Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/34352e3233352e3138302e302f32322d3234203d3e20323638313932.roa
File:                     34352e3233352e3138302e302f32322d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          jKwZQR4B8dYdGlAVl9rDjm6rImv5Lr+X9t7kannxCWo=
Subject key identifier:   05:B0:77:BD:8C:6E:51:60:3F:BC:7A:E2:02:E5:83:5B:DF:5D:51:05
Certificate issuer:       /CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
Certificate serial:       523A7294922DA26C341D34A7B745CAF45CDE7F9A
Authority key identifier: A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/34352e3233352e3138302e302f32322d3234203d3e20323638313932.roa
Signing time:             Thu 20 Mar 2025 20:21:20 +0000
ROA not before:           Thu 20 Mar 2025 20:16:20 +0000
ROA not after:            Thu 19 Mar 2026 20:21:20 +0000
asID:                     268192
IP address blocks:        45.235.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl
                          rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3a:72:94:92:2d:a2:6c:34:1d:34:a7:b7:45:ca:f4:5c:de:7f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
        Validity
            Not Before: Mar 20 20:16:20 2025 GMT
            Not After : Mar 19 20:21:20 2026 GMT
        Subject: CN=05B077BD8C6E51603FBC7AE202E5835BDF5D5105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:d9:85:ea:cb:fd:d0:47:09:69:ea:81:a8:
                    f3:bb:78:98:4b:08:cc:b4:c5:81:b5:83:f3:9f:5a:
                    be:cb:4c:1a:87:a6:aa:b1:2e:55:65:44:af:87:d6:
                    fa:dd:b5:d5:dc:92:ff:af:58:b3:9b:1d:63:0c:ac:
                    cf:d8:a6:8a:eb:7e:8a:99:63:05:57:9c:98:96:9b:
                    29:6a:ed:5f:1b:7c:18:98:ae:64:44:ba:d7:9e:9d:
                    2c:65:07:0b:55:b9:20:a5:57:5d:62:6d:9a:35:31:
                    22:13:28:f0:c0:d1:63:89:98:ed:71:7b:f2:35:9f:
                    22:1e:08:73:6e:c1:bd:5d:63:47:55:74:4d:cc:9d:
                    43:a3:9d:e3:fe:26:86:92:6f:1d:4a:c1:fd:1d:c5:
                    0b:17:73:9d:16:10:9f:14:78:8c:99:e3:9d:1c:02:
                    07:98:f0:ae:8b:06:cf:e6:7b:8b:e2:3d:05:88:ab:
                    46:e7:1e:b7:29:bd:af:2c:0d:ff:2f:c2:93:d9:45:
                    10:27:9e:9a:eb:f7:e1:27:1a:25:bc:0b:9f:50:24:
                    1c:01:ca:b7:a9:12:68:d8:a4:12:9d:d2:31:39:78:
                    79:c5:eb:d0:7d:83:ab:a1:a5:77:41:7a:c3:23:99:
                    a5:b0:17:37:86:78:7b:51:3a:1c:8e:83:dc:5e:38:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B0:77:BD:8C:6E:51:60:3F:BC:7A:E2:02:E5:83:5B:DF:5D:51:05
            X509v3 Authority Key Identifier:
                keyid:A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/34352e3233352e3138302e302f32322d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:c7:aa:34:d8:68:ed:59:ff:eb:8d:57:32:61:e8:d8:99:58:
         1f:ee:56:85:05:98:d3:8b:b9:f3:62:f0:bf:8d:0b:23:2a:1e:
         b0:74:24:3f:ad:9d:a5:39:ee:93:64:c3:6b:be:43:41:e9:23:
         c1:61:94:fd:45:dc:de:2b:e0:13:40:8c:c9:57:05:80:51:fa:
         d1:33:45:d4:4d:41:d9:0b:2f:68:88:70:f1:67:d2:96:6b:e7:
         84:ea:24:c5:c3:8a:9d:d9:53:7f:d6:19:bc:fc:22:35:fb:65:
         d7:8e:30:6d:51:87:6c:50:6f:58:3b:1e:28:f5:4b:1f:ca:70:
         3e:93:a7:3a:2d:dc:9e:3f:a3:99:51:fc:6b:9a:8d:b0:9a:23:
         c1:f5:5f:88:84:9b:9b:47:44:e9:84:2d:09:aa:8f:5e:ec:92:
         52:1d:5a:1d:ed:da:8b:f3:23:40:36:0b:1b:04:52:eb:38:cb:
         16:c6:1d:31:88:a8:3d:17:af:67:bb:a2:83:ca:ce:4b:b0:81:
         8f:9d:80:1c:b4:a2:2e:a3:b8:48:ce:cf:03:43:14:9d:61:11:
         46:cf:9e:7d:2c:9b:e8:1b:08:d7:a3:c1:1f:e2:cd:76:9f:2c:
         d7:dd:12:1f:87:13:1e:9b:39:a2:8b:c0:04:e8:ce:27:c2:ae:
         52:a1:7d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:40 2025 by rpki-client on console.sobornost.net