Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/34352e362e3133362e302f32322d3234203d3e20323636313336.roa
File:                     34352e362e3133362e302f32322d3234203d3e20323636313336.roa (raw, json)
Hash identifier:          xVTS9aY7JJWTF69eZmGnn2UtRow1ARVcIof6mdgGYvk=
Subject key identifier:   93:1B:56:FF:19:CA:E6:C6:C7:50:7D:AA:9D:81:67:6B:10:31:B9:F4
Certificate issuer:       /CN=43A7C7C2B310D67DE688F19B159433597525FE31
Certificate serial:       3CFB9DA3F46DFBA6BAAD6CA066EAB827CAF66676
Authority key identifier: 43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/34352e362e3133362e302f32322d3234203d3e20323636313336.roa
Signing time:             Thu 06 Mar 2025 19:00:01 +0000
ROA not before:           Thu 06 Mar 2025 18:55:01 +0000
ROA not after:            Fri 06 Mar 2026 19:00:01 +0000
asID:                     266136
IP address blocks:        45.6.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl
                          rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fb:9d:a3:f4:6d:fb:a6:ba:ad:6c:a0:66:ea:b8:27:ca:f6:66:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A7C7C2B310D67DE688F19B159433597525FE31
        Validity
            Not Before: Mar  6 18:55:01 2025 GMT
            Not After : Mar  6 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:2a:e5:e8:6b:76:19:23:83:9b:08:16:46:
                    47:33:15:d5:73:dd:46:19:d3:15:56:ad:5a:7e:95:
                    21:66:38:fc:94:a0:b8:87:d0:af:93:a1:5a:df:b5:
                    f8:a4:8b:f8:90:9b:b0:7a:81:5b:f5:70:70:c4:c2:
                    8a:86:b1:e1:e6:26:dc:3c:75:52:e7:26:3e:cc:ff:
                    fe:7b:ef:57:6a:9b:ba:25:18:77:54:63:be:3e:ce:
                    68:9e:be:09:36:53:16:8c:ed:76:05:7e:a1:9e:c8:
                    0e:14:3b:7c:5c:bb:e6:22:a3:1e:82:b9:1c:e6:ee:
                    83:a6:c4:31:3d:d2:e5:e1:b3:72:12:79:1e:e7:e1:
                    32:87:ec:60:75:b9:c7:1a:a3:01:63:cb:7a:1f:d4:
                    a9:77:ca:8a:32:9f:7c:c9:68:8a:23:65:14:59:13:
                    ab:71:46:89:62:c1:c2:5f:27:01:de:88:1d:f3:7d:
                    bf:3d:1f:7d:d1:cd:a8:ca:47:c0:f4:cd:92:38:8d:
                    45:39:13:d2:f7:86:b4:c6:10:54:89:07:e2:49:89:
                    10:01:5d:4c:80:b9:99:eb:f2:f5:e0:74:2d:fa:ab:
                    2e:30:33:3d:08:b0:95:fd:4d:8d:dd:6e:18:80:15:
                    32:7a:71:63:bc:ca:4d:9b:c3:aa:9c:ee:08:46:14:
                    24:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1B:56:FF:19:CA:E6:C6:C7:50:7D:AA:9D:81:67:6B:10:31:B9:F4
            X509v3 Authority Key Identifier:
                keyid:43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/34352e362e3133362e302f32322d3234203d3e20323636313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:a3:06:d1:a7:0d:5e:24:07:0f:47:35:00:48:31:ee:33:9a:
         ca:01:bc:b3:70:bd:27:c3:91:5f:cb:c3:9e:1b:b8:d9:42:56:
         de:d1:c6:8b:f3:f2:fd:39:43:95:69:71:25:a1:17:8b:58:52:
         cc:ea:46:09:38:de:43:cd:27:0b:d6:db:d7:fe:71:d0:01:1e:
         b1:9d:c6:d0:ec:d8:a0:14:be:ba:52:b6:f1:35:09:18:04:e2:
         24:23:76:bf:85:13:f8:9c:26:b5:ea:f0:44:82:74:f5:9a:32:
         53:f6:7a:82:74:c5:c5:02:1b:98:00:05:7c:68:90:4e:d2:56:
         00:84:d8:1b:bb:5c:a5:f7:3d:b6:6e:16:44:de:1b:5f:6d:e2:
         9e:f9:3c:e4:f5:14:4c:4c:01:36:66:79:46:c9:55:b9:87:ad:
         92:4d:31:fb:ee:97:0f:98:cb:25:a4:4a:89:07:b1:94:f1:d3:
         3c:51:eb:ff:34:11:e3:2d:32:e4:fb:75:4c:2f:b3:fe:72:4c:
         ff:3b:7d:41:38:c3:5d:fa:42:6b:85:cb:67:45:22:30:3d:34:
         9c:12:83:90:69:bd:04:06:32:34:b1:15:53:48:59:83:12:fd:
         3f:61:a7:51:97:0c:15:4e:c3:f8:e8:02:e8:4f:9e:36:0a:a6:
         97:b0:15:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:27 2025 by rpki-client on console.sobornost.net