Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/34352e3138392e33342e302f32342d3234203d3e20323734373633.roa
File:                     34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (raw, json)
Hash identifier:          +8SomA8CorpblFccJ5hAIRLE8zYsycHTpbXTAfqfp8w=
Subject key identifier:   DF:A2:68:85:01:E0:57:EE:40:95:C2:51:EE:4A:61:3F:01:15:5A:CB
Certificate issuer:       /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE
Certificate serial:       677E3B09B11F6E57C9A594D11FABBB6316690D35
Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/34352e3138392e33342e302f32342d3234203d3e20323734373633.roa
Signing time:             Thu 17 Apr 2025 20:11:24 +0000
ROA not before:           Thu 17 Apr 2025 20:06:24 +0000
ROA not after:            Thu 16 Apr 2026 20:11:24 +0000
asID:                     274763
IP address blocks:        45.189.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl
                          rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7e:3b:09:b1:1f:6e:57:c9:a5:94:d1:1f:ab:bb:63:16:69:0d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE
        Validity
            Not Before: Apr 17 20:06:24 2025 GMT
            Not After : Apr 16 20:11:24 2026 GMT
        Subject: CN=DFA2688501E057EE4095C251EE4A613F01155ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:f0:11:32:e2:da:f9:03:de:d0:3d:6b:42:
                    33:7f:ee:dc:77:a4:18:a7:b3:a5:42:39:30:b6:4d:
                    66:30:23:fc:48:81:40:7f:99:04:d5:de:0c:f5:5e:
                    80:5d:49:04:9c:e2:da:f4:e8:48:a4:78:df:70:e8:
                    0d:2a:16:c6:dd:0f:3f:b4:bd:dc:2b:39:dc:3b:96:
                    2e:86:21:b6:5a:1f:56:00:e7:d4:76:2f:76:90:93:
                    23:cd:dd:88:ca:cb:4b:c9:39:e6:05:cd:e7:64:9c:
                    66:3f:3e:03:ed:22:0f:fd:4d:73:7c:33:c7:d6:37:
                    60:e0:8b:c6:78:0d:7e:cf:42:e0:40:0b:68:94:63:
                    0a:15:b8:c0:0b:40:b7:4d:c7:d8:64:43:cc:2c:7b:
                    0d:07:aa:ef:af:6b:84:b9:50:4f:94:e4:ab:0f:ca:
                    0e:d2:54:63:b9:df:91:92:96:ef:8f:33:53:9e:8c:
                    26:29:3f:c7:bb:98:82:c7:97:fd:79:f5:05:99:83:
                    71:7e:cf:40:cc:f6:56:44:39:ea:15:da:8e:2f:b7:
                    1e:21:56:75:c6:ed:da:65:61:03:8e:1b:7b:b6:53:
                    8b:59:e9:5c:03:81:ee:ff:d2:89:d6:bc:42:c4:29:
                    5a:a3:5a:27:ad:4b:50:d5:46:18:07:5a:00:d1:55:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A2:68:85:01:E0:57:EE:40:95:C2:51:EE:4A:61:3F:01:15:5A:CB
            X509v3 Authority Key Identifier:
                keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/34352e3138392e33342e302f32342d3234203d3e20323734373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:8f:4e:49:b5:e3:7a:ee:f8:87:a8:00:d6:64:27:72:49:50:
         17:7a:96:07:17:98:4b:58:04:67:83:3c:f8:60:85:df:68:6b:
         03:a6:38:ed:8b:23:1d:ad:1c:a1:ed:98:20:1c:1a:c0:04:33:
         77:d5:d3:14:0a:54:af:16:7d:a7:cf:5f:33:88:1c:48:17:fd:
         07:4b:93:bd:ae:b8:a9:1c:bd:bb:7e:59:92:02:02:05:52:c7:
         d4:ed:4d:3b:e6:4c:0d:5e:01:25:05:e0:5d:e8:c2:dc:d3:07:
         61:31:74:13:11:7f:75:99:eb:50:56:f0:45:a7:40:9e:ec:33:
         ac:8d:ba:d0:75:79:cf:8b:85:e9:f5:c7:a2:3f:ef:b5:49:d5:
         44:d9:e5:a5:3a:7a:87:f1:15:a8:a9:cf:bb:7d:8d:86:33:fe:
         fa:b5:4e:e9:6f:3e:ec:14:4d:55:fa:40:82:12:8e:8f:42:17:
         15:31:77:c9:fc:dd:ea:ff:ed:ae:cf:97:7a:8b:41:6f:8b:f6:
         01:97:b5:4f:b6:dc:03:62:e2:3a:63:ff:49:d9:17:1e:d2:50:
         09:17:cc:84:6e:fa:d5:c6:96:e4:ed:36:6b:17:f1:b1:2b:32:
         01:b1:9b:1a:ab:5b:8e:80:f5:1e:08:4f:68:72:7b:8d:c8:ef:
         43:27:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:18 2025 by rpki-client on console.sobornost.net