Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32322d3332203d3e20323637363336.roa
File:                     34352e3232342e32342e302f32322d3332203d3e20323637363336.roa (raw, json)
Hash identifier:          74uV400DcOaEUk1zb7BXIfz6meLZuI8H2EbJ6rMseEs=
Subject key identifier:   C3:38:0A:02:34:D5:CB:24:72:1D:6D:D4:58:F5:CA:10:BE:CE:CE:FE
Certificate issuer:       /CN=A1E289E62C24AE2ECF3211E63E2E81322ADD6E99
Certificate serial:       3DC4792C694B5EFB25DE103A3FA03923C8EDB5DA
Authority key identifier: A1:E2:89:E6:2C:24:AE:2E:CF:32:11:E6:3E:2E:81:32:2A:DD:6E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32322d3332203d3e20323637363336.roa
Signing time:             Wed 05 Feb 2025 13:02:35 +0000
ROA not before:           Wed 05 Feb 2025 12:57:35 +0000
ROA not after:            Wed 04 Feb 2026 13:02:35 +0000
asID:                     267636
IP address blocks:        45.224.24.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.crl
                          rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c4:79:2c:69:4b:5e:fb:25:de:10:3a:3f:a0:39:23:c8:ed:b5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E289E62C24AE2ECF3211E63E2E81322ADD6E99
        Validity
            Not Before: Feb  5 12:57:35 2025 GMT
            Not After : Feb  4 13:02:35 2026 GMT
        Subject: CN=C3380A0234D5CB24721D6DD458F5CA10BECECEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:8c:ae:0e:7b:48:28:34:12:35:0f:4b:49:
                    56:a8:08:7d:b3:86:52:08:4a:76:71:22:fd:ba:82:
                    70:3e:29:d5:79:ef:aa:97:3a:c5:0d:71:df:f5:58:
                    23:29:32:39:a5:3f:f2:d9:2c:47:f6:70:57:04:a1:
                    f3:a1:3d:09:cd:4b:8a:c1:f3:92:5f:ea:28:f9:50:
                    47:45:09:a0:d2:48:2c:a8:3e:a5:af:c3:f9:2b:1d:
                    28:cf:41:60:90:56:b8:47:ff:01:16:1e:2f:5a:09:
                    ff:b8:93:41:79:a1:d8:73:73:6a:09:5f:75:56:10:
                    b5:4a:f2:ed:df:93:8e:20:6a:16:f5:c3:20:3a:a5:
                    4c:86:06:f8:17:8c:44:36:ab:5f:87:21:80:26:1d:
                    ba:cf:6c:6a:7a:76:64:bd:60:3d:63:ed:8f:d3:48:
                    4e:76:94:99:09:0c:1d:99:f5:2d:fc:5a:be:e2:e6:
                    80:2c:c1:61:41:65:30:d0:5d:f6:bf:d2:c4:73:2a:
                    87:bc:79:a0:a4:eb:23:de:5b:47:c6:28:e9:b0:e2:
                    8e:d8:45:3b:70:5f:03:6a:f7:22:4e:af:68:d5:c5:
                    65:0d:c5:8d:55:23:77:54:80:19:1e:a0:a1:33:59:
                    a0:63:c8:bd:86:07:0a:1a:65:d2:7a:9a:9c:b2:d6:
                    f3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:38:0A:02:34:D5:CB:24:72:1D:6D:D4:58:F5:CA:10:BE:CE:CE:FE
            X509v3 Authority Key Identifier:
                keyid:A1:E2:89:E6:2C:24:AE:2E:CF:32:11:E6:3E:2E:81:32:2A:DD:6E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32322d3332203d3e20323637363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:54:fd:9a:86:27:9b:3a:3c:2c:b4:0a:f1:ae:c3:7a:40:7d:
         93:e4:4b:91:ea:6d:1b:6d:79:97:6f:c3:8a:6f:51:c5:5e:c2:
         57:ad:9b:f9:57:3a:2d:6b:69:d0:a9:00:67:b4:aa:1b:13:c0:
         3c:ca:dd:02:a2:b0:d7:cd:78:c7:ca:39:c4:6d:69:c5:24:57:
         f3:96:a6:01:aa:d4:6c:1f:80:5f:38:37:f2:cd:4f:f6:43:58:
         d0:db:b8:82:c0:74:b5:47:6d:68:96:0b:06:61:89:80:2f:8a:
         e6:df:6e:29:cd:11:6b:26:cf:fc:a1:51:f0:34:0d:6c:67:c3:
         5d:7b:95:eb:c5:5d:76:7b:c7:0d:61:0e:87:07:ed:e9:18:b3:
         d5:b9:50:9c:cb:a8:00:af:00:a7:2f:37:8c:9c:49:ca:15:a7:
         1d:10:4a:00:af:8b:c3:c0:fe:6a:8f:83:4e:bd:8b:5a:88:e2:
         30:f0:d7:cf:a1:d5:6f:c1:59:f7:a1:f4:36:47:8e:d2:6b:53:
         c3:2d:b9:97:52:64:f6:b5:d4:d0:2d:6d:f5:6a:e8:ce:b4:bd:
         36:e1:3f:6c:a8:b4:a2:b6:f1:fc:cd:88:cc:d8:de:d5:d7:ba:
         83:f4:b7:d6:5d:e4:9f:30:28:c5:24:94:77:83:fd:66:55:e4:
         3d:94:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:11 2025 by rpki-client on console.sobornost.net