Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/34352e372e3232342e302f32322d3234203d3e20323636363135.roa
File:                     34352e372e3232342e302f32322d3234203d3e20323636363135.roa (raw, json)
Hash identifier:          QOk4xpuDXuZwmhbgGdBEEVI7JvxiOtP4Cb6ef0m8ZdI=
Subject key identifier:   9B:B7:D4:8B:F7:4C:D6:2F:29:98:1E:EF:8D:CA:12:E5:2D:1A:C2:F8
Certificate issuer:       /CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
Certificate serial:       77FBF8D6AF1BBC4F22914171AA9309CDB8A0F237
Authority key identifier: 72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/34352e372e3232342e302f32322d3234203d3e20323636363135.roa
Signing time:             Thu 06 Mar 2025 09:19:30 +0000
ROA not before:           Thu 06 Mar 2025 09:14:30 +0000
ROA not after:            Thu 05 Mar 2026 09:19:30 +0000
asID:                     266615
IP address blocks:        45.7.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl
                          rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fb:f8:d6:af:1b:bc:4f:22:91:41:71:aa:93:09:cd:b8:a0:f2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
        Validity
            Not Before: Mar  6 09:14:30 2025 GMT
            Not After : Mar  5 09:19:30 2026 GMT
        Subject: CN=9BB7D48BF74CD62F29981EEF8DCA12E52D1AC2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:2f:03:50:f7:8a:92:fc:93:a9:6e:59:e8:
                    64:2d:49:20:95:68:2f:1e:8e:8f:b4:b5:a0:0b:b0:
                    ac:ba:ee:d6:0c:8c:27:6f:a3:a8:3d:ad:81:48:de:
                    7f:f4:7b:c2:89:51:9c:0b:55:ce:bb:80:0a:f4:8e:
                    45:0e:07:ba:39:97:c4:cf:79:76:53:c8:53:b4:2a:
                    cf:1e:6c:30:39:e1:b8:90:84:26:0c:be:8a:31:39:
                    2b:27:f4:d0:68:2e:5c:26:2d:6f:3b:2b:9a:7a:6f:
                    71:26:74:a7:79:03:22:c4:c9:bb:f9:90:30:3a:a9:
                    4d:3f:c6:2a:43:04:e7:19:0b:89:0b:c7:d3:ad:b6:
                    0a:53:52:dc:49:73:6a:33:d5:e5:03:54:42:7c:d8:
                    f8:c2:8d:bb:ba:5a:1c:13:44:b6:f3:55:69:f8:2a:
                    20:fb:29:1c:eb:d0:af:fa:74:71:0f:8d:74:0d:aa:
                    13:c6:4d:ac:65:4b:cd:aa:c7:3e:ac:1f:ff:08:7a:
                    39:e8:8b:4d:65:5d:0d:f6:56:00:d9:40:8c:6c:7c:
                    53:e0:8d:24:43:cc:33:b3:ca:ea:d2:1f:5e:c8:a6:
                    18:c7:d6:65:af:e6:85:29:9f:0c:bd:e4:31:14:15:
                    83:59:c6:d9:36:21:8b:7a:7b:d8:b8:1f:67:3a:09:
                    63:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B7:D4:8B:F7:4C:D6:2F:29:98:1E:EF:8D:CA:12:E5:2D:1A:C2:F8
            X509v3 Authority Key Identifier:
                keyid:72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/34352e372e3232342e302f32322d3234203d3e20323636363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:85:4f:31:e3:7e:61:91:e1:06:37:6e:e7:60:9c:a0:9a:5e:
         12:2d:24:93:bc:cf:14:be:ce:e9:1e:ca:74:f2:f0:28:5c:b2:
         f0:3f:88:cd:69:ec:ec:b4:4f:4f:2c:37:70:f9:61:4c:ec:1e:
         4a:3e:07:d1:56:7d:aa:04:d9:4e:a6:df:19:23:20:d6:cd:a9:
         d5:0a:ac:1d:40:6c:b8:fd:f7:9e:af:33:50:eb:c5:4a:ee:a6:
         f2:ec:ee:a5:07:d0:13:11:90:7e:a3:36:b1:47:f3:4f:cc:ee:
         5d:9b:4b:d4:8c:6e:92:2d:08:ac:f3:f2:1a:48:6c:12:d9:d1:
         ea:f5:18:39:c1:4d:a6:cb:0d:e1:fb:91:fc:f1:20:fc:5e:a2:
         16:bc:f5:dd:03:12:24:3b:fe:9f:f5:e3:9b:6a:67:34:82:08:
         71:5d:c6:dc:86:75:1f:c3:cd:3d:bc:3b:20:e6:e3:0c:ad:37:
         eb:b4:da:64:9a:65:b8:f8:6d:18:0a:58:fc:ad:e9:b0:c3:4a:
         31:a5:03:10:27:43:c5:90:a6:06:8a:1e:e2:08:63:ee:50:91:
         7e:5e:84:43:a2:33:96:32:97:97:ca:bd:9d:cb:b1:87:5e:cd:
         eb:84:95:c7:5e:59:cc:5e:a6:98:68:40:e3:4b:0d:6b:63:15:
         a5:c7:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:41 2025 by rpki-client on console.sobornost.net