d7:99:3f:
                    60:c1:a0:31:92:5a:fd:c0:43:77:28:f6:d8:10:a9:
                    63:25:63:ee:1a:40:ae:98:ea:3b:ad:a9:92:48:b4:
                    07:19:43:f7:90:3a:aa:02:19:7f:cf:8c:64:66:43:
                    2f:8a:f6:2d:38:34:84:f3:96:d8:b7:8d:2d:12:94:
                    ef:84:cb:c8:b4:3a:70:7d:41:da:ba:fb:4d:12:a1:
                    bd:c3:62:30:1a:30:3f:f7:a2:af:4d:95:4a:8b:8a:
                    d4:78:fe:be:22:a8:06:98:ff:9b:cf:49:72:65:16:
                    a8:1b:27:3f:79:46:74:9b:e4:78:cd:c8:3d:8d:b9:
                    c1:f3:66:57:af:91:7b:b3:1c:b3:e1:c2:e2:ca:e8:
                    d3:c8:95:d2:2f:4d:bb:51:05:d1:11:dd:31:4a:94:
                    93:12:0e:a3:76:75:a5:40:01:25:c2:ed:54:f4:13:
                    f3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0C:87:DF:7D:91:D7:EB:DA:EE:8D:B2:8A:5E:7A:2C:3C:56:FE:B1
            X509v3 Authority Key Identifier:
                keyid:93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/34352e3136312e352e302f32342d3234203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:85:7c:50:8c:37:55:28:03:c9:63:21:f3:58:e0:4a:41:
         6c:95:e8:78:5a:e0:c3:f2:69:dc:e8:42:a6:a2:0e:65:13:c5:
         99:ae:7e:82:b7:31:88:3a:e2:ea:d0:4d:cb:1f:f9:55:aa:d1:
         bb:33:b5:68:12:13:94:1a:f8:e8:d5:82:41:98:29:06:17:c6:
         73:08:a8:3c:6b:25:a7:35:d0:3e:9c:6c:84:9a:24:32:a5:6f:
         85:e5:6f:af:e6:50:7b:80:5c:d9:d2:f3:3c:a4:94:81:af:88:
         78:e0:64:4b:80:cf:c9:99:9f:83:79:ad:ac:91:a3:cc:c7:d8:
         16:ae:ff:72:d9:6e:f2:ab:39:36:e7:9b:15:71:d1:84:cd:49:
         44:c1:7b:c5:c0:23:c8:b4:1d:ad:1b:1a:b0:ea:f4:d7:55:df:
         14:80:2e:58:84:1a:7e:e1:1f:24:4e:64:cf:d7:ea:4e:72:ae:
         69:8f:d7:f9:04:28:3d:d1:c6:91:62:ba:8b:9f:08:c6:48:11:
         77:aa:7d:05:95:1f:53:0e:5b:6d:77:7a:32:d5:3b:dd:80:db:
         8f:e8:51:01:c1:8c:01:61:f0:cd:0f:2d:34:6e:2b:bb:03:a3:
         30:c5:72:c5:7a:82:da:74:3c:fd:19:0f:76:2f:3a:d7:fb:f7:
         3c:93:7c:30
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUa65Gz9zZEfIMJinGPa/GwMZJ9TswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM5MkQxRENBMzc3MDFGM0FDREJBNURBRTZCNDREMTI1
QzI4QUU3MTAeFw0yNTAzMDYwMTM2NTFaFw0yNjAzMDUwMTQxNTFaMDMxMTAvBgNV
BAMTKDBCMEM4N0RGN0Q5MUQ3RUJEQUVFOERCMjhBNUU3QTJDM0M1NkZFQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtnPnaeMzl0q8rjOQV3Lj7YnLJ
p6P87Ro4VIZJKG0UNebTnz3xzWFsnuqP0NIFJseqV2YR1ggeMGv1ZhejAt4JrLV3
WNhrKplK3i2d+uvAaCshNDpDdteZP2DBoDGSWv3AQ3co9tgQqWMlY+4aQK6Y6jut
qZJItAcZQ/eQOqoCGX/PjGRmQy+K9i04NITzlti3jS0SlO+Ey8i0OnB9Qdq6+00S
ob3DYjAaMD/3oq9NlUqLitR4/r4iqAaY/5vPSXJlFqgbJz95RnSb5HjNyD2NucHz
ZlevkXuzHLPhwuLK6NPIldIvTbtRBdER3TFKlJMSDqN2daVAASXC7VT0E/PvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUCwyH332R1+va7o2yil56LDxW/rEwHwYDVR0j
BBgwFoAUk5LR3KN3AfOs26Xa5rRNElwornEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE1ybUVtUlI2YXg0aldUaThrOHA4M0xjbjZTVVdBakpHRE1WOVJoSmhU
ZTUvMS85MzkyRDFEQ0EzNzcwMUYzQUNEQkE1REFFNkI0NEQxMjVDMjhBRTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTJEMURDQTM3NzAxRjNB
Q0RCQTVEQUU2QjQ0RDEyNUMyOEFFNzEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRNcm1FbVJSNmF4NGpXVGk4azhwODNMY242U1VXQWpKR0RNVjlSaEpoVGU1LzEv
MzQzNTJlMzEzNjMxMmUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODM0
MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC2hBTANBgkqhkiG9w0BAQsFAAOCAQEAOa6FfFCMN1Uo
A8ljIfNY4EpBbJXoeFrgw/Jp3OhCpqIOZRPFma5+grcxiDri6tBNyx/5VarRuzO1
aBITlBr46NWCQZgpBhfGcwioPGslpzXQPpxshJokMqVvheVvr+ZQe4Bc2dLzPKSU
ga+IeOBkS4DPyZmfg3mtrJGjzMfYFq7/ctlu8qs5NuebFXHRhM1JRMF7xcAjyLQd
rRsasOr011XfFIAuWIQafuEfJE5kz9fqTnKuaY/X+QQoPdHGkWK6i58IxkgRd6p9
BZUfUw5bbXd6MtU73YDbj+hRAcGMAWHwzQ8tNG4ruwOjMMVyxXqC2nQ8/RkPdi86
1/v3PJN8MA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:07 2025 by rpki-client on console.sobornost.net