Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233372e302f32342d3234203d3e20323637363735.roa
File:                     34352e3232342e3233372e302f32342d3234203d3e20323637363735.roa (raw, json)
Hash identifier:          +LEZeP3qzPNCsM6E1zJJc9kp5tM73+OE4FOSbuydWyQ=
Subject key identifier:   44:B4:CB:40:44:25:06:5A:9C:0D:01:EE:AC:A4:B6:D3:D2:D5:3F:F3
Certificate issuer:       /CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
Certificate serial:       42D0975FCCC68F14C5515F3B9F21ED529ACE5AC6
Authority key identifier: F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233372e302f32342d3234203d3e20323637363735.roa
Signing time:             Thu 06 Mar 2025 18:24:16 +0000
ROA not before:           Thu 06 Mar 2025 18:19:16 +0000
ROA not after:            Thu 05 Mar 2026 18:24:16 +0000
asID:                     267675
IP address blocks:        45.224.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 05:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d0:97:5f:cc:c6:8f:14:c5:51:5f:3b:9f:21:ed:52:9a:ce:5a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
        Validity
            Not Before: Mar  6 18:19:16 2025 GMT
            Not After : Mar  5 18:24:16 2026 GMT
        Subject: CN=44B4CB404425065A9C0D01EEACA4B6D3D2D53FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:0c:c4:03:28:b5:03:a6:a6:7c:be:86:a0:
                    8a:7e:a1:4c:d8:86:1f:84:f8:59:a9:f6:f6:80:b9:
                    70:76:4d:7c:3d:08:b1:ea:b6:20:5f:59:9c:f0:b1:
                    c8:20:d3:b7:a5:37:1d:47:2d:0b:b6:dc:44:75:cd:
                    67:4a:e3:60:d4:0a:1e:77:ee:df:c0:75:49:73:12:
                    a4:34:e6:f8:36:d2:3d:38:98:44:44:78:7d:74:98:
                    48:a6:0e:78:e1:d9:ca:a7:1a:3f:75:6f:7e:3a:84:
                    09:d0:b1:cb:11:ce:0c:1e:6b:f5:5b:8b:8b:47:24:
                    c5:78:b1:50:7c:c7:8d:b7:d8:6e:f5:7f:2b:40:de:
                    a7:96:ee:d1:84:b0:35:b9:d7:87:bc:04:95:45:47:
                    15:f5:75:e1:e2:47:56:65:34:b7:79:1b:8a:59:1e:
                    0f:56:1a:83:bd:84:bc:85:39:55:8e:8c:08:fa:30:
                    1f:61:15:5e:6f:5d:4d:8b:35:ba:46:6a:1f:f6:cc:
                    7b:9f:de:5f:92:b9:a9:e4:cb:eb:5c:8a:e0:23:0e:
                    5a:11:3b:6f:b7:8e:cc:2a:7a:b7:89:cf:58:35:2e:
                    70:7c:a6:05:20:15:6b:8c:0c:a4:cf:eb:bd:bd:b0:
                    b7:dc:0a:35:cf:3c:fe:53:87:4f:a5:72:01:24:40:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B4:CB:40:44:25:06:5A:9C:0D:01:EE:AC:A4:B6:D3:D2:D5:3F:F3
            X509v3 Authority Key Identifier:
                keyid:F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233372e302f32342d3234203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f6:01:4e:81:c6:56:0e:c1:2b:81:13:38:e3:3d:fa:5c:0d:
