Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3332203d3e20323638303239.roa
File:                     34352e3136382e35322e302f32322d3332203d3e20323638303239.roa (raw, json)
Hash identifier:          vVHa43rKpGGbpv4Z9qchlES0Se/oYCQmYzzkcjNjt6c=
Subject key identifier:   78:62:F1:82:AA:54:FD:AE:B8:6F:D0:3C:EE:E3:75:9C:E1:54:A6:8C
Certificate issuer:       /CN=677766EC5972FF0FC4FBA6F57085123BEB48BE31
Certificate serial:       7B152CD729987CBF310407DAE67044B097984978
Authority key identifier: 67:77:66:EC:59:72:FF:0F:C4:FB:A6:F5:70:85:12:3B:EB:48:BE:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3332203d3e20323638303239.roa
Signing time:             Fri 17 Jan 2025 14:55:04 +0000
ROA not before:           Fri 17 Jan 2025 14:50:04 +0000
ROA not after:            Fri 16 Jan 2026 14:55:04 +0000
asID:                     268029
IP address blocks:        45.168.52.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.crl
                          rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 17:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:15:2c:d7:29:98:7c:bf:31:04:07:da:e6:70:44:b0:97:98:49:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677766EC5972FF0FC4FBA6F57085123BEB48BE31
        Validity
            Not Before: Jan 17 14:50:04 2025 GMT
            Not After : Jan 16 14:55:04 2026 GMT
        Subject: CN=7862F182AA54FDAEB86FD03CEEE3759CE154A68C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:89:7b:04:26:66:74:46:06:e1:09:ad:41:18:
                    de:6c:f0:64:fe:04:ce:04:79:57:1e:00:f7:7d:99:
                    2d:2e:19:fb:ed:fb:1e:dc:f1:a2:e3:66:31:28:96:
                    ba:99:ee:d4:82:dd:9b:e6:83:19:a4:56:ff:0c:54:
                    87:ba:4b:65:4b:0e:3d:bf:e7:62:a3:4c:c0:f8:85:
                    4f:05:a5:04:3d:89:13:62:f2:bc:56:ed:df:1e:dc:
                    0f:86:2f:03:23:57:e2:2d:63:0a:65:8d:f8:de:12:
                    c0:1c:4e:a8:ce:9c:d9:fc:5d:3a:67:dd:7e:a7:75:
                    9b:43:a2:fc:de:d4:67:b1:cf:99:43:6c:38:bc:51:
                    bb:90:d9:53:72:26:6f:ac:26:ca:0e:e2:f7:47:01:
                    d0:50:7b:0a:e9:59:be:38:c1:fa:0d:d5:c1:96:d9:
                    40:e2:e0:61:55:51:33:fd:0f:98:2c:31:e1:30:a6:
                    bc:d0:e5:6c:f2:88:1f:3a:74:a9:cb:39:c2:de:41:
                    7b:f2:5d:9c:bd:7c:c1:38:00:3d:36:66:89:64:ba:
                    2f:6a:15:b5:4e:b2:ae:29:af:fb:8e:ac:87:7e:6f:
                    44:1a:a0:d7:dc:2b:c4:16:64:41:97:5c:d6:20:f0:
                    25:87:8b:25:0e:73:83:b0:f2:3b:13:d9:be:88:b3:
                    a8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:62:F1:82:AA:54:FD:AE:B8:6F:D0:3C:EE:E3:75:9C:E1:54:A6:8C
            X509v3 Authority Key Identifier:
