Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36342e302f32322d3232203d3e20323637343132.roa
File:                     34352e3233352e36342e302f32322d3232203d3e20323637343132.roa (raw, json)
Hash identifier:          qABO6wN6mG8vqIHSvpVeZhCDOZYd3BiuwYq9r/d3EIE=
Subject key identifier:   9E:94:2C:EB:E3:18:C6:EE:B6:81:FD:BB:08:95:D4:58:39:5F:C7:0D
Certificate issuer:       /CN=07FCA7D1215090422388794719E04DCE9A5F39AA
Certificate serial:       5543BBCA83510EA0F7C3E445397AEFDA5E5A4C0B
Authority key identifier: 07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36342e302f32322d3232203d3e20323637343132.roa
Signing time:             Mon 03 Feb 2025 17:46:15 +0000
ROA not before:           Mon 03 Feb 2025 17:41:15 +0000
ROA not after:            Mon 02 Feb 2026 17:46:15 +0000
asID:                     267412
IP address blocks:        45.235.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:43:bb:ca:83:51:0e:a0:f7:c3:e4:45:39:7a:ef:da:5e:5a:4c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FCA7D1215090422388794719E04DCE9A5F39AA
        Validity
            Not Before: Feb  3 17:41:15 2025 GMT
            Not After : Feb  2 17:46:15 2026 GMT
        Subject: CN=9E942CEBE318C6EEB681FDBB0895D458395FC70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a6:69:a8:54:f0:42:83:9a:fb:5c:78:77:76:
                    c7:d3:ec:83:69:ef:8c:c6:5c:b5:9d:ae:2f:bc:58:
                    07:42:d2:ec:00:ac:2e:cf:2c:1c:f9:72:98:ef:a3:
                    31:a1:bc:76:c2:f8:09:f2:fc:e9:a6:b9:1b:5c:a8:
                    85:18:aa:d2:ed:3d:61:e1:1f:60:8e:5f:26:12:db:
                    b9:14:aa:2b:eb:78:bf:cd:28:cf:e8:e2:19:c6:41:
                    cb:c6:53:76:69:c0:1f:df:0b:18:41:76:da:4f:21:
                    66:e4:43:8d:39:75:a6:aa:b7:f5:1d:18:bf:b0:7b:
                    86:24:52:fa:de:54:bf:16:8f:7d:bb:54:62:a2:ab:
                    9b:a9:20:f1:53:48:e4:63:55:65:be:a4:ec:6f:e4:
                    61:fd:64:e0:2d:7d:a3:aa:12:f2:69:d9:6d:35:ef:
                    39:e2:6b:23:f6:5d:47:42:e9:f8:bb:ba:f7:17:04:
                    f7:ee:78:4f:70:0c:d1:d1:d3:8a:a3:da:65:09:94:
                    7a:68:52:d6:09:e7:1d:c1:b6:87:a1:d0:82:e8:5a:
                    5a:68:e8:2b:fe:5e:5c:42:14:c4:8a:74:2a:6c:98:
                    71:05:b5:4b:56:8c:e8:a8:1d:2f:f9:45:f2:b2:31:
                    8c:d5:cf:58:30:40:ab:5d:55:f4:ae:6a:d3:03:82:
                    85:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:94:2C:EB:E3:18:C6:EE:B6:81:FD:BB:08:95:D4:58:39:5F:C7:0D
            X509v3 Authority Key Identifier:
                keyid:07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36342e302f32322d3232203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:58:dc:f9:7d:2e:c9:45:dd:15:58:21:2e:b0:32:0f:e4:3f:
         b4:9b:bd:e0:bf:4e:88:3a:a7:4a:8c:9f:29:8c:c2:87:94:e0:
         66:5d:e6:f3:a0:bc:78:36:1d:3a:5d:00:3e:d0:2d:83:58:7a:
         e8:02:62:b7:a4:0d:99:2c:01:3f:34:12:56:df:3a:68:80:c9:
         98:a7:8b:42:4f:7b:20:4b:ff:11:5f:ed:c2:41:55:2b:65:d2:
         77:f0:0e:e2:15:c1:f1:8d:89:84:64:1b:3a:9d:16:51:c7:cb:
         cc:8f:22:ed:f9:a1:f6:72:7f:ef:88:3c:d7:34:f3:75:18:86:
         52:ce:00:50:5b:44:63:a6:83:79:8b:61:b7:84:6e:15:0f:25:
         33:54:9b:f1:0e:53:df:4f:d5:18:7f:80:95:94:14:6b:d0:1c:
         c2:4a:98:13:32:73:f8:e8:4c:8f:6b:0f:1f:5c:e2:7b:6a:46:
         4a:36:8c:0c:77:e7:c7:75:b5:37:e0:cf:80:68:1f:24:91:23:
         93:ff:5c:77:44:db:a0:6c:aa:c5:56:29:55:8e:ce:21:59:d7:
         e9:0a:1d:dc:6b:f1:4f:c7:88:ef:da:47:c9:3e:e6:b0:18:a4:
         8f:73:30:98:9d:72:4f:7b:15:3f:bf:a4:d7:ab:37:98:e2:bd:
         67:0d:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:09 2025 by rpki-client on console.sobornost.net