Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/34352e3232342e3233322e302f32322d3234203d3e20323636393134.roa
File:                     34352e3232342e3233322e302f32322d3234203d3e20323636393134.roa (raw, json)
Hash identifier:          /fNz76Xd+aFckkJNyu3yf6HZ7Ve9ZVz9xv31bx16QWA=
Subject key identifier:   DE:50:F0:8B:B1:C9:BA:A0:0E:82:FD:D8:8D:D2:30:CB:39:58:A6:18
Certificate issuer:       /CN=5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC
Certificate serial:       257380D44D8410D12977CBDE630731B9BCB8E7C8
Authority key identifier: 5B:A1:63:FB:32:84:B3:D1:A5:D7:50:C5:88:6A:DA:64:14:DC:3F:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/34352e3232342e3233322e302f32322d3234203d3e20323636393134.roa
Signing time:             Thu 06 Mar 2025 09:43:40 +0000
ROA not before:           Thu 06 Mar 2025 09:38:40 +0000
ROA not after:            Thu 05 Mar 2026 09:43:40 +0000
asID:                     266914
IP address blocks:        45.224.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.crl
                          rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:73:80:d4:4d:84:10:d1:29:77:cb:de:63:07:31:b9:bc:b8:e7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC
        Validity
            Not Before: Mar  6 09:38:40 2025 GMT
            Not After : Mar  5 09:43:40 2026 GMT
        Subject: CN=DE50F08BB1C9BAA00E82FDD88DD230CB3958A618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:cc:d9:08:58:57:91:59:63:8b:d7:7c:b6:
                    67:45:48:ac:7b:8d:94:80:62:36:d7:3b:14:4e:67:
                    de:2d:c3:7a:79:af:57:24:fc:7c:40:cd:ca:09:da:
                    4f:a5:ba:6b:c8:c2:00:2e:b7:d0:7f:c3:a5:17:d2:
                    64:c9:6a:8c:79:1a:b4:68:66:7c:c9:75:62:04:4c:
                    ca:2b:8d:d4:11:31:5e:18:fa:a0:1e:ef:09:0c:c6:
                    d6:58:ab:79:c0:7c:bd:dd:43:b1:1e:9d:dc:5e:55:
                    0d:b3:1b:a6:ff:82:50:6d:58:4d:ba:0a:99:0d:9f:
                    5b:d2:5e:2c:14:20:47:a1:70:56:f2:b8:0c:b0:8f:
                    4e:8d:b5:60:e7:8d:4b:f5:0b:ef:14:60:2b:46:c5:
                    81:f0:78:49:de:ca:f2:f7:9c:d7:47:e2:fd:ab:3d:
                    71:9f:65:f4:6e:c3:1b:24:d2:bf:e2:0b:d6:42:4b:
                    d0:42:d2:e6:9c:6c:ce:68:ea:52:ae:5e:c2:c7:75:
                    e5:25:cd:ae:fa:42:ae:02:2b:f8:15:56:98:05:f3:
                    cf:ac:12:ff:3d:1d:a8:7b:83:3f:c2:92:79:2b:0c:
                    cf:04:6a:12:e4:7a:34:fa:00:2d:1a:7a:54:8a:f8:
                    33:1d:aa:db:50:27:79:ef:cb:5b:3e:f8:27:07:fd:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:50:F0:8B:B1:C9:BA:A0:0E:82:FD:D8:8D:D2:30:CB:39:58:A6:18
            X509v3 Authority Key Identifier:
                keyid:5B:A1:63:FB:32:84:B3:D1:A5:D7:50:C5:88:6A:DA:64:14:DC:3F:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/34352e3232342e3233322e302f32322d3234203d3e20323636393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:c0:b3:f3:83:29:0e:55:e0:21:2c:03:4d:06:48:c5:d3:c1:
         b2:9e:c1:68:e0:45:57:ac:0c:34:d0:d4:12:4f:55:f6:fb:62:
         bd:50:f5:59:e2:37:c0:21:36:d6:f6:6e:cc:f1:d2:0a:f0:32:
         43:35:5a:5b:dd:bf:16:8d:2b:97:cf:01:9b:dd:84:b0:aa:3f:
         fc:fc:1e:2d:7b:b8:3a:37:a0:61:23:47:e8:72:f9:75:e5:98:
         10:f9:52:45:b2:73:54:96:5b:47:3a:16:35:3c:27:84:6b:b5:
         08:24:de:13:d2:28:cd:54:18:80:3e:f3:e6:f5:d9:51:66:ad:
         64:f5:0e:16:02:4c:5d:79:b5:b4:a7:4d:b5:fd:f6:cd:ba:42:
         e1:a5:88:a4:c9:9a:d2:ed:61:99:37:94:6d:a2:18:4f:b1:66:
         0a:c2:96:d9:b5:1b:d1:23:74:d6:bf:9d:71:6f:9d:fa:28:32:
         49:db:a1:12:2b:87:0e:e3:2b:a1:40:bc:a5:8a:46:21:fb:b1:
         01:d3:8c:75:91:e5:99:a3:ff:e5:5e:9c:da:43:c8:34:67:5d:
         f9:74:02:31:78:db:9d:9a:2d:d5:cd:bd:25:22:6d:a6:d4:7a:
         c7:5f:29:3f:c4:c4:36:00:48:12:e9:6b:f5:29:80:5a:5b:62:
         73:49:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:48 2025 by rpki-client on console.sobornost.net