         e3:fe:5c:23:e6:27:a2:8d:a1:00:dc:71:ad:cc:02:c2:13:8a:
         5d:86:92:cf:25:4a:a1:29:3a:fd:02:ab:a1:20:d3:1a:2d:b8:
         40:2e:50:e1:08:88:ff:da:22:ae:6a:08:54:16:19:1f:de:16:
         d0:35:d0:c4:bb:86:6c:67:a2:08:06:65:eb:99:9a:c6:35:13:
         e5:42:2f:93:6c:c7:2f:43:ff:f6:03:c5:c2:d5:9d:97:d9:85:
         65:2e:95:b0:0a:12:e6:83:a8:10:71:98:9b:91:b6:63:fb:0a:
         c5:3a:24:83:08:28:9f:b6:91:49:56:41:65:1f:40:35:61:bf:
         d3:89:1d:7f:a2:66:da:ff:e4:89:6c:d6:c8:5a:5a:d8:74:e0:
         95:9c:9d:80:08:92:fe:1b:d9:73:73:d1:4b:66:56:6e:1d:69:
         83:3e:ea:5b:34:69:a1:4e:bc:69:3f:34:4d:ec:63:58:8a:91:
         12:f7:b1:65:86:ec:ea:a1:33:c7:f5:f2:2b:b6:4d:54:be:5a:
         a8:e4:5c:c2:f4:ea:a6:8d:8b:0c:e1:bc:09:dc:37:50:9c:2f:
         e5:3c:78:bf:11:c8:af:37:60:b0:b6:f1:3c:a0:2c:55:42:33:
         3b:3e:71:6e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQtCXX8zGjxTFUV87nyHtUprOWsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY3NDE5ODlFODM5QjY3QjU3QzhBNTlBRjlCMDc5N0VB
OURFREZCNzAeFw0yNTAzMDYxODE5MTZaFw0yNjAzMDUxODI0MTZaMDMxMTAvBgNV
BAMTKDQ0QjRDQjQwNDQyNTA2NUE5QzBEMDFFRUFDQTRCNkQzRDJENTNGRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZKgzEAyi1A6amfL6GoIp+oUzY
hh+E+Fmp9vaAuXB2TXw9CLHqtiBfWZzwscgg07elNx1HLQu23ER1zWdK42DUCh53
7t/AdUlzEqQ05vg20j04mEREeH10mEimDnjh2cqnGj91b346hAnQscsRzgwea/Vb
i4tHJMV4sVB8x4232G71fytA3qeW7tGEsDW514e8BJVFRxX1deHiR1ZlNLd5G4pZ
Hg9WGoO9hLyFOVWOjAj6MB9hFV5vXU2LNbpGah/2zHuf3l+Suanky+tciuAjDloR
O2+3jswqereJz1g1LnB8pgUgFWuMDKTP6729sLfcCjXPPP5Th0+lcgEkQDD7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURLTLQEQlBlqcDQHurKS209LVP/MwHwYDVR0j
BBgwFoAU9nQZieg5tntXyKWa+bB5fqne37cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpaTmMxa1gxaUZNMjFraUQ4NmR3bjRGU3gxZFdFNFB5MW1US2VOM1Q0
Y2EvMS9GNjc0MTk4OUU4MzlCNjdCNTdDOEE1OUFGOUIwNzk3RUE5REVERkI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2NzQxOTg5RTgzOUI2N0I1
N0M4QTU5QUY5QjA3OTdFQTlERURGQjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaWk5jMWtYMWlGTTIxa2lEODZkd240RlN4MWRXRTRQeTFtVEtlTjNUNGNhLzEv
MzQzNTJlMzIzMjM0MmUzMjMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNjM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt4O0wDQYJKoZIhvcNAQELBQADggEBAEP2AU6B
xlYOwSuBEzjjPfpcDeP+XCPmJ6KNoQDcca3MAsITil2Gks8lSqEpOv0Cq6Eg0xot
uEAuUOEIiP/aIq5qCFQWGR/eFtA10MS7hmxnoggGZeuZmsY1E+VCL5Nsxy9D//YD
xcLVnZfZhWUulbAKEuaDqBBxmJuRtmP7CsU6JIMIKJ+2kUlWQWUfQDVhv9OJHX+i
Ztr/5Ils1shaWth04JWcnYAIkv4b2XNz0UtmVm4daYM+6ls0aaFOvGk/NE3sY1iK
kRL3sWWG7OqhM8f18iu2TVS+WqjkXML06qaNiwzhvAncN1CcL+U8eL8RyK83YLC2
8TygLFVCMzs+cW4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:02 2025 by rpki-client on console.sobornost.net