Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131322e302f32322d3234203d3e20323637303630.roa
File:                     34352e3232382e3131322e302f32322d3234203d3e20323637303630.roa (raw, json)
Hash identifier:          Dhhyue4QSMQg3FrYTjZv/XzapjGhgkOSEAwFbQBa/z0=
Subject key identifier:   A7:1F:50:16:86:2B:12:97:27:C1:26:F7:28:98:5A:FC:05:B1:63:A5
Certificate issuer:       /CN=C7B0BDB553A83D0C22DB29AA2929CA016982C55D
Certificate serial:       13D59705E8956B54432FED88D7D9B5F483A323B1
Authority key identifier: C7:B0:BD:B5:53:A8:3D:0C:22:DB:29:AA:29:29:CA:01:69:82:C5:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7B0BDB553A83D0C22DB29AA2929CA016982C55D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131322e302f32322d3234203d3e20323637303630.roa
Signing time:             Wed 23 Apr 2025 18:45:22 +0000
ROA not before:           Wed 23 Apr 2025 18:40:22 +0000
ROA not after:            Wed 22 Apr 2026 18:45:22 +0000
asID:                     267060
IP address blocks:        45.228.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/C7B0BDB553A83D0C22DB29AA2929CA016982C55D.crl
                          rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/C7B0BDB553A83D0C22DB29AA2929CA016982C55D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7B0BDB553A83D0C22DB29AA2929CA016982C55D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 20:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d5:97:05:e8:95:6b:54:43:2f:ed:88:d7:d9:b5:f4:83:a3:23:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7B0BDB553A83D0C22DB29AA2929CA016982C55D
        Validity
            Not Before: Apr 23 18:40:22 2025 GMT
            Not After : Apr 22 18:45:22 2026 GMT
        Subject: CN=A71F5016862B129727C126F728985AFC05B163A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:35:bd:fb:e0:80:c4:69:a6:28:3f:8e:dd:
                    7e:7c:ba:e8:53:a8:5f:52:ff:09:4a:ad:55:17:dc:
                    6b:84:5e:e3:f1:76:0b:eb:cd:c0:ca:3a:33:3b:97:
                    3a:97:a7:5a:4e:cb:bc:ed:e9:41:ff:5c:a8:8e:cf:
                    75:9f:69:1e:5d:a5:8d:fb:28:2c:86:42:e1:e0:e3:
                    a2:6f:53:3d:d9:0d:16:a3:a8:08:61:0b:54:3e:fc:
                    48:df:43:b3:e2:ab:97:c8:cb:46:11:87:64:cc:6f:
                    da:19:1a:cb:92:07:c2:32:ff:cd:36:c4:1c:42:fe:
                    52:d7:e8:16:e6:58:3a:e7:3e:45:b8:48:bc:30:c2:
                    a2:cc:01:d7:2b:8a:12:bd:f3:79:3f:b7:12:84:95:
                    e1:dc:95:fc:01:88:45:1e:6c:01:14:48:b0:a6:f1:
                    32:36:df:56:d7:ab:e9:12:64:ea:c1:b3:02:41:6d:
                    22:51:59:fc:97:3d:18:73:c6:aa:db:1b:e7:b2:be:
                    f4:3a:ac:ac:e9:32:11:d6:7d:4c:d6:49:e6:73:76:
                    0f:3e:1e:7c:8a:ca:fb:56:79:f8:a3:2b:04:a7:fe:
                    d8:81:ee:e1:2d:32:5d:b6:76:04:9d:f4:8a:cd:73:
                    a8:1d:a7:99:18:92:d5:7c:42:2e:ef:84:8d:c5:66:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1F:50:16:86:2B:12:97:27:C1:26:F7:28:98:5A:FC:05:B1:63:A5
            X509v3 Authority Key Identifier:
                keyid:C7:B0:BD:B5:53:A8:3D:0C:22:DB:29:AA:29:29:CA:01:69:82:C5:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/C7B0BDB553A83D0C22DB29AA2929CA016982C55D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7B0BDB553A83D0C22DB29AA2929CA016982C55D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131322e302f32322d3234203d3e20323637303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:15:41:e2:52:12:56:2c:4c:57:7e:ea:ed:19:20:2c:6a:57:
         52:ec:fa:3d:5e:1b:9a:07:fa:cd:d0:cc:f4:e7:a6:d2:06:8c:
         1b:72:3a:a5:8e:1d:ef:5a:7b:78:ee:1a:f2:6b:4f:da:77:9b:
         5c:48:e6:13:80:ee:d2:35:40:64:2a:7c:bc:ae:17:e6:3d:27:
         af:d8:bd:d6:86:15:36:f2:6d:67:d4:3a:a0:79:d8:23:2b:7c:
         d8:80:c4:f0:b5:90:ba:63:7b:ec:0d:b0:65:43:71:bf:3e:88:
         c4:d8:9f:28:e7:71:d8:5a:35:df:8e:9a:21:de:d4:8b:18:ff:
         6c:ce:2e:bb:3a:73:61:20:8e:d9:1b:bf:b5:37:c2:23:8d:7f:
         cf:47:2a:de:65:24:5f:58:82:1d:77:a7:39:2c:be:35:95:56:
         c6:04:7c:0e:ee:63:9e:78:a8:0b:06:ad:3f:41:c6:a3:7b:2d:
         b2:31:8a:f9:ba:db:12:4e:a4:7f:1f:b2:02:82:9a:1c:fa:25:
         4b:da:64:44:4e:5b:be:2d:46:92:8e:de:42:05:4d:ca:4c:e2:
         9a:fa:84:28:da:a5:34:60:e8:0a:13:97:0c:92:8d:c4:cb:a5:
         ba:0e:dd:9e:a9:ad:b4:53:60:22:52:43:eb:35:9d:be:27:bb:
         b5:ee:20:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:12 2025 by rpki-client on console.sobornost.net