Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134342e302f32322d3234203d3e20323639303232.roa
File:                     34352e3137382e3134342e302f32322d3234203d3e20323639303232.roa (raw, json)
Hash identifier:          aJllC4bfN18sF7GVNwni9H6S3Ips8TngUuVzjDQk1mw=
Subject key identifier:   DF:E7:6A:14:2E:1E:0C:4C:01:64:8F:C9:CE:48:47:63:97:21:23:90
Certificate issuer:       /CN=CDCD83F4405AFD2B52943F9838374A340858512F
Certificate serial:       6D7BAEE016FF840548D199AD7E38D4CF6E79AEC9
Authority key identifier: CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134342e302f32322d3234203d3e20323639303232.roa
Signing time:             Thu 06 Mar 2025 21:36:39 +0000
ROA not before:           Thu 06 Mar 2025 21:31:39 +0000
ROA not after:            Thu 05 Mar 2026 21:36:39 +0000
asID:                     269022
IP address blocks:        45.178.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl
                          rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7b:ae:e0:16:ff:84:05:48:d1:99:ad:7e:38:d4:cf:6e:79:ae:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDCD83F4405AFD2B52943F9838374A340858512F
        Validity
            Not Before: Mar  6 21:31:39 2025 GMT
            Not After : Mar  5 21:36:39 2026 GMT
        Subject: CN=DFE76A142E1E0C4C01648FC9CE48476397212390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:e4:b7:a6:ab:34:2c:93:82:fd:27:58:73:
                    c1:a2:be:fb:ad:c5:c5:04:d7:19:1e:00:1e:c7:51:
                    e0:01:13:f4:79:00:09:ca:29:8b:ca:31:06:b7:a6:
                    0c:d8:4b:41:20:39:6e:41:db:20:d5:be:d1:57:06:
                    1d:f7:83:21:f5:c5:8b:6e:b8:c2:fa:c6:f6:7a:ac:
                    14:7c:6d:d8:5e:b5:e4:2b:d1:84:9c:ca:86:1e:57:
                    1e:11:4e:e7:98:b9:8a:c5:cf:b7:6d:3d:10:7d:e9:
                    85:d5:a7:90:ce:06:8f:99:96:af:14:4e:be:e2:ef:
                    70:09:73:73:42:86:be:17:14:4b:b9:cb:a7:3d:71:
                    38:71:1c:80:ad:bd:03:db:a8:98:30:fd:03:eb:ed:
                    21:43:66:9a:64:37:af:4b:56:4b:61:63:0c:96:f0:
                    ba:05:b1:ef:c3:bf:6e:75:3d:37:9d:0c:e8:df:d1:
                    61:35:17:4a:24:20:d1:da:f6:c4:c4:61:a7:9d:fe:
                    43:7d:0e:73:39:ea:25:0e:1f:13:89:99:1c:73:1a:
                    cf:03:8a:84:0c:d7:e3:02:b2:79:9a:ce:bf:40:5d:
                    6d:2b:fc:93:db:53:6d:0c:ae:4d:6d:e2:6e:a0:a7:
                    a8:98:39:a7:bc:f5:42:15:54:7d:56:b6:53:8d:25:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E7:6A:14:2E:1E:0C:4C:01:64:8F:C9:CE:48:47:63:97:21:23:90
            X509v3 Authority Key Identifier:
                keyid:CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134342e302f32322d3234203d3e20323639303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:24:c5:90:7c:69:09:35:36:71:98:52:3a:35:3a:60:c8:8f:
         73:1a:78:23:56:67:9a:60:24:25:19:f4:fb:7d:a8:64:af:9f:
         b8:68:fd:5e:dd:6f:26:0f:26:35:d9:e6:90:1a:a5:d2:18:dd:
         6a:50:82:98:4f:84:88:e3:d7:ed:ed:80:b8:ce:de:f1:78:f3:
         70:d4:12:8d:db:d7:47:cb:e1:48:94:40:2d:13:a3:b6:a2:98:
         41:ea:f3:eb:ca:41:bd:25:e8:63:f0:6b:ac:ef:2a:ba:83:03:
         53:59:d4:04:4d:d9:c2:c6:eb:73:92:c8:41:2d:07:54:55:0b:
         89:ef:d3:60:d4:98:06:3d:ff:42:9e:4d:c5:64:23:9d:58:00:
         d4:e1:73:e8:85:c1:43:f4:af:73:60:ce:0e:db:3f:78:c7:5d:
         ee:1d:95:5b:f4:e3:2f:8a:3b:dd:59:3a:3a:f6:00:a1:86:42:
         b4:c7:b7:83:ee:59:a7:46:d6:be:d0:ec:85:5c:90:30:f8:25:
         dc:bc:92:ee:70:e9:ea:7b:58:a3:3f:65:63:72:70:ae:50:99:
         b4:e7:a5:84:c3:e4:61:f5:b0:0a:c0:08:ed:43:00:4a:77:8f:
         24:6d:d9:06:db:64:f9:5c:07:83:65:02:af:46:23:7b:fb:02:
         0d:96:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:16 2025 by rpki-client on console.sobornost.net