Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36362e302f32332d3233203d3e20323637343132.roa
File:                     34352e3233352e36362e302f32332d3233203d3e20323637343132.roa (raw, json)
Hash identifier:          xrM42NhcNVpqpFEldhD+/hW6C5aykRI+kdEM0NZpel8=
Subject key identifier:   F5:37:E4:C3:31:9D:CD:A6:59:9E:1C:CB:CC:92:D8:FF:D4:06:E4:6D
Certificate issuer:       /CN=07FCA7D1215090422388794719E04DCE9A5F39AA
Certificate serial:       125C9159BACF26F3106C02E96DD150B5D464844B
Authority key identifier: 07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36362e302f32332d3233203d3e20323637343132.roa
Signing time:             Mon 03 Feb 2025 17:47:18 +0000
ROA not before:           Mon 03 Feb 2025 17:42:18 +0000
ROA not after:            Mon 02 Feb 2026 17:47:18 +0000
asID:                     267412
IP address blocks:        45.235.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5c:91:59:ba:cf:26:f3:10:6c:02:e9:6d:d1:50:b5:d4:64:84:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FCA7D1215090422388794719E04DCE9A5F39AA
        Validity
            Not Before: Feb  3 17:42:18 2025 GMT
            Not After : Feb  2 17:47:18 2026 GMT
        Subject: CN=F537E4C3319DCDA6599E1CCBCC92D8FFD406E46D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:06:85:7c:a2:1f:a5:ca:c0:e4:e7:ba:6a:
                    bc:0a:f1:a4:9d:c2:46:51:fc:97:aa:1e:6d:d9:cc:
                    e0:94:df:ea:19:da:9b:ad:c0:ce:b1:7f:c0:a2:14:
                    da:13:16:cb:f4:a6:ec:e3:89:7d:d3:b7:e4:8f:66:
                    bf:a0:e5:22:b4:3f:73:1c:19:02:c1:4b:00:a5:c3:
                    ba:da:00:08:b9:ce:18:1c:72:28:b8:9f:ad:60:39:
                    f9:15:50:6f:f2:d5:e8:b6:0f:68:7a:f2:30:77:ff:
                    80:48:51:d2:a4:9e:d2:c6:00:cf:dd:70:7a:fc:f4:
                    04:ee:0b:fe:d6:a7:3e:e7:5f:8d:26:81:78:0e:e8:
                    23:ca:1b:f8:c5:99:0b:c4:3b:33:36:41:ab:03:f5:
                    8d:3f:b2:0b:e8:0f:fd:a8:f9:30:a6:fc:1a:97:f3:
                    e3:fa:bd:8d:c2:7e:e7:04:ce:42:7d:25:bb:65:89:
                    ba:09:6d:18:bc:37:58:61:38:8b:3e:42:f8:9b:28:
                    11:29:29:de:46:ee:98:99:4a:e4:ff:51:57:f4:ee:
                    03:a3:4e:69:d4:b2:98:37:bf:9a:c1:84:e9:0b:ca:
                    8b:66:f1:39:ad:3d:ea:31:40:62:c4:a6:6a:9a:8a:
                    e9:ab:a5:8f:af:11:ad:55:d5:b9:f6:a1:14:31:24:
                    04:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:37:E4:C3:31:9D:CD:A6:59:9E:1C:CB:CC:92:D8:FF:D4:06:E4:6D
            X509v3 Authority Key Identifier:
                keyid:07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36362e302f32332d3233203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:db:80:1d:f1:e1:21:16:c1:cc:ea:78:d3:47:d7:ea:49:ed:
         72:7a:b4:22:04:f6:a6:cb:5c:2b:30:0a:83:fb:2e:82:8c:02:
         5f:88:e7:2a:16:7a:a9:12:dc:52:90:f4:5e:59:84:03:fa:ed:
         6a:4c:c5:10:8d:02:c5:f4:3a:55:f4:ca:0b:43:83:7b:c5:8d:
         de:e2:84:72:70:a3:7b:50:d3:ce:51:66:c4:03:ad:e8:f1:fd:
         f9:ec:9f:2e:1f:4f:6a:57:8e:ed:e5:fe:b6:ca:88:c8:28:f9:
         f1:f1:ae:99:8d:e0:07:db:68:65:1c:98:f0:8c:e7:36:92:08:
         c4:28:8d:b5:60:8e:1a:aa:38:a3:d2:64:e5:0b:6c:82:22:53:
         9c:6e:85:f1:e9:65:ae:5c:af:a7:f5:3d:4a:31:47:24:7b:3f:
         a4:84:74:7e:86:c7:99:80:9b:1a:c6:c1:45:fd:1e:3d:c5:6d:
         a2:48:f7:03:79:59:e6:aa:b1:03:4c:33:53:82:c8:c4:01:25:
         09:cf:86:56:fc:8e:c3:48:8e:1b:50:9f:16:23:2e:23:09:6d:
         21:85:c6:04:1d:ef:a7:cd:f6:73:42:ed:1e:af:60:83:ae:b2:
         a8:ce:d1:04:c0:11:89:38:39:a8:0e:ca:ea:69:3c:3d:94:a5:
         dc:49:3a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:09 2025 by rpki-client on console.sobornost.net