Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/34352e3232342e3234342e302f32322d3234203d3e20323636393235.roa
File:                     34352e3232342e3234342e302f32322d3234203d3e20323636393235.roa (raw, json)
Hash identifier:          iBLz2T/OR1HlLYLoKFXnousAq1zp8cAO1WmT4NObH7U=
Subject key identifier:   EA:F6:0E:3B:2F:75:2A:B6:B5:BB:F6:AC:4F:7A:F6:11:0C:1B:68:10
Certificate issuer:       /CN=FFFC078448D76222F00690DC23A9C960738B25A8
Certificate serial:       0A8FA6E7CFC9E3042040B7CBB811C23028DB1018
Authority key identifier: FF:FC:07:84:48:D7:62:22:F0:06:90:DC:23:A9:C9:60:73:8B:25:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFC078448D76222F00690DC23A9C960738B25A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/34352e3232342e3234342e302f32322d3234203d3e20323636393235.roa
Signing time:             Thu 10 Apr 2025 13:49:21 +0000
ROA not before:           Thu 10 Apr 2025 13:44:21 +0000
ROA not after:            Thu 09 Apr 2026 13:49:21 +0000
asID:                     266925
IP address blocks:        45.224.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/FFFC078448D76222F00690DC23A9C960738B25A8.crl
                          rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/FFFC078448D76222F00690DC23A9C960738B25A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFC078448D76222F00690DC23A9C960738B25A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 02:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8f:a6:e7:cf:c9:e3:04:20:40:b7:cb:b8:11:c2:30:28:db:10:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFFC078448D76222F00690DC23A9C960738B25A8
        Validity
            Not Before: Apr 10 13:44:21 2025 GMT
            Not After : Apr  9 13:49:21 2026 GMT
        Subject: CN=EAF60E3B2F752AB6B5BBF6AC4F7AF6110C1B6810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:cc:ba:02:b0:b2:d6:64:3b:8d:90:30:c4:
                    61:22:76:f8:02:24:09:8c:10:b3:4f:6e:2c:c8:1f:
                    2d:e0:85:2d:4c:c1:64:1c:7a:27:81:9a:b9:3f:13:
                    4f:98:34:89:16:3c:c5:d3:0a:c8:97:d6:b3:14:3c:
                    6c:e7:be:6e:b2:38:12:4e:0b:35:6c:37:f4:cc:e1:
                    27:91:01:8c:9c:af:50:76:59:04:c8:77:2f:ff:15:
                    76:e0:81:ef:c0:5e:ae:32:dd:9d:bf:68:e0:7e:7d:
                    7b:e5:78:7c:f9:9f:7d:3a:42:27:61:49:93:29:a9:
                    7a:62:05:e9:f7:07:89:c0:51:17:5a:65:77:28:71:
                    57:9c:a8:97:f7:d1:c0:5f:bb:0c:96:fb:ee:ff:df:
                    39:0c:6d:d8:5d:5b:9a:33:c2:ba:05:f8:28:fa:7a:
                    63:e9:37:db:0b:9c:48:ed:69:2b:35:c3:44:f4:5c:
                    29:91:22:70:be:68:c6:44:60:ca:68:41:af:b9:7e:
                    d9:b3:df:13:31:4f:cc:28:b1:c1:bc:7b:6c:dc:f6:
                    20:64:81:3f:cf:e4:a9:29:52:61:18:3b:11:9b:39:
                    d0:64:01:5f:99:89:d0:45:4a:af:64:b1:67:7a:f1:
                    ca:97:4e:1b:8f:ed:8e:44:1d:d2:4e:2c:81:93:ec:
                    41:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F6:0E:3B:2F:75:2A:B6:B5:BB:F6:AC:4F:7A:F6:11:0C:1B:68:10
            X509v3 Authority Key Identifier:
