Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/34352e3138392e33322e302f32342d3234203d3e20323734373633.roa
File:                     34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (raw, json)
Hash identifier:          f9h0xJPe6EC4HPN8Q4Vq2DpTHhojeqACv3nqBQ14BsY=
Subject key identifier:   56:DC:5D:59:68:13:42:C5:70:5B:F3:E9:FE:A6:42:0E:56:72:FE:CF
Certificate issuer:       /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE
Certificate serial:       42CE1A828F724DBAF1105F6AF518BADD6C90CA06
Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/34352e3138392e33322e302f32342d3234203d3e20323734373633.roa
Signing time:             Thu 17 Apr 2025 20:11:29 +0000
ROA not before:           Thu 17 Apr 2025 20:06:29 +0000
ROA not after:            Thu 16 Apr 2026 20:11:29 +0000
asID:                     274763
IP address blocks:        45.189.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl
                          rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ce:1a:82:8f:72:4d:ba:f1:10:5f:6a:f5:18:ba:dd:6c:90:ca:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE
        Validity
            Not Before: Apr 17 20:06:29 2025 GMT
            Not After : Apr 16 20:11:29 2026 GMT
        Subject: CN=56DC5D59681342C5705BF3E9FEA6420E5672FECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:c7:60:6f:a6:4e:07:e2:05:a4:54:c3:24:
                    38:80:d4:6e:27:6a:0f:4f:96:4f:d0:f6:ea:76:23:
                    fb:72:1f:fb:03:7e:68:13:8a:46:2b:59:af:21:c4:
                    d5:10:88:9d:9d:0e:20:47:a8:f4:ef:47:9c:10:43:
                    15:85:11:73:b4:c8:77:ae:cb:0e:92:42:f1:ab:16:
                    5a:6c:c3:e4:29:f7:4c:07:c8:9c:3b:ff:bf:e3:e7:
                    cc:1c:87:85:e1:63:be:1e:8a:99:dd:60:14:54:b6:
                    b6:1f:d1:a8:67:d5:8d:10:0c:bf:bd:ab:89:52:aa:
                    d3:7d:6d:25:83:a8:4f:e4:ba:a2:ee:6f:6b:ab:55:
                    fb:20:1a:b5:c8:d3:d7:29:14:38:5d:f9:13:08:46:
                    d5:78:dc:c1:88:e5:98:2d:8b:d1:32:e7:d0:54:19:
                    b3:b2:01:2d:6e:22:3b:a6:27:ed:35:95:6e:8f:e7:
                    c1:29:1e:e5:78:28:f6:64:d8:0f:00:0d:7c:0a:4f:
                    ae:4c:77:ae:0b:fe:21:2b:65:41:3b:77:37:a7:a2:
                    7f:7e:ff:14:2a:9f:18:89:86:b5:33:14:fa:e0:98:
                    59:88:8a:21:2c:27:01:0c:a8:52:cb:8a:c8:8c:44:
                    71:0d:86:e0:65:1f:46:97:ca:18:58:f8:e2:06:fc:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DC:5D:59:68:13:42:C5:70:5B:F3:E9:FE:A6:42:0E:56:72:FE:CF
            X509v3 Authority Key Identifier:
                keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/34352e3138392e33322e302f32342d3234203d3e20323734373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:bf:5f:1d:36:7d:f0:bb:d0:6b:86:c4:94:ff:a8:1c:3a:a6:
         72:f4:d8:c8:a0:ec:2f:51:d4:d1:fe:25:6f:d3:72:6b:51:b4:
         1a:d5:ec:3d:87:e9:93:33:bf:b5:75:34:7e:f7:00:4e:9d:30:
         d3:b2:31:c7:83:d8:46:15:40:7e:ef:26:04:7d:27:63:01:16:
         3f:5e:1b:2b:be:89:cf:c2:2d:86:33:74:b2:2b:91:26:77:17:
         ec:99:93:2f:72:79:e2:00:9f:03:99:30:68:6a:cb:c0:4d:8f:
         b6:17:c3:7b:a8:4d:9d:96:ce:cc:2b:03:ee:28:d3:a6:1b:9e:
         1d:0d:05:85:79:3b:4d:ff:be:20:6f:56:fc:a7:cc:e9:b7:f4:
         2c:ce:5d:cf:ba:fd:91:35:d5:bf:44:51:be:08:19:11:6e:b8:
         a6:05:53:5b:23:a0:91:1d:1c:a7:39:fc:96:13:56:48:d1:e8:
         64:07:e6:af:02:cf:f1:d8:6f:42:ea:b2:6e:3e:c5:ac:51:e0:
         b3:44:fd:02:75:22:03:b2:64:97:6b:3c:fc:a6:30:1b:fb:c0:
         77:3e:ff:23:ea:cd:58:f4:d4:8d:f6:51:46:c3:e2:de:b4:40:
         e9:90:a2:30:1d:3c:23:77:a2:a4:63:1e:56:5a:09:25:eb:4b:
         c1:9e:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:18 2025 by rpki-client on console.sobornost.net