Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36342e302f32342d3234203d3e20323639353238.roa
File:                     34352e3138372e36342e302f32342d3234203d3e20323639353238.roa (raw, json)
Hash identifier:          YX6mtCkxcil6OllZ1wLr5S17yxVjXzLERsvQa0mpOhk=
Subject key identifier:   15:CE:B3:F7:1E:AF:E0:21:C5:AB:B0:80:67:95:6B:94:D8:48:1D:31
Certificate issuer:       /CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
Certificate serial:       2F1EDBE85B88579A183372A240507995751A1528
Authority key identifier: 4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36342e302f32342d3234203d3e20323639353238.roa
Signing time:             Sat 01 Mar 2025 14:44:41 +0000
ROA not before:           Sat 01 Mar 2025 14:39:41 +0000
ROA not after:            Sat 28 Feb 2026 14:44:41 +0000
asID:                     269528
IP address blocks:        45.187.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl
                          rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1e:db:e8:5b:88:57:9a:18:33:72:a2:40:50:79:95:75:1a:15:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
        Validity
            Not Before: Mar  1 14:39:41 2025 GMT
            Not After : Feb 28 14:44:41 2026 GMT
        Subject: CN=15CEB3F71EAFE021C5ABB08067956B94D8481D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:73:4e:70:c4:30:78:ef:4b:85:31:54:ef:
                    87:87:b4:e3:a8:67:6c:35:a7:d8:ba:70:5c:78:e0:
                    ad:95:b7:14:93:8b:d4:93:0e:40:49:40:a4:cd:fc:
                    78:2f:87:85:24:58:ea:be:5f:4e:e9:40:2c:fa:e4:
                    22:4d:b9:c9:f0:f0:18:98:7f:b0:a8:a4:f8:44:ce:
                    72:38:0e:de:9f:56:51:0b:a3:13:90:8f:71:12:b1:
                    82:15:24:0b:dd:cc:84:c8:b1:ab:7a:83:7c:33:f2:
                    08:20:3b:39:83:08:01:03:10:81:0e:9d:0e:52:8b:
                    71:aa:e4:2a:45:72:70:a8:c6:ac:47:5a:a1:4d:88:
                    d6:0c:93:c0:11:7b:46:90:4c:23:c5:5c:ca:9b:04:
                    46:b8:dc:27:32:8b:38:0e:87:37:df:1b:50:b1:1a:
                    37:24:78:d6:7e:24:f8:0b:12:3b:7d:ae:35:26:7e:
                    5b:ff:f8:ca:72:a2:c0:2c:ee:bc:f5:9a:7d:fa:a7:
                    75:38:48:25:28:18:9d:fc:06:3c:11:ed:bc:15:5b:
                    99:60:ce:f4:d7:ed:07:54:34:75:42:79:c3:9b:fc:
                    7a:be:88:07:de:99:82:50:47:7a:98:fd:18:d4:9e:
                    34:0c:b6:c2:d6:0c:20:de:14:5b:8e:bc:2f:59:4e:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CE:B3:F7:1E:AF:E0:21:C5:AB:B0:80:67:95:6B:94:D8:48:1D:31
            X509v3 Authority Key Identifier:
                keyid:4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36342e302f32342d3234203d3e20323639353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:0b:af:53:a8:14:c6:31:b8:2d:cd:bf:c5:a0:d1:14:40:74:
         8c:fe:02:fe:64:b9:2b:eb:ed:c0:6d:b0:e3:97:d3:6b:5e:c3:
         85:8e:86:c7:27:7e:9f:65:86:d6:6f:59:35:90:ed:6c:c1:16:
         4c:16:b9:88:f2:bc:16:ae:a6:7e:c3:01:35:45:e0:69:e8:f7:
         98:d1:8d:64:32:f5:61:c7:bf:7c:10:2d:78:20:37:c6:d8:77:
         53:9a:3e:23:ad:b6:8e:06:07:0d:27:45:74:d0:dd:0e:67:03:
         8f:c2:22:5a:f5:19:e5:52:03:ba:a1:f2:c4:01:dd:b2:50:55:
         25:d3:53:74:16:54:ac:69:5e:cb:ac:b2:35:99:da:25:f4:90:
         87:4d:84:67:eb:e1:c1:2d:b0:cb:48:cb:36:8c:33:d6:98:40:
         02:c7:86:f8:93:9d:7b:56:e7:d8:94:a3:df:87:b9:84:d7:d3:
         bc:c0:8d:2e:33:be:80:a5:d0:f8:40:f2:5c:ed:dc:48:7f:cf:
         c3:a8:13:e7:bc:31:62:4d:08:86:2b:1b:b7:c1:8e:ce:dd:13:
         40:a6:ae:d9:e0:0d:65:62:df:9f:96:94:c7:89:62:78:6b:60:
         31:ab:84:69:23:5f:b8:56:8b:ed:f3:ae:04:38:ca:d1:29:ea:
         1a:50:d2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:04 2025 by rpki-client on console.sobornost.net