Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dFdyUUDGrL3z9gYtoZVQzefbAsMrexa1TaBjMLgW5oa/0/34352e3137332e3138342e302f32322d3332203d3e20323638383233.roa
File:                     34352e3137332e3138342e302f32322d3332203d3e20323638383233.roa (raw, json)
Hash identifier:          7hiH5Sv4OO5JCtIOU/tkvwjMF86t7j/2meCTJk0+K6w=
Subject key identifier:   8C:2B:38:9B:E5:6F:68:9F:F9:25:17:3A:D3:52:5D:6A:E4:13:65:B3
Certificate issuer:       /CN=EF3EBB37CD7BC65195339F12C6657C0438E1031C
Certificate serial:       15777D9DA8EE7C3B209DDF70B713CF8E6BD7E8F1
Authority key identifier: EF:3E:BB:37:CD:7B:C6:51:95:33:9F:12:C6:65:7C:04:38:E1:03:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF3EBB37CD7BC65195339F12C6657C0438E1031C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dFdyUUDGrL3z9gYtoZVQzefbAsMrexa1TaBjMLgW5oa/0/34352e3137332e3138342e302f32322d3332203d3e20323638383233.roa
Signing time:             Mon 03 Feb 2025 21:30:44 +0000
ROA not before:           Mon 03 Feb 2025 21:25:44 +0000
ROA not after:            Mon 02 Feb 2026 21:30:44 +0000
asID:                     268823
IP address blocks:        45.173.184.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dFdyUUDGrL3z9gYtoZVQzefbAsMrexa1TaBjMLgW5oa/0/EF3EBB37CD7BC65195339F12C6657C0438E1031C.crl
                          rsync://rpki-repo.registro.br/repo/6dFdyUUDGrL3z9gYtoZVQzefbAsMrexa1TaBjMLgW5oa/0/EF3EBB37CD7BC65195339F12C6657C0438E1031C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF3EBB37CD7BC65195339F12C6657C0438E1031C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:77:7d:9d:a8:ee:7c:3b:20:9d:df:70:b7:13:cf:8e:6b:d7:e8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3EBB37CD7BC65195339F12C6657C0438E1031C
        Validity
            Not Before: Feb  3 21:25:44 2025 GMT
            Not After : Feb  2 21:30:44 2026 GMT
        Subject: CN=8C2B389BE56F689FF925173AD3525D6AE41365B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:64:f8:e8:f4:f9:20:07:fd:32:f6:52:f4:
                    57:38:77:2f:b8:a2:ae:92:49:99:43:7a:69:79:d5:
                    e6:21:e8:e0:36:7f:9a:3c:51:63:93:89:ce:02:68:
                    8a:93:97:35:b7:ca:a9:a9:8e:ba:0e:f5:9f:41:cd:
                    76:8a:d3:98:2e:88:7a:e5:66:e2:c4:b8:7a:af:a3:
                    3b:08:eb:89:61:15:2a:8f:0e:f3:b2:6b:0a:68:b5:
                    a6:03:85:07:02:f6:b8:5b:0e:43:30:6e:63:b2:bf:
                    c4:ad:f1:68:1c:03:55:a5:3a:54:d7:f3:df:08:24:
                    5c:9c:39:88:f4:9f:7d:54:17:cb:00:e4:40:68:e2:
                    0a:7e:e8:bc:b9:3a:11:fa:2b:5d:80:d3:b8:e2:fb:
                    03:6c:ff:1d:e7:94:b7:cc:57:b0:21:2a:96:8d:b8:
                    16:a5:16:76:61:81:4a:a6:8b:8c:53:05:9c:a6:a3:
                    2a:74:4c:78:b8:02:29:0c:8d:4b:96:7b:6c:c0:67:
                    11:97:43:9a:8d:1a:ca:db:e1:fd:de:35:a4:0c:70:
                    d1:37:29:b8:01:b9:0e:b0:6c:64:2d:d2:fb:85:e0:
                    6b:69:a2:d5:36:1a:27:5e:c3:8e:49:b4:05:0f:3d:
                    2e:2f:5d:ee:16:4a:63:c8:7e:2d:9f:77:90:42:f7:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2B:38:9B:E5:6F:68:9F:F9:25:17:3A:D3:52:5D:6A:E4:13:65:B3
            X509v3 Authority Key Identifier:
                keyid:EF:3E:BB:37:CD:7B:C6:51:95:33:9F:12:C6:65:7C:04:38:E1:03:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dFdyUUDGrL3z9gYtoZVQzefbAsMrexa1TaBjMLgW5oa/0/EF3EBB37CD7BC65195339F12C6657C0438E1031C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF3EBB37CD7BC65195339F12C6657C0438E1031C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dFdyUUDGrL3z9gYtoZVQzefbAsMrexa1TaBjMLgW5oa/0/34352e3137332e3138342e302f32322d3332203d3e20323638383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:c4:03:36:8b:5f:83:c4:12:83:0f:c2:1e:6a:6c:ee:55:9b:
         73:aa:93:d6:ff:e2:d8:0e:e8:46:31:e8:b6:54:66:ea:5f:4a:
         e3:00:20:87:60:2b:43:99:46:fe:95:8f:9b:16:fe:74:ce:fb:
         d2:27:32:54:a7:97:be:ed:d6:24:d4:e0:b5:27:8f:f3:9e:63:
         2b:fd:6d:fe:a2:d3:ff:6d:6f:9f:35:b8:b4:06:fd:74:b6:8b:
         49:9a:11:5f:1b:6b:26:77:04:7a:19:52:fe:91:1f:c4:8c:ee:
         12:46:0c:ea:d2:a0:bf:02:70:ae:f7:40:da:ce:65:78:92:2c:
         5a:fc:5e:d5:4e:f4:a5:fa:03:0c:40:4a:cb:bc:11:53:82:b5:
         ee:cc:bf:d8:48:95:48:95:92:3c:8c:18:43:c3:b7:52:ee:07:
         61:e8:66:e2:11:f6:30:70:29:28:48:51:b9:72:df:1a:11:67:
         c9:27:4e:b7:9a:5e:3a:7c:30:ad:a8:f3:b5:21:92:f8:e5:6e:
         99:a3:f9:d8:88:76:38:80:4e:5e:ab:09:52:88:b9:51:5b:b9:
         80:8c:c3:1f:2c:81:8b:78:c7:73:72:64:01:9e:df:14:98:7c:
         f3:70:d6:e5:4e:13:7f:76:ae:41:b0:d3:d5:93:69:ef:a0:2c:
         5f:9b:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:23 2025 by rpki-client on console.sobornost.net