Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33372e302f32342d3234203d3e20323638373930.roa
File:                     34352e3137332e33372e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier:          fC99F6JCH3hWZ0zlVpRbDsR5JCBFGVTiuDOhmMC1ZUU=
Subject key identifier:   C7:F5:E7:EA:5B:CE:91:E7:F8:5A:FB:68:FB:5A:90:7D:4D:8F:81:1A
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       2D2FDEC7B4C81962DCCE1390A55C427A101F6133
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33372e302f32342d3234203d3e20323638373930.roa
Signing time:             Tue 15 Apr 2025 22:36:28 +0000
ROA not before:           Tue 15 Apr 2025 22:31:28 +0000
ROA not after:            Tue 14 Apr 2026 22:36:28 +0000
asID:                     268790
IP address blocks:        45.173.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 14:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2f:de:c7:b4:c8:19:62:dc:ce:13:90:a5:5c:42:7a:10:1f:61:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Apr 15 22:31:28 2025 GMT
            Not After : Apr 14 22:36:28 2026 GMT
        Subject: CN=3082010A0282010100E45CC1527F2F6014D5FF5E50F26978D2CAF1EED6914C6D83588617D6EEF3B2AED23D3BD8C06AE13C511D7E539399016A011B29EC2B71E959FFD74164048B7687BEBDF7696F5A68CB6215283C0F602951AE6DF5FB5B22E91C7D6CF671BFF4A45496BDC1587455976D2E880DA1B5D47B19E687916410A550A4830C90D274D95F7FD9BF7CE5D8A8436B86885EDD58A6C2B5131B41881D1E28352D51BFA7AC7D372B136455B4B373574F903CE056B4E63E74D82390011EF56E4761701552DF27F1B9B552209515CD1AC84808588915BF399F32074042AD0A231676F8AA18E5B83683D96F2936E02121FA3432B9BDEF64FF656455B684B709015AD9A369D070F5C1D50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5c:c1:52:7f:2f:60:14:d5:ff:5e:50:f2:69:
                    78:d2:ca:f1:ee:d6:91:4c:6d:83:58:86:17:d6:ee:
                    f3:b2:ae:d2:3d:3b:d8:c0:6a:e1:3c:51:1d:7e:53:
                    93:99:01:6a:01:1b:29:ec:2b:71:e9:59:ff:d7:41:
                    64:04:8b:76:87:be:bd:f7:69:6f:5a:68:cb:62:15:
                    28:3c:0f:60:29:51:ae:6d:f5:fb:5b:22:e9:1c:7d:
                    6c:f6:71:bf:f4:a4:54:96:bd:c1:58:74:55:97:6d:
                    2e:88:0d:a1:b5:d4:7b:19:e6:87:91:64:10:a5:50:
                    a4:83:0c:90:d2:74:d9:5f:7f:d9:bf:7c:e5:d8:a8:
                    43:6b:86:88:5e:dd:58:a6:c2:b5:13:1b:41:88:1d:
                    1e:28:35:2d:51:bf:a7:ac:7d:37:2b:13:64:55:b4:
                    b3:73:57:4f:90:3c:e0:56:b4:e6:3e:74:d8:23:90:
                    01:1e:f5:6e:47:61:70:15:52:df:27:f1:b9:b5:52:
                    20:95:15:cd:1a:c8:48:08:58:89:15:bf:39:9f:32:
                    07:40:42:ad:0a:23:16:76:f8:aa:18:e5:b8:36:83:
                    d9:6f:29:36:e0:21:21:fa:34:32:b9:bd:ef:64:ff:
                    65:64:55:b6:84:b7:09:01:5a:d9:a3:69:d0:70:f5:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F5:E7:EA:5B:CE:91:E7:F8:5A:FB:68:FB:5A:90:7D:4D:8F:81:1A
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33372e302f32342d3234203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:2a:4f:ce:e4:84:7e:3c:92:8d:13:4a:67:93:71:e2:ce:41:
         8b:aa:c7:ba:93:38:07:7b:33:7b:c1:d9:6a:02:e2:47:d8:4f:
         a9:bb:0b:18:90:48:56:b9:35:e6:a2:4c:fb:3d:d8:9a:fe:58:
         2b:fa:bc:02:d5:9b:22:8d:19:e0:e5:37:43:fc:33:95:46:86:
         cc:2e:d9:69:f5:52:f3:4c:f0:45:89:78:bd:71:ca:99:71:36:
         05:dd:6e:57:f8:94:25:b5:7a:53:30:eb:2d:53:ac:51:5e:b5:
         29:64:b0:5f:02:31:95:40:c8:7c:6f:fc:d1:20:d8:c0:4e:13:
         ff:46:94:19:24:fb:2c:5f:21:43:63:17:41:89:13:b2:1b:dd:
         ec:5d:b6:13:8d:14:7f:ff:1a:68:e5:11:0f:70:0d:35:f2:aa:
         0e:ff:77:38:8b:64:62:5d:2e:7b:b9:2d:34:d3:df:4b:e6:35:
         c5:82:6c:f3:1a:1e:f6:ba:ea:73:4d:5f:a5:9a:32:61:3b:26:
         f5:6a:77:0c:63:02:4c:aa:e7:c4:b2:78:73:a2:6c:55:f2:28:
         a7:c5:be:04:8d:e1:21:b5:4e:52:40:31:a0:d5:cc:02:14:c0:
         9d:d2:0c:c9:25:de:a5:7c:4b:8e:82:3a:d6:4f:f8:26:8d:35:
         f1:f3:87:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:10 2025 by rpki-client on console.sobornost.net