Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa
File:                     34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa (raw, json)
Hash identifier:          9LHE4i4GnTLDjVGgCdfHxI+9H+SA4TlZya5kGdYCkbg=
Subject key identifier:   AA:1D:E1:1F:8D:C5:CF:82:3F:5B:7D:87:CA:E2:02:A1:98:20:BF:F9
Certificate issuer:       /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial:       57B8BCBFC11074671BF388512EEF0C5C561BF834
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     269195
IP address blocks:        45.179.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
                          rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b8:bc:bf:c1:10:74:67:1b:f3:88:51:2e:ef:0c:5c:56:1b:f8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=AA1DE11F8DC5CF823F5B7D87CAE202A19820BFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:32:67:30:40:7c:fa:4d:f4:e3:7f:20:e8:
                    c5:57:6c:fd:d0:97:d0:9f:e7:6b:15:cd:f2:a6:2b:
                    c2:e8:ed:31:bd:d9:42:9b:69:10:4e:91:d8:0b:46:
                    72:f5:07:ae:2d:a3:75:99:ae:ad:de:ee:6b:8d:42:
                    fe:36:a9:45:7e:54:b5:e0:b7:90:64:4f:08:58:c7:
                    50:2e:a1:f4:4f:fd:5a:c7:8c:a2:56:2d:52:e7:c2:
                    d6:ec:7c:d1:30:ee:31:d7:91:ee:46:c3:ec:99:3a:
                    0c:3e:7a:56:6e:7f:e0:81:21:17:27:12:c9:90:21:
                    8d:61:d6:19:ab:f0:d0:9f:8a:18:fd:c0:ef:94:e4:
                    0d:20:44:a3:78:27:bb:83:f7:a6:27:09:8c:1c:f5:
                    51:50:13:16:91:0f:bf:6c:ac:00:d7:aa:57:74:2a:
                    cc:94:7c:06:1a:60:a2:a4:8a:f9:ec:56:c3:d8:5b:
                    26:2b:c6:c5:aa:35:ac:36:49:c8:58:e3:05:5a:2c:
                    0c:44:5e:82:50:2e:ae:25:49:3b:05:db:81:c6:83:
                    29:73:85:75:6b:af:ff:2a:1f:33:f8:ed:6f:30:ac:
                    d6:09:03:7f:3c:78:44:3b:d9:52:d7:3a:0c:1d:70:
                    bb:d6:9a:89:19:15:ec:df:ce:34:ab:0b:4b:d9:f6:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1D:E1:1F:8D:C5:CF:82:3F:5B:7D:87:CA:E2:02:A1:98:20:BF:F9
            X509v3 Authority Key Identifier:
                keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b3:1f:0c:79:bb:6b:ba:88:b8:fd:94:e8:88:e3:18:60:6d:
         f5:45:80:ee:f5:b3:4a:ad:bd:1a:fe:55:85:6f:0c:f5:7d:5d:
         83:fc:a4:e0:1b:04:70:31:81:7a:cd:cb:45:85:97:b2:77:75:
         76:21:40:d8:04:38:c4:88:c8:95:e8:d4:16:14:44:60:fa:8c:
         67:00:d6:7d:76:09:9d:ca:1a:2d:13:a5:2f:4f:75:8a:ed:88:
         30:d3:54:90:46:0e:95:b2:ed:a1:d5:a5:d0:2d:bf:0c:77:f2:
         fa:6d:28:ac:cc:2a:3c:dd:d6:36:2e:5f:ef:de:1a:5b:ec:52:
         4f:4b:76:62:f1:00:06:a7:34:9c:cd:b2:dc:c2:38:81:93:49:
         74:e6:64:14:7d:19:cf:02:df:89:28:5c:5f:71:04:61:73:c7:
         cf:ac:f8:2f:99:05:be:df:d4:8c:62:4e:2b:65:33:91:48:19:
         ea:d7:b7:71:c9:03:57:81:ae:07:22:46:fb:26:59:09:32:e1:
         69:9c:a5:95:70:d6:b3:9f:f2:7f:e8:7a:29:69:9c:21:3f:88:
         63:5a:60:c8:67:9c:01:6f:ce:8a:6c:67:7b:ed:e6:5a:f0:ff:
         56:ff:cc:13:ad:35:95:2a:dd:9b:8b:73:a1:6a:47:8b:0f:f2:
         bf:91:26:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:49 2025 by rpki-client on console.sobornost.net