Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/34352e3233342e32342e302f32322d3235203d3e20323634323730.roa
File:                     34352e3233342e32342e302f32322d3235203d3e20323634323730.roa (raw, json)
Hash identifier:          D750fpjRPSx81ZMkhd8htdJmP1vuKg0t+rL3E6Kj0V0=
Subject key identifier:   1A:3F:B7:58:F8:B2:04:56:10:3F:A1:E6:6F:93:C2:A2:C0:03:CE:3C
Certificate issuer:       /CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
Certificate serial:       592EC7C85F03E99BD1F8048C47AC0E668F83EBBB
Authority key identifier: B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/34352e3233342e32342e302f32322d3235203d3e20323634323730.roa
Signing time:             Mon 17 Mar 2025 19:50:31 +0000
ROA not before:           Mon 17 Mar 2025 19:45:31 +0000
ROA not after:            Mon 16 Mar 2026 19:50:31 +0000
asID:                     264270
IP address blocks:        45.234.24.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl
                          rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2e:c7:c8:5f:03:e9:9b:d1:f8:04:8c:47:ac:0e:66:8f:83:eb:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
        Validity
            Not Before: Mar 17 19:45:31 2025 GMT
            Not After : Mar 16 19:50:31 2026 GMT
        Subject: CN=1A3FB758F8B20456103FA1E66F93C2A2C003CE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:a5:ae:5e:b7:65:2c:72:c3:55:06:45:ef:
                    2d:50:a9:0a:52:85:7b:85:bd:07:3c:54:0b:1d:72:
                    da:4d:51:07:1f:82:78:f3:c7:ba:c0:ae:67:e6:9b:
                    f1:23:1c:ae:f8:4c:ca:f6:9f:5b:5d:74:28:25:d4:
                    18:9b:3f:52:9e:89:c9:ad:3c:d2:9a:5c:15:3e:ea:
                    5a:32:98:a5:81:36:12:94:5c:13:75:25:a0:76:e4:
                    91:92:0a:05:bd:ea:30:63:c5:4d:de:bb:76:a0:28:
                    39:6a:2f:1a:ef:f6:6a:f8:87:91:15:46:13:18:9e:
                    c8:9b:b4:34:cf:f9:93:a5:67:e8:66:13:74:39:0f:
                    a3:9b:c2:fe:71:a3:4c:81:3f:94:8d:f8:62:f6:15:
                    35:9f:3e:51:25:e0:d6:5e:a5:c2:a8:49:00:99:88:
                    84:43:57:a0:e0:b5:c7:29:99:51:f1:34:38:d8:84:
                    a8:d4:bd:cf:26:ed:28:6e:b1:04:49:7d:7d:66:9f:
                    bb:29:5e:e3:a4:a7:61:dc:5f:ee:54:c4:c5:ac:3c:
                    49:6a:4e:18:ad:69:30:19:11:95:32:64:ac:3e:80:
                    21:c6:8a:22:c1:59:fd:9b:76:73:e4:e0:83:5c:b9:
                    91:5f:28:4b:08:14:08:73:36:ec:35:1e:b5:ed:77:
                    aa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3F:B7:58:F8:B2:04:56:10:3F:A1:E6:6F:93:C2:A2:C0:03:CE:3C
            X509v3 Authority Key Identifier:
                keyid:B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/34352e3233342e32342e302f32322d3235203d3e20323634323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:b5:94:31:2f:dd:bf:da:00:51:a7:f4:a7:84:29:f0:e7:4f:
         29:82:6a:f7:4b:94:5c:b9:3a:e5:54:7d:29:d3:64:4f:75:82:
         9f:e3:2c:6f:96:da:a5:25:f4:9e:b7:7a:e9:d1:53:b1:5d:a7:
         8b:15:d8:79:e1:a4:55:25:8d:86:eb:fd:fa:bc:e9:03:dc:f0:
         e5:72:5c:a8:b6:fc:0c:55:d7:98:8f:f4:98:ef:4a:54:0d:1e:
         17:47:4d:16:f1:8f:1e:c9:98:ba:0f:db:06:75:2a:b0:a7:dd:
         99:d0:15:be:e2:01:85:34:db:34:8c:29:e9:7b:8f:c8:3e:9b:
         95:81:29:c1:41:6a:ac:36:5c:bb:d9:2d:ec:78:0d:20:12:f5:
         e8:49:17:bf:16:d9:65:3e:29:ad:1d:6f:c5:2d:c7:9a:8a:47:
         cc:ea:cf:90:d1:92:8f:e3:a5:bf:ff:1a:82:8c:1d:dd:8b:99:
         ac:58:9c:1f:f9:32:6a:ac:71:15:0b:f9:80:47:cd:49:99:74:
         a1:15:b7:91:89:fb:de:98:c2:67:9a:42:2f:52:67:a8:cb:ac:
         9e:cc:74:e1:0b:55:35:9a:44:a0:99:89:4d:e5:92:ff:66:3b:
         08:5a:0b:ad:f1:82:cb:db:c3:28:2a:9e:b6:7d:af:19:f2:68:
         62:5f:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:53 2025 by rpki-client on console.sobornost.net