Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231362e302f32322d3234203d3e20323636323437.roa
File:                     34352e362e3231362e302f32322d3234203d3e20323636323437.roa (raw, json)
Hash identifier:          VCFtCldIce6zN4zj/j1pu/rqrxFVNzqWzc3WNxu+7kg=
Subject key identifier:   D8:7E:C4:39:2A:11:BC:56:42:0F:AB:84:4E:73:34:26:4A:86:1D:03
Certificate issuer:       /CN=80A147C2692C5B710F19028DC4E02B8ABBEBC54B
Certificate serial:       7CC23724D7720275C96AE2203ECD1D16DDCFF1BB
Authority key identifier: 80:A1:47:C2:69:2C:5B:71:0F:19:02:8D:C4:E0:2B:8A:BB:EB:C5:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80A147C2692C5B710F19028DC4E02B8ABBEBC54B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231362e302f32322d3234203d3e20323636323437.roa
Signing time:             Wed 23 Apr 2025 13:08:44 +0000
ROA not before:           Wed 23 Apr 2025 13:03:44 +0000
ROA not after:            Wed 22 Apr 2026 13:08:44 +0000
asID:                     266247
IP address blocks:        45.6.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/80A147C2692C5B710F19028DC4E02B8ABBEBC54B.crl
                          rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/80A147C2692C5B710F19028DC4E02B8ABBEBC54B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80A147C2692C5B710F19028DC4E02B8ABBEBC54B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c2:37:24:d7:72:02:75:c9:6a:e2:20:3e:cd:1d:16:dd:cf:f1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A147C2692C5B710F19028DC4E02B8ABBEBC54B
        Validity
            Not Before: Apr 23 13:03:44 2025 GMT
            Not After : Apr 22 13:08:44 2026 GMT
        Subject: CN=D87EC4392A11BC56420FAB844E7334264A861D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:05:3c:c9:1c:d7:8a:6e:8f:4d:f2:dd:85:97:
                    bc:d4:16:34:c1:10:67:7c:49:22:dd:62:35:6c:c4:
                    30:12:35:4d:24:ce:d7:00:40:1f:41:78:94:78:50:
                    36:6c:b9:7c:1e:b4:c6:12:8b:17:fd:a7:3c:8b:20:
                    f8:99:1e:64:0f:a9:da:f1:63:c7:02:4f:ea:d6:e7:
                    d5:ae:28:ad:a1:9c:76:52:e5:d5:d6:ee:10:d8:7c:
                    d6:06:8d:56:6d:26:49:c8:71:eb:f0:2b:7a:de:75:
                    22:34:2d:28:3c:9a:06:f6:34:a3:4f:90:65:91:c8:
                    75:6c:71:a8:3d:da:bf:0c:d6:c5:da:3d:c5:e2:da:
                    ec:7a:dd:79:85:3d:9f:8f:b5:1f:d3:ed:ad:44:75:
                    37:09:d6:58:9d:54:0e:8c:67:53:cc:dd:e1:ee:af:
                    00:c4:94:9c:45:78:9f:fa:b8:a0:16:d4:f7:a2:10:
                    56:9d:69:ac:67:cf:aa:06:f5:4b:ea:fc:8c:05:d2:
                    46:f3:d5:28:ad:d9:77:5a:c5:dc:4e:15:78:ea:8a:
                    0b:2a:4d:fc:6b:68:6d:45:fc:0c:8f:85:f1:8b:e9:
                    e6:22:7b:d3:54:57:af:96:e5:23:32:97:db:33:40:
                    81:7d:80:ea:d4:5f:ba:84:cf:de:b7:35:8f:47:4f:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7E:C4:39:2A:11:BC:56:42:0F:AB:84:4E:73:34:26:4A:86:1D:03
            X509v3 Authority Key Identifier:
                keyid:80:A1:47:C2:69:2C:5B:71:0F:19:02:8D:C4:E0:2B:8A:BB:EB:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/80A147C2692C5B710F19028DC4E02B8ABBEBC54B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80A147C2692C5B710F19028DC4E02B8ABBEBC54B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231362e302f32322d3234203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:c5:de:06:2f:ae:53:9c:8f:13:e8:d4:b2:78:e0:6f:82:8e:
         69:45:c2:c6:ea:f3:73:58:41:d4:6a:b2:93:5a:17:3a:c4:17:
         61:c9:2a:32:c6:ee:7f:8c:6f:a8:75:58:cf:28:f7:6d:ff:8e:
         28:6f:10:e2:13:38:6d:d2:7e:2e:8c:b6:a1:27:d7:bd:ae:b0:
         7f:6b:27:5a:84:5b:6e:55:59:d0:d8:fd:97:85:f8:ef:ca:a2:
         c9:99:a1:42:18:dd:aa:70:e2:c0:fe:7e:5a:d6:1d:ba:f2:00:
         d5:29:0c:bd:6e:f4:e1:b1:9d:39:f5:2e:33:f8:01:3d:68:c0:
         56:49:84:b5:5f:d3:d7:6a:84:18:81:d8:9a:48:38:05:c2:37:
         a2:3d:6e:4f:d7:9f:94:ef:09:ad:6b:60:db:eb:ae:4d:c6:f9:
         fb:64:3c:85:9c:74:8d:7a:82:44:d7:bd:0f:df:ac:08:35:0c:
         dc:92:f6:33:3f:c0:41:d4:69:85:c6:e0:14:27:12:a9:c7:09:
         90:f7:cf:f4:8c:82:d9:04:4d:b5:37:fb:65:6d:c4:d6:08:86:
         66:4a:e5:69:f3:03:0b:72:e6:36:7b:89:d2:dc:78:b5:4a:cd:
         46:49:c9:4d:48:48:f4:f9:58:d1:a5:8b:fe:8d:f4:fb:7a:a3:
         30:e7:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:34 2025 by rpki-client on console.sobornost.net