Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/34352e3138312e3139322e302f32322d3233203d3e20323639323033.roa
File:                     34352e3138312e3139322e302f32322d3233203d3e20323639323033.roa (raw, json)
Hash identifier:          RTprnNg5aQfyb92AvIkxl/fHyWTeQKd0ma+1zK6ILDA=
Subject key identifier:   FD:9C:7A:FB:73:B5:C2:DC:97:62:E5:F8:71:9C:22:87:86:72:F5:61
Certificate issuer:       /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
Certificate serial:       09368EDEEDAAF9275ABDF2D6F6267AB3123A5BAF
Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/34352e3138312e3139322e302f32322d3233203d3e20323639323033.roa
Signing time:             Thu 06 Mar 2025 09:13:47 +0000
ROA not before:           Thu 06 Mar 2025 09:08:47 +0000
ROA not after:            Thu 05 Mar 2026 09:13:47 +0000
asID:                     269203
IP address blocks:        45.181.192.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl
                          rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 12:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:36:8e:de:ed:aa:f9:27:5a:bd:f2:d6:f6:26:7a:b3:12:3a:5b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
        Validity
            Not Before: Mar  6 09:08:47 2025 GMT
            Not After : Mar  5 09:13:47 2026 GMT
        Subject: CN=FD9C7AFB73B5C2DC9762E5F8719C22878672F561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:44:92:29:e6:fa:cb:f0:28:7f:14:e7:3a:
                    41:24:a3:5f:84:e7:34:c0:52:f1:48:46:83:e9:a8:
                    73:81:d1:5e:0d:e4:70:15:16:d1:a4:4c:25:09:47:
                    88:5d:d7:22:63:24:d6:5f:8c:56:3f:3b:f6:5f:c2:
                    05:d6:79:36:25:8f:ea:6c:3a:31:d1:ea:9a:2e:47:
                    a3:f1:9f:f3:a7:8a:82:d7:f1:5e:49:8a:45:50:cd:
                    d0:8e:99:4a:00:6f:07:c1:5e:d3:74:e8:5b:83:00:
                    9d:43:d1:2c:7e:be:a1:64:c3:c6:39:f2:14:4d:d2:
                    34:69:24:ca:a2:24:39:1b:72:ad:df:2a:3b:89:21:
                    98:39:62:7c:7b:90:5f:f7:8f:34:cd:eb:73:d1:e1:
                    e7:f7:46:8f:97:96:96:64:20:c6:61:2f:35:53:78:
                    81:ea:43:e5:94:bd:b6:dd:d1:8b:76:98:45:3a:1f:
                    63:91:41:6d:24:31:9e:c5:28:74:37:c9:b3:64:58:
                    51:c2:cb:32:50:da:23:b2:c5:35:e3:50:54:0e:d0:
                    7c:37:a5:45:59:90:a6:69:2b:d7:20:d9:82:7a:cf:
                    89:00:f4:93:2d:e2:59:f7:86:a9:9f:e8:67:11:6c:
                    e0:58:db:17:2d:36:56:04:01:18:ca:57:29:ac:e0:
                    bf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9C:7A:FB:73:B5:C2:DC:97:62:E5:F8:71:9C:22:87:86:72:F5:61
            X509v3 Authority Key Identifier:
                keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/34352e3138312e3139322e302f32322d3233203d3e20323639323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:09:8e:43:c4:c9:9d:89:b0:11:37:d4:6f:07:41:c9:af:02:
         e9:2b:4b:ba:60:69:74:02:f4:c1:26:8f:5f:55:e8:53:fb:6e:
         32:b5:e6:be:06:ac:e7:26:fb:ed:34:2b:97:3f:02:7e:fb:3e:
         22:f4:69:5e:ef:0d:18:54:ed:32:c6:a9:15:2a:df:f9:0c:84:
         d1:aa:81:b4:2c:14:14:37:ff:4d:b1:2c:3c:1f:92:a3:b5:5e:
         ee:f1:ed:98:12:dd:26:08:12:f2:6e:15:90:ef:e1:dd:74:b3:
         b1:98:34:d9:d3:88:a8:8a:26:2e:73:c7:c5:38:4c:40:76:a2:
         49:f5:cc:49:06:2d:22:27:3a:07:25:0e:bb:37:40:1d:0d:56:
         8f:72:37:01:45:65:c6:58:43:92:85:d9:c9:0b:b6:71:89:f8:
         64:b5:d0:b7:ad:84:72:e5:bf:cb:88:52:e0:94:bd:e3:76:d9:
         c4:ef:18:f4:c6:12:d3:9d:f7:af:1b:64:b2:6a:08:5e:df:ea:
         56:fc:cd:56:db:c3:39:94:ea:13:98:74:b8:57:dc:85:cb:bc:
         9f:ef:60:89:5c:08:13:d2:58:fc:4c:98:9c:76:3c:48:6e:df:
         ad:20:ef:6c:98:86:a2:8d:20:2c:ec:3b:7a:d1:78:13:b0:c1:
         89:7b:f6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net