Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233382e302f32342d3234203d3e20323637363735.roa
File:                     34352e3232342e3233382e302f32342d3234203d3e20323637363735.roa (raw, json)
Hash identifier:          tyHdPE/CXWYm3L+Th7U1xzBoWKXYm27CW8onocy2Lw0=
Subject key identifier:   9A:22:AA:AA:83:5F:BB:57:36:41:2F:22:A0:CC:CF:24:A4:B6:01:EA
Certificate issuer:       /CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
Certificate serial:       614BBB3AED7C5244A1E9B93A80ED028C5DFB06DA
Authority key identifier: F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233382e302f32342d3234203d3e20323637363735.roa
Signing time:             Thu 06 Mar 2025 18:24:16 +0000
ROA not before:           Thu 06 Mar 2025 18:19:16 +0000
ROA not after:            Thu 05 Mar 2026 18:24:16 +0000
asID:                     267675
IP address blocks:        45.224.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 05:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4b:bb:3a:ed:7c:52:44:a1:e9:b9:3a:80:ed:02:8c:5d:fb:06:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
        Validity
            Not Before: Mar  6 18:19:16 2025 GMT
            Not After : Mar  5 18:24:16 2026 GMT
        Subject: CN=9A22AAAA835FBB5736412F22A0CCCF24A4B601EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:87:8a:ad:3a:12:9a:8d:a7:9c:90:72:65:
                    79:a0:54:47:29:69:0f:6e:2a:b1:d9:64:45:6b:49:
                    ca:9c:79:88:9f:7c:61:24:fe:84:3e:43:d2:b3:de:
                    45:40:2a:59:16:d5:8a:0a:03:fe:2d:0d:ad:64:88:
                    0b:bd:d9:7d:e8:0d:1d:de:48:41:02:9d:5d:0d:66:
                    e1:ba:46:fa:7d:69:a2:d5:7f:bb:49:b4:c3:01:58:
                    e0:33:b8:4b:b7:b3:08:df:81:c8:07:b8:58:80:19:
                    34:b0:f2:d6:4a:e8:7f:2a:54:2a:02:27:58:33:3d:
                    ad:12:96:20:25:bd:4f:b1:26:f7:d5:ad:fc:75:b2:
                    08:de:59:17:85:86:e4:90:35:9a:a4:44:74:df:a6:
                    2f:85:b4:0d:0f:f3:87:c0:9f:c9:ae:ae:3d:01:b0:
                    d6:66:5c:bc:5d:08:6c:08:e2:c6:1b:6f:72:f4:fb:
                    90:d2:be:45:11:de:10:bc:68:56:77:93:cc:89:d1:
                    53:2c:b7:98:6a:b1:1b:18:29:ef:6c:54:e2:b2:ea:
                    a3:6b:00:ec:ea:9b:35:80:af:fc:47:da:4e:2c:9e:
                    3f:ad:2f:c0:50:56:23:fd:47:c0:7b:19:ea:fa:5d:
                    de:0f:77:d7:3c:06:fd:61:3f:05:ed:48:2f:6e:84:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:22:AA:AA:83:5F:BB:57:36:41:2F:22:A0:CC:CF:24:A4:B6:01:EA
            X509v3 Authority Key Identifier:
                keyid:F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233382e302f32342d3234203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:22:f1:4f:9a:07:97:9a:81:ca:57:77:ab:35:13:53:e3:4f:
         85:85:22:dd:d7:41:c3:b5:38:f0:c8:63:d8:3d:10:2b:85:f7:
         93:32:0c:e8:68:65:cd:90:c2:53:e0:c8:1d:3b:84:22:03:df:
         37:c2:e7:7e:90:69:cb:b2:74:d5:b5:e4:90:fc:9f:3b:cb:6e:
         f7:90:a6:9f:27:0c:74:47:11:46:29:1b:a4:86:0b:4d:85:66:
         15:58:16:d4:2f:92:58:b8:5c:b4:7b:19:a0:a6:9b:d2:fe:ea:
         15:ab:ea:80:7a:e2:fc:1d:30:33:f9:f9:66:57:28:65:5e:4e:
         c9:18:92:c8:35:83:b7:77:8f:a7:10:eb:68:a3:c2:81:ed:95:
         9a:12:60:dc:fb:61:c4:4a:20:8b:7e:38:5f:a3:a8:cc:49:b0:
         1e:ac:8b:af:8f:1c:b6:99:8d:cf:1f:e9:d3:23:6d:96:78:59:
         4c:3e:48:4b:36:5d:b1:6f:fb:87:ed:41:57:ab:74:27:98:af:
         46:b9:24:9f:cf:7e:21:02:2b:93:3c:dc:e9:1b:ea:e6:8e:95:
         ec:be:b8:c5:d8:7e:54:cf:54:d1:22:29:99:4a:22:b8:e4:09:
         6d:3c:80:c5:3e:3b:05:fd:cf:4b:09:84:2f:49:f1:4f:b6:e4:
         c9:15:ed:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:02 2025 by rpki-client on console.sobornost.net