Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32322d3232203d3e203532383538.roa
File:                     34352e3233392e302e302f32322d3232203d3e203532383538.roa (raw, json)
Hash identifier:          M65VDR5KYw9XeZVWCrlotO4EXQohZff3wA4rGwAsTL4=
Subject key identifier:   84:D3:23:9C:E9:FF:9D:61:71:FA:EF:0A:9C:51:01:88:33:44:66:6D
Certificate issuer:       /CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
Certificate serial:       722D94588B7ABB1039FCA1FD23C16E33D3A20583
Authority key identifier: BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32322d3232203d3e203532383538.roa
Signing time:             Thu 06 Mar 2025 22:33:30 +0000
ROA not before:           Thu 06 Mar 2025 22:28:30 +0000
ROA not after:            Thu 05 Mar 2026 22:33:30 +0000
asID:                     52858
IP address blocks:        45.239.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl
                          rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2d:94:58:8b:7a:bb:10:39:fc:a1:fd:23:c1:6e:33:d3:a2:05:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
        Validity
            Not Before: Mar  6 22:28:30 2025 GMT
            Not After : Mar  5 22:33:30 2026 GMT
        Subject: CN=84D3239CE9FF9D6171FAEF0A9C5101883344666D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:c2:02:68:3f:7a:3b:51:be:9a:5a:58:ef:
                    94:85:68:b0:06:d3:b0:7d:2f:d3:6e:5c:c6:84:fd:
                    6e:f0:28:95:00:ba:41:78:6c:48:8b:7e:57:9a:c4:
                    7e:94:69:fe:68:73:30:2e:08:74:c0:79:24:15:1d:
                    bd:dd:e7:1b:12:e6:71:ed:5d:f8:ec:6d:01:23:de:
                    7b:d7:8f:bb:fe:7d:3c:53:46:2f:a8:8c:c1:ad:76:
                    cd:ca:4e:14:72:7e:08:1e:85:1d:16:0b:7b:f2:f4:
                    92:d1:30:24:db:f8:b5:e2:95:cc:53:da:58:a7:1b:
                    0f:b8:41:52:5f:42:f4:79:76:3f:b9:b6:a3:f5:ea:
                    81:f8:a8:5d:79:9f:8e:b0:4d:e2:e1:2b:d9:f8:81:
                    41:51:3e:8b:56:46:36:55:92:1a:9f:99:49:61:65:
                    48:13:d5:e3:4e:5c:4e:4e:8d:f7:a5:ff:aa:89:f8:
                    04:f8:ef:d1:de:14:a3:c7:ab:d1:35:ca:45:b3:96:
                    c4:c0:b2:47:6c:ab:5b:a6:73:fa:24:3b:1b:b2:b9:
                    57:e4:54:1e:2d:84:83:60:d8:7b:b5:d7:cd:cc:70:
                    c2:9d:29:d1:4f:4e:c0:6a:ab:ee:a6:14:53:81:cc:
                    98:a5:54:08:78:41:05:f8:f9:3c:03:70:f1:7e:2c:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D3:23:9C:E9:FF:9D:61:71:FA:EF:0A:9C:51:01:88:33:44:66:6D
            X509v3 Authority Key Identifier:
                keyid:BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32322d3232203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:9a:5e:5e:88:20:d6:81:df:c2:f0:b9:12:f5:81:6d:2c:94:
         c8:97:70:80:de:52:a0:bf:3d:36:be:e0:8f:9a:10:ae:c8:94:
         05:25:eb:4a:2d:66:17:1e:5a:78:b8:52:20:db:89:e9:4d:0e:
         77:a2:6f:90:b9:12:79:dd:0b:b1:6e:72:e4:b1:e5:8b:bb:75:
         a4:9b:ff:52:45:6f:6b:91:6e:88:01:b4:10:ff:c9:1d:a6:4d:
         b5:98:38:71:0e:19:d0:fb:bb:9f:f6:43:1d:c7:a1:24:c0:2d:
         56:7c:ad:b0:92:8f:9b:04:1a:b6:17:51:27:3f:f4:c0:ef:e2:
         fc:3c:6d:74:ad:ae:4d:0f:cc:5a:e0:df:39:f1:12:69:86:21:
         95:56:b6:7d:a4:07:67:fd:6e:18:c3:46:97:85:4a:42:42:d3:
         f0:d2:86:d6:7d:04:ea:9d:28:a7:75:f3:e7:0b:45:d2:01:6f:
         af:bd:b2:cc:11:b0:1e:c7:2f:c5:04:cd:ae:08:c8:48:6d:94:
         2c:e2:99:36:8e:2c:62:5e:a0:51:66:21:5b:a3:35:aa:38:8b:
         29:9a:c9:c7:e7:32:bd:92:98:d4:07:de:70:6e:83:c7:05:84:
         b8:5c:27:c0:98:18:21:2a:c3:fb:99:d0:a3:83:c5:27:ef:c7:
         54:2c:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:16 2025 by rpki-client on console.sobornost.net