Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233322e302f32332d3332203d3e20323638333839.roa
File:                     34352e3233392e3233322e302f32332d3332203d3e20323638333839.roa (raw, json)
Hash identifier:          E5jlVS87h7BkFbqpPYaElt0KWV/k0VsjqbKt/iVcOoo=
Subject key identifier:   17:B0:61:9C:B9:21:09:27:E0:BE:A6:80:5C:AA:F9:B9:14:38:2A:EB
Certificate issuer:       /CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
Certificate serial:       4A27972108A361310D37F5FBB37F23CABA8FE57C
Authority key identifier: D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233322e302f32332d3332203d3e20323638333839.roa
Signing time:             Wed 12 Mar 2025 16:18:13 +0000
ROA not before:           Wed 12 Mar 2025 16:13:13 +0000
ROA not after:            Wed 11 Mar 2026 16:18:13 +0000
asID:                     268389
IP address blocks:        45.239.232.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl
                          rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:27:97:21:08:a3:61:31:0d:37:f5:fb:b3:7f:23:ca:ba:8f:e5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
        Validity
            Not Before: Mar 12 16:13:13 2025 GMT
            Not After : Mar 11 16:18:13 2026 GMT
        Subject: CN=17B0619CB9210927E0BEA6805CAAF9B914382AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:c6:3b:f5:70:6c:52:70:66:0e:5e:3e:6c:
                    0e:52:31:1a:a6:c6:e7:32:d9:58:7b:93:ab:1b:58:
                    ab:4f:6a:a4:75:25:07:d8:1e:46:f2:d6:62:c9:66:
                    e1:f0:42:4c:39:2e:71:c8:91:1b:ee:5d:97:bd:01:
                    0f:38:7c:0b:70:4b:42:0f:37:47:31:12:46:b1:86:
                    41:b1:a5:4c:39:4a:81:67:bd:d5:3a:7c:44:b1:34:
                    20:f8:c6:d4:53:38:42:6f:3c:a2:4d:ad:8c:fd:61:
                    71:21:d0:fe:ca:4d:36:5f:96:39:6d:64:1b:bc:69:
                    79:aa:1d:93:f7:c2:1f:37:02:5c:27:46:f2:ab:0a:
                    e6:14:fd:53:08:2f:94:b4:a6:67:c2:89:09:af:86:
                    c9:91:60:be:34:7a:61:ed:e5:47:c7:3c:e3:f1:92:
                    26:1c:b3:f8:f5:4d:11:40:3b:56:47:79:8b:eb:ae:
                    f7:dd:82:b2:20:40:49:67:d2:d1:7e:3b:a9:18:1f:
                    b8:99:0a:4d:d5:a8:bd:36:fe:e8:15:4a:d3:d8:2d:
                    0c:32:eb:69:d6:eb:01:b5:20:f2:f7:cd:4d:2c:bc:
                    e1:63:8b:7e:fa:93:55:3c:5b:87:04:cd:0d:79:0a:
                    ff:fc:a3:97:41:7a:ee:23:6f:e0:e6:79:2e:0f:6b:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B0:61:9C:B9:21:09:27:E0:BE:A6:80:5C:AA:F9:B9:14:38:2A:EB
            X509v3 Authority Key Identifier:
                keyid:D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/34352e3233392e3233322e302f32332d3332203d3e20323638333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:91:ae:b3:d9:f4:9e:6c:37:7f:4c:b3:b4:b6:2c:b4:1e:
         bc:53:6c:32:3c:a5:c8:7a:31:d4:63:8d:65:93:69:00:43:ca:
         5f:a9:9a:44:03:b7:87:04:45:9d:e2:56:0f:56:46:e5:cf:cb:
         3b:e6:0f:6d:b9:17:88:04:a3:f7:38:ce:58:44:60:87:c3:fa:
         7e:a1:9b:a2:12:60:39:b0:2a:88:68:8c:05:a6:db:d1:31:63:
         1c:69:80:28:b6:03:4a:ae:63:f6:fa:81:30:a9:e7:24:b9:a1:
         11:3a:36:87:21:a1:f7:a2:76:86:89:90:aa:a6:93:6d:83:77:
         9e:74:fd:5a:d8:80:92:2c:fa:5e:2c:67:ef:0f:5b:53:e4:f0:
         ad:35:59:b1:e0:b5:94:5d:40:1b:6a:cf:54:7b:e8:8e:63:b4:
         e3:c7:ef:f6:b4:83:2d:f8:cc:d0:98:ab:5f:2a:9b:c4:db:05:
         9c:26:8a:85:d1:4d:91:79:0b:31:f2:d6:ca:7a:e4:11:ba:f2:
         05:df:85:b7:8a:a4:36:f8:ed:06:49:18:be:b9:e9:a0:94:68:
         fa:09:f2:f4:c5:93:7b:10:cf:26:8b:e6:01:74:37:b4:5c:c1:
         66:a5:0f:86:d9:69:cc:b0:5b:e4:28:74:05:c0:26:9b:89:d0:
         63:b4:66:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:12 2025 by rpki-client on console.sobornost.net