Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/34352e3233312e3138382e302f32322d3234203d3e20323637323331.roa
File:                     34352e3233312e3138382e302f32322d3234203d3e20323637323331.roa (raw, json)
Hash identifier:          a2yYohXaU93XJQ9xBTYokjZSjZfEdQ2T5zC9y7vuYe4=
Subject key identifier:   F3:4E:A2:08:14:8C:43:B9:F3:02:46:A9:4F:32:F2:0F:98:32:39:7E
Certificate issuer:       /CN=E246B17C2B9BE5A0051959FCF6752346B46E0EAA
Certificate serial:       02C53AF4A46D25C96E7B226869BF448B99710583
Authority key identifier: E2:46:B1:7C:2B:9B:E5:A0:05:19:59:FC:F6:75:23:46:B4:6E:0E:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/34352e3233312e3138382e302f32322d3234203d3e20323637323331.roa
Signing time:             Wed 18 Dec 2024 13:12:05 +0000
ROA not before:           Wed 18 Dec 2024 13:07:05 +0000
ROA not after:            Wed 17 Dec 2025 13:12:05 +0000
asID:                     267231
IP address blocks:        45.231.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.crl
                          rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c5:3a:f4:a4:6d:25:c9:6e:7b:22:68:69:bf:44:8b:99:71:05:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E246B17C2B9BE5A0051959FCF6752346B46E0EAA
        Validity
            Not Before: Dec 18 13:07:05 2024 GMT
            Not After : Dec 17 13:12:05 2025 GMT
        Subject: CN=F34EA208148C43B9F30246A94F32F20F9832397E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:85:9d:c5:db:f7:05:dc:7a:6f:ae:1e:d8:
                    d8:b1:f6:2d:72:08:86:48:4a:50:e4:17:ae:f4:22:
                    d9:5b:34:ef:da:db:6a:47:70:e8:dc:02:85:8c:bc:
                    ed:c1:f6:a5:8f:b3:5d:5c:2c:3a:d8:4f:1c:7a:4d:
                    56:75:02:91:6a:c9:1c:99:36:ff:a2:eb:a7:39:9e:
                    f3:e4:80:54:0e:30:9b:6d:a4:66:ed:c1:28:e6:13:
                    0f:9d:0c:f8:3f:5d:05:78:89:4a:f4:cf:cf:a7:43:
                    a0:e2:6c:68:94:a1:19:bc:04:54:b3:7b:d0:df:36:
                    ce:95:2d:c4:70:f1:64:5c:ba:74:9c:a1:59:4f:64:
                    e7:2d:ca:84:8a:6d:c0:5a:b3:b1:da:61:14:59:87:
                    97:85:74:5b:fd:64:0b:76:4d:a9:f8:8c:f5:d6:ee:
                    32:00:99:69:08:89:58:78:38:dd:90:32:10:16:48:
                    1f:ef:35:fd:a0:b7:96:66:3e:35:4a:d2:c3:9a:69:
                    22:a8:7c:03:92:2b:69:28:9a:e2:70:8f:51:12:35:
                    02:54:06:67:d5:34:22:7d:bc:fd:b7:af:a4:58:a3:
                    d7:7f:32:85:c2:f7:fb:92:18:66:56:6f:51:b2:d8:
                    6d:46:b7:8c:45:66:31:63:42:fa:b2:e4:26:60:5d:
                    76:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4E:A2:08:14:8C:43:B9:F3:02:46:A9:4F:32:F2:0F:98:32:39:7E
            X509v3 Authority Key Identifier:
                keyid:E2:46:B1:7C:2B:9B:E5:A0:05:19:59:FC:F6:75:23:46:B4:6E:0E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/34352e3233312e3138382e302f32322d3234203d3e20323637323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:4a:2c:5f:08:6b:66:e5:0f:93:60:75:db:d5:7f:a6:be:1b:
         28:21:05:b1:37:4b:7d:c5:14:a5:8b:6f:b7:2a:77:f1:e2:07:
         13:e3:3c:58:ec:c2:77:ce:3b:b7:aa:2e:dc:4a:f3:26:c9:0e:
         37:80:90:7a:28:7c:cc:fc:cd:5e:f1:88:24:28:b8:4e:1a:a0:
         c5:bd:d5:bf:c2:d8:56:cd:a4:42:20:b6:59:cd:70:15:8d:25:
         0b:d0:f2:b0:c5:7b:48:5a:1b:90:22:0d:22:86:f0:42:7a:99:
         6b:8e:a4:9e:cd:72:43:a2:60:7c:c1:7e:68:e6:96:0e:e9:0a:
         0e:15:e0:b0:31:df:96:16:be:8e:33:e8:d1:e5:cc:51:b0:fe:
         b3:ca:f6:b5:3d:9b:a4:96:64:65:10:50:00:c8:e0:b8:fc:6f:
         e9:55:b5:47:a3:59:48:ed:4f:ee:7d:3f:27:4b:56:7f:54:3e:
         84:3c:4e:bf:b2:fb:3c:db:a7:ac:27:d1:26:f3:8e:7b:cc:3b:
         7c:cb:4e:89:de:59:c5:a2:8a:66:c8:da:7e:94:09:d3:96:f4:
         48:73:4d:19:b2:5c:1a:fc:30:46:5b:94:2e:ae:9f:be:46:06:
         9c:3d:03:96:de:2e:38:56:69:f4:03:2c:86:86:42:6d:9e:04:
         61:3d:fa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:15 2025 by rpki-client on console.sobornost.net