Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/34352e3233352e302e302f32322d3234203d3e20323637333930.roa
File:                     34352e3233352e302e302f32322d3234203d3e20323637333930.roa (raw, json)
Hash identifier:          xxkzZlzNnmqYTshl6Uai4i2lv96/YrTBJknS6dRLNbA=
Subject key identifier:   92:3A:CD:41:DB:A0:22:15:EE:E2:04:C0:37:D6:E1:F3:C2:6F:76:E9
Certificate issuer:       /CN=66DCAA5522EEEC15CC978DE673986E897244B698
Certificate serial:       2C4EDFD2251A1BA587F6EC9C491B6A6CE2DD11CB
Authority key identifier: 66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/34352e3233352e302e302f32322d3234203d3e20323637333930.roa
Signing time:             Mon 07 Apr 2025 14:01:29 +0000
ROA not before:           Mon 07 Apr 2025 13:56:29 +0000
ROA not after:            Mon 06 Apr 2026 14:01:29 +0000
asID:                     267390
IP address blocks:        45.235.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl
                          rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4e:df:d2:25:1a:1b:a5:87:f6:ec:9c:49:1b:6a:6c:e2:dd:11:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66DCAA5522EEEC15CC978DE673986E897244B698
        Validity
            Not Before: Apr  7 13:56:29 2025 GMT
            Not After : Apr  6 14:01:29 2026 GMT
        Subject: CN=923ACD41DBA02215EEE204C037D6E1F3C26F76E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:42:fd:29:fb:ac:db:36:3d:c4:ee:d7:bb:
                    bc:85:67:a6:cd:8f:ad:e8:9a:c8:f6:33:5f:4d:81:
                    0e:bc:f4:06:c7:98:3b:f2:bc:15:78:e9:7c:45:53:
                    a2:39:60:26:19:b0:81:eb:6d:be:61:52:a8:61:27:
                    4e:f1:36:f6:fb:5d:5b:9a:40:b5:63:f7:ca:4f:27:
                    9d:47:69:a2:95:0d:a9:00:89:ea:f7:16:8b:a8:54:
                    c8:4c:2f:5b:36:ab:e0:af:3b:fc:34:d0:ed:d3:a1:
                    1a:cc:9c:f5:c3:e3:5e:a1:a2:30:3a:d3:d8:14:58:
                    f5:26:fe:98:6d:0d:fc:fc:f8:d4:ca:b2:bd:a3:6a:
                    57:b8:f1:a9:a5:c0:95:f7:90:ac:24:6c:67:34:7b:
                    a3:18:09:21:29:40:e4:65:b3:17:b1:80:e0:0c:18:
                    c7:4c:9d:38:2f:4b:5e:50:5a:20:44:5a:c9:4d:e4:
                    1b:5a:16:9d:35:5f:c1:e4:73:40:84:e3:6b:20:d9:
                    3b:3e:2d:8e:56:9e:21:88:02:ac:58:c4:2b:99:d9:
                    27:cd:28:47:7c:2a:16:6c:d4:3f:d2:e1:a9:61:ab:
                    ea:1a:90:c3:9d:ad:e7:61:29:e4:af:8c:77:6a:f3:
                    75:ab:5a:99:b3:68:e6:35:92:e0:53:e1:03:5a:56:
                    02:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3A:CD:41:DB:A0:22:15:EE:E2:04:C0:37:D6:E1:F3:C2:6F:76:E9
            X509v3 Authority Key Identifier:
                keyid:66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/34352e3233352e302e302f32322d3234203d3e20323637333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:35:7d:93:87:f7:ad:9d:51:a6:cf:3e:f3:52:f9:9f:18:57:
         19:53:89:aa:63:f4:47:71:c3:d8:a7:54:b3:e1:77:40:e3:7a:
         92:36:c1:7c:ac:54:16:26:f7:11:8d:9f:5a:c9:c1:1f:3d:dc:
         c8:e5:48:85:e5:44:ee:53:ef:2b:72:17:be:8a:3a:2f:9b:92:
         f0:df:d1:0f:46:df:85:11:63:20:c8:a2:4b:4f:07:f4:2f:3c:
         0b:4c:ad:eb:b8:a7:5b:6b:71:b5:86:ea:e3:e2:ff:db:8d:f4:
         aa:3f:1d:2a:4b:ba:39:fe:b0:79:6c:61:a6:58:7b:5d:c2:b5:
         77:f6:73:cb:dd:9d:b6:20:58:da:6e:42:e9:99:fa:e8:5c:e2:
         b0:57:95:5f:b1:75:61:30:90:82:ad:31:de:d8:14:3f:f3:2b:
         dd:8f:b9:25:09:ab:86:f6:dc:1c:76:00:6a:52:06:1c:d4:74:
         a9:4f:83:69:ac:ed:64:3a:94:71:42:9d:03:73:aa:29:fa:fc:
         66:6d:12:49:bc:40:25:b7:a1:ca:a9:ab:b3:a7:12:17:5f:88:
         72:4d:08:00:6c:e8:a3:c3:80:e2:6a:a4:36:8b:1d:93:76:38:
         b5:10:01:bb:ad:46:cc:47:0d:55:7a:f9:f7:48:cb:95:c2:ea:
         87:61:ce:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:29 2025 by rpki-client on console.sobornost.net