Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131362e302f32322d3234203d3e20323637393536.roa
File:                     34352e3136362e3131362e302f32322d3234203d3e20323637393536.roa (raw, json)
Hash identifier:          ISx1EaMUcpZzRAPsX8J+K251aNMePYHn4+Bz7RRwb2A=
Subject key identifier:   46:D5:39:C3:9A:1C:8F:39:D9:EA:46:EC:FF:41:53:E1:5E:65:90:E1
Certificate issuer:       /CN=1E4DBF67BA6C544FEB0BF88A714C80A4417D6641
Certificate serial:       09F5B89164066EE9D83D0D8879DF3DA5B1FF58AB
Authority key identifier: 1E:4D:BF:67:BA:6C:54:4F:EB:0B:F8:8A:71:4C:80:A4:41:7D:66:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131362e302f32322d3234203d3e20323637393536.roa
Signing time:             Wed 23 Apr 2025 12:11:24 +0000
ROA not before:           Wed 23 Apr 2025 12:06:24 +0000
ROA not after:            Wed 22 Apr 2026 12:11:24 +0000
asID:                     267956
IP address blocks:        45.166.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.crl
                          rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f5:b8:91:64:06:6e:e9:d8:3d:0d:88:79:df:3d:a5:b1:ff:58:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E4DBF67BA6C544FEB0BF88A714C80A4417D6641
        Validity
            Not Before: Apr 23 12:06:24 2025 GMT
            Not After : Apr 22 12:11:24 2026 GMT
        Subject: CN=46D539C39A1C8F39D9EA46ECFF4153E15E6590E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:a6:37:03:7e:aa:01:86:e3:fc:fb:23:75:
                    9b:50:75:c1:d1:f7:f9:7d:bb:39:31:e6:b8:77:72:
                    74:db:ca:e0:b3:7e:04:9f:a8:98:ae:f1:e6:15:4c:
                    44:e9:fe:06:40:d5:98:77:ab:3f:84:c9:be:32:8b:
                    61:d0:e2:7f:fa:2f:e8:05:12:b3:08:77:1d:f8:db:
                    55:71:d4:dd:c9:96:a7:ea:c8:69:e1:f9:31:6f:c7:
                    e7:83:e2:7a:b7:71:a8:aa:1c:b5:bd:c3:af:53:98:
                    92:78:0e:79:57:09:e3:6d:5d:cb:43:eb:63:3a:15:
                    38:6d:d1:03:fd:5f:a9:b5:1e:a4:af:4e:84:23:d4:
                    d7:43:89:a1:f0:12:36:b6:52:6f:6b:f4:d4:ec:6c:
                    e1:d6:52:e3:b4:ba:37:7f:00:f5:58:38:5e:6c:9b:
                    db:93:0a:91:92:42:bc:54:b7:69:04:b4:2f:dd:24:
                    db:31:5c:72:83:07:c8:19:38:36:11:0b:e0:e9:87:
                    8f:37:57:e7:96:c3:eb:12:f6:48:5e:0c:df:c5:04:
                    ef:c2:d6:c0:bc:98:06:6a:1c:c5:88:b2:a3:23:49:
                    44:83:12:83:51:b9:b8:1a:d3:b3:c8:0f:2e:d5:29:
                    15:86:35:78:56:ea:a5:0c:db:0a:63:09:9c:f8:16:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D5:39:C3:9A:1C:8F:39:D9:EA:46:EC:FF:41:53:E1:5E:65:90:E1
            X509v3 Authority Key Identifier:
                keyid:1E:4D:BF:67:BA:6C:54:4F:EB:0B:F8:8A:71:4C:80:A4:41:7D:66:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131362e302f32322d3234203d3e20323637393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:cd:5e:9f:9a:e7:f4:1d:6b:61:d0:44:a5:d4:fe:84:43:85:
         c4:f0:8c:a3:7f:55:bc:fb:03:e7:6e:d7:15:96:9e:14:71:e6:
         a8:5f:d6:c3:08:2d:bd:35:a7:ae:1d:d2:82:48:5b:02:f0:7c:
         d8:44:68:a2:01:17:df:f8:63:41:d3:9c:22:67:cd:c5:15:66:
         14:d4:85:97:33:0c:68:eb:45:4b:e2:59:e0:f4:eb:f0:86:35:
         ea:d4:3b:66:9d:5d:f2:44:f8:96:31:1f:68:eb:b2:17:5b:4f:
         f7:82:a1:9f:04:26:cb:1c:ff:58:36:2e:c3:d2:1f:c8:14:8d:
         62:bf:b9:85:39:63:36:d8:90:e0:99:74:ab:94:80:68:3a:14:
         80:e6:ab:b7:d7:20:44:b8:0c:54:35:7b:5b:f8:a1:28:a2:b0:
         10:37:cb:3a:cf:90:6d:df:5b:57:7d:fb:3d:d4:34:45:50:7e:
         ba:29:fc:6d:aa:14:1e:dc:4c:c6:fc:2f:71:c0:ae:4e:9e:5c:
         6b:3a:4b:a9:f6:24:1d:05:32:99:ed:0b:e7:da:00:34:72:37:
         84:c3:94:0f:3a:dc:5d:ba:a5:17:0b:66:ef:7f:9b:9f:42:fd:
         49:16:49:67:f6:c0:a6:7e:2a:24:1e:69:fe:6f:ba:73:e9:8d:
         aa:b3:16:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:04 2025 by rpki-client on console.sobornost.net