                keyid:FF:FC:07:84:48:D7:62:22:F0:06:90:DC:23:A9:C9:60:73:8B:25:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/FFFC078448D76222F00690DC23A9C960738B25A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFC078448D76222F00690DC23A9C960738B25A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/34352e3232342e3234342e302f32322d3234203d3e20323636393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:5f:cc:86:0d:8e:a0:1a:d3:d3:be:2f:6b:3d:c0:f7:32:01:
         e9:b7:e1:eb:ce:19:13:37:58:41:56:9d:2d:0f:d1:b9:65:05:
         eb:f7:61:7b:64:0a:72:03:24:f1:67:7c:88:c7:db:17:53:b1:
         bd:62:3a:64:1f:55:ba:09:91:33:2f:b5:e2:ce:ec:8f:d6:c2:
         2e:4d:f2:39:7b:17:ea:0c:f1:29:c1:b9:3a:20:a4:b4:4e:a3:
         52:87:40:9c:48:8d:68:76:47:33:a5:0b:cf:b8:d1:69:34:48:
         89:5f:07:43:f8:b3:34:cd:fd:f4:7c:99:31:5b:84:5e:57:b6:
         a0:42:8c:8f:5d:93:8f:82:3f:74:6c:d0:62:e1:c7:4b:d0:3a:
         1a:c3:21:0d:bc:1a:67:10:6c:c0:7e:8e:9d:b4:58:5f:2d:82:
         0b:19:f8:68:c1:0f:6b:c8:08:57:ad:fb:66:d9:7b:0c:f5:b9:
         fa:86:10:c8:e4:8a:d3:44:c0:8d:6c:31:3b:f2:b4:f5:0c:77:
         cb:be:22:cf:11:3e:b1:a1:6b:cf:65:4b:48:f5:b0:81:ad:29:
         23:ab:be:05:fc:64:d2:e9:9d:97:22:a1:3f:4b:bc:d8:c1:04:
         82:12:fd:86:31:62:c0:99:7c:19:93:05:26:46:ed:19:2a:dd:
         39:4f:e7:6a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCo+m58/J4wQgQLfLuBHCMCjbEBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZGQzA3ODQ0OEQ3NjIyMkYwMDY5MERDMjNBOUM5NjA3
MzhCMjVBODAeFw0yNTA0MTAxMzQ0MjFaFw0yNjA0MDkxMzQ5MjFaMDMxMTAvBgNV
BAMTKEVBRjYwRTNCMkY3NTJBQjZCNUJCRjZBQzRGN0FGNjExMEMxQjY4MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9c8y6ArCy1mQ7jZAwxGEidvgC
JAmMELNPbizIHy3ghS1MwWQceieBmrk/E0+YNIkWPMXTCsiX1rMUPGznvm6yOBJO
CzVsN/TM4SeRAYycr1B2WQTIdy//FXbgge/AXq4y3Z2/aOB+fXvleHz5n306Qidh
SZMpqXpiBen3B4nAURdaZXcocVecqJf30cBfuwyW++7/3zkMbdhdW5ozwroF+Cj6
emPpN9sLnEjtaSs1w0T0XCmRInC+aMZEYMpoQa+5ftmz3xMxT8woscG8e2zc9iBk
gT/P5KkpUmEYOxGbOdBkAV+ZidBFSq9ksWd68cqXThuP7Y5EHdJOLIGT7EEdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6vYOOy91Kra1u/asT3r2EQwbaBAwHwYDVR0j
BBgwFoAU//wHhEjXYiLwBpDcI6nJYHOLJagwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlBrR1Y5RTdLNEdMakN4Sml2d0xGTjVyODJKRjg3dUxTQWRycHY2Q2V2
MUIvMS9GRkZDMDc4NDQ4RDc2MjIyRjAwNjkwREMyM0E5Qzk2MDczOEIyNUE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRkMwNzg0NDhENzYyMjJG
MDA2OTBEQzIzQTlDOTYwNzM4QjI1QTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZQa0dWOUU3SzRHTGpDeEppdndMRk41cjgySkY4N3VMU0FkcnB2NkNldjFCLzEv
MzQzNTJlMzIzMjM0MmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4PQwDQYJKoZIhvcNAQELBQADggEBABNfzIYN
jqAa09O+L2s9wPcyAem34evOGRM3WEFWnS0P0bllBev3YXtkCnIDJPFnfIjH2xdT
sb1iOmQfVboJkTMvteLO7I/Wwi5N8jl7F+oM8SnBuTogpLROo1KHQJxIjWh2RzOl
C8+40Wk0SIlfB0P4szTN/fR8mTFbhF5XtqBCjI9dk4+CP3Rs0GLhx0vQOhrDIQ28
GmcQbMB+jp20WF8tggsZ+GjBD2vICFet+2bZewz1ufqGEMjkitNEwI1sMTvytPUM
d8u+Is8RPrGha89lS0j1sIGtKSOrvgX8ZNLpnZcioT9LvNjBBIIS/YYxYsCZfBmT
BSZG7Rkq3TlP52o=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:47 2025 by rpki-client on console.sobornost.net