Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33382e302f32342d3234203d3e20323638373930.roa
File:                     34352e3137332e33382e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier:          hZZ0gxMtlVAKq3lvB6kFQa9ncXozppPbYYwMHY5fAeI=
Subject key identifier:   B2:7D:60:6B:9E:6B:0A:E5:E0:4A:D0:C0:A9:3C:E4:40:12:84:0C:CF
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       41D583DEA63693110681F42DDC9814C3DDA44D80
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33382e302f32342d3234203d3e20323638373930.roa
Signing time:             Tue 15 Apr 2025 22:36:30 +0000
ROA not before:           Tue 15 Apr 2025 22:31:30 +0000
ROA not after:            Tue 14 Apr 2026 22:36:30 +0000
asID:                     268790
IP address blocks:        45.173.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d5:83:de:a6:36:93:11:06:81:f4:2d:dc:98:14:c3:dd:a4:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Apr 15 22:31:30 2025 GMT
            Not After : Apr 14 22:36:30 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8e:de:26:b7:2e:b6:49:d0:f4:17:2b:8f:13:
                    bc:6f:14:89:43:f1:0f:bd:a2:6f:42:f9:43:c4:4b:
                    73:73:37:d5:41:51:e0:cf:a3:a2:fd:f1:f1:1c:10:
                    c5:96:21:66:34:b3:e9:ec:e2:68:fa:cc:a9:df:37:
                    34:b8:f4:41:83:65:34:22:09:d3:dc:2d:62:3a:16:
                    04:de:5d:cc:7a:e5:2d:61:78:03:6c:ab:cd:d6:81:
                    a3:7f:b6:91:df:a7:4f:c0:f1:f1:bb:c8:13:87:65:
                    5e:4a:80:ec:fc:ac:e6:b3:3e:46:2b:3a:a4:1d:eb:
                    9b:37:56:f0:56:3b:dd:fd:e9:04:fd:43:db:27:9e:
                    90:e6:ee:e9:de:89:c2:7b:03:dc:87:c4:6c:5a:8f:
                    c9:7a:ec:b9:48:87:34:33:68:dc:e7:62:6d:05:b8:
                    9d:36:08:b2:20:c8:22:d3:a2:bf:6c:9c:5a:36:af:
                    31:20:9c:10:1c:7c:03:8c:fd:f9:3c:52:4a:dd:ca:
                    6c:93:17:5f:42:03:14:82:81:c6:3f:06:51:66:05:
                    38:be:25:0e:5c:8a:93:ee:2e:c1:59:41:9b:90:44:
                    f8:b7:8b:3d:fd:a5:c4:9f:46:ac:8b:66:5e:2d:8b:
                    ea:90:95:0f:68:60:8f:0a:fd:a5:61:94:ea:d9:f3:
                    bb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7D:60:6B:9E:6B:0A:E5:E0:4A:D0:C0:A9:3C:E4:40:12:84:0C:CF
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33382e302f32342d3234203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ff:d0:20:c5:10:4f:18:cf:80:83:6b:47:2c:cd:06:70:86:
         dd:53:c4:62:83:f5:64:f8:45:bd:8b:42:47:87:0c:03:f3:85:
         e6:40:32:a5:3e:a7:e8:c3:7d:62:f3:d0:0c:f0:be:17:27:20:
         d6:d9:69:d2:0a:08:20:e3:51:29:9d:26:e0:3f:69:f8:82:48:
         e1:a0:01:48:c4:27:c1:a2:3d:24:07:ec:83:84:95:9e:9a:b3:
         19:cc:9b:8c:c4:f6:71:4f:4e:72:cc:d0:20:32:d2:f8:48:c6:
         82:d6:27:05:5e:cf:5b:2f:af:2d:c4:15:d1:23:f3:a1:28:9d:
         3d:ed:8a:0c:82:9e:ab:29:16:41:b4:21:d3:99:4e:26:0b:1a:
         08:ca:04:63:66:bd:a9:c0:ca:26:ea:5d:14:6e:a2:fc:e3:1e:
         25:10:26:d2:91:38:60:f8:e7:06:6c:bc:2b:08:9f:86:e4:0c:
         7f:46:79:17:3e:19:b4:c4:65:8e:4c:d3:68:02:f2:7a:34:f1:
         ce:2d:f6:da:41:d1:6b:81:4a:1e:96:4d:7c:32:cc:33:c1:b2:
         d7:b5:11:2e:11:bb:90:7d:a8:9c:4f:a8:93:cc:af:0b:2d:f2:
         09:1f:16:88:28:7a:2d:cd:1c:d4:84:89:3c:76:3e:78:a8:81:
         91:5a:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:46 2025 by rpki-client on console.sobornost.net