                keyid:67:77:66:EC:59:72:FF:0F:C4:FB:A6:F5:70:85:12:3B:EB:48:BE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3332203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:c4:32:45:d6:f3:cb:9a:7e:e3:fe:cf:65:0c:e9:a7:e0:79:
         25:26:ea:03:c4:79:f9:20:6a:97:5b:e3:78:24:e1:c0:a0:c0:
         46:7c:4f:72:30:b4:8f:3e:db:0c:30:80:96:39:83:f5:54:37:
         cf:5a:a2:ae:9a:17:d7:79:6c:ea:ff:80:07:fe:cb:3f:83:67:
         6b:58:c9:94:48:79:a3:39:ec:b8:e1:ee:e1:96:8c:4f:e8:16:
         83:14:78:ae:48:bd:f2:bb:14:1e:10:fb:0c:22:a2:6a:34:e1:
         fe:8b:53:fe:b9:d8:87:aa:e1:f9:d7:3c:a6:bd:38:ca:f1:49:
         7e:c7:44:d6:eb:4f:0a:77:9a:fd:83:f9:3a:42:d7:e3:d2:3b:
         bb:ca:d2:27:86:60:b2:d5:05:a9:c3:80:84:1a:df:4b:d5:f2:
         a5:06:62:12:bd:aa:52:0b:63:76:5e:fa:a9:31:04:2d:05:6e:
         cc:a7:2b:e8:32:89:22:bf:52:d0:6a:6a:38:d4:1f:4b:0d:4f:
         43:36:0a:5f:77:83:b2:b0:77:14:03:32:10:4e:e3:45:e8:35:
         d6:46:56:85:7f:68:05:d4:9e:f4:65:cc:6e:bc:03:be:5e:15:
         6c:bb:dd:ed:a4:17:d5:a1:c7:d4:3d:18:6c:4b:6c:ec:1c:69:
         2d:0d:b6:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUexUs1ymYfL8xBAfa5nBEsJeYSXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3NzY2RUM1OTcyRkYwRkM0RkJBNkY1NzA4NTEyM0JF
QjQ4QkUzMTAeFw0yNTAxMTcxNDUwMDRaFw0yNjAxMTYxNDU1MDRaMDMxMTAvBgNV
BAMTKDc4NjJGMTgyQUE1NEZEQUVCODZGRDAzQ0VFRTM3NTlDRTE1NEE2OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYiXsEJmZ0RgbhCa1BGN5s8GT+
BM4EeVceAPd9mS0uGfvt+x7c8aLjZjEolrqZ7tSC3ZvmgxmkVv8MVIe6S2VLDj2/
52KjTMD4hU8FpQQ9iRNi8rxW7d8e3A+GLwMjV+ItYwpljfjeEsAcTqjOnNn8XTpn
3X6ndZtDovze1Gexz5lDbDi8UbuQ2VNyJm+sJsoO4vdHAdBQewrpWb44wfoN1cGW
2UDi4GFVUTP9D5gsMeEwprzQ5WzyiB86dKnLOcLeQXvyXZy9fME4AD02Zolkui9q
FbVOsq4pr/uOrId+b0QaoNfcK8QWZEGXXNYg8CWHiyUOc4Ow8jsT2b6Is6itAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUeGLxgqpU/a64b9A87uN1nOFUpowwHwYDVR0j
BBgwFoAUZ3dm7Fly/w/E+6b1cIUSO+tIvjEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkZuRkNGNThVVWd6U3RiRExuNmtBdFQ3NGplVERXNUFyZzhCSGVvRmpl
Y1UvMC82Nzc3NjZFQzU5NzJGRjBGQzRGQkE2RjU3MDg1MTIzQkVCNDhCRTMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3Nzc2NkVDNTk3MkZGMEZD
NEZCQTZGNTcwODUxMjNCRUI0OEJFMzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZGbkZDRjU4VVVnelN0YkRMbjZrQXRUNzRqZVREVzVBcmc4Qkhlb0ZqZWNVLzAv
MzQzNTJlMzEzNjM4MmUzNTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLag0MA0GCSqGSIb3DQEBCwUAA4IBAQCNxDJF1vPL
mn7j/s9lDOmn4HklJuoDxHn5IGqXW+N4JOHAoMBGfE9yMLSPPtsMMICWOYP1VDfP
WqKumhfXeWzq/4AH/ss/g2drWMmUSHmjOey44e7hloxP6BaDFHiuSL3yuxQeEPsM
IqJqNOH+i1P+udiHquH51zymvTjK8Ul+x0TW608Kd5r9g/k6Qtfj0ju7ytInhmCy
1QWpw4CEGt9L1fKlBmISvapSC2N2XvqpMQQtBW7MpyvoMokiv1LQamo41B9LDU9D
Ngpfd4OysHcUAzIQTuNF6DXWRlaFf2gF1J70ZcxuvAO+XhVsu93tpBfVocfUPRhs
S2zsHGktDbbc
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:08 2025 by rpki-client on console.sobornost.net