Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37322e302f32342d3234203d3e20323638313533.roa
File:                     34352e3137302e37322e302f32342d3234203d3e20323638313533.roa (raw, json)
Hash identifier:          p/r4BSFh9ZWsp84N2BcJXfZQNIaP1bt7qAHBvLaaYWk=
Subject key identifier:   3F:01:45:A0:EE:3E:2C:B5:69:B9:0D:9E:89:B1:52:6C:51:66:40:EE
Certificate issuer:       /CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
Certificate serial:       394C817DE57AEBD953D99F912A7809BE789CDDC7
Authority key identifier: 6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37322e302f32342d3234203d3e20323638313533.roa
Signing time:             Thu 06 Mar 2025 01:48:58 +0000
ROA not before:           Thu 06 Mar 2025 01:43:58 +0000
ROA not after:            Thu 05 Mar 2026 01:48:58 +0000
asID:                     268153
IP address blocks:        45.170.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4c:81:7d:e5:7a:eb:d9:53:d9:9f:91:2a:78:09:be:78:9c:dd:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
        Validity
            Not Before: Mar  6 01:43:58 2025 GMT
            Not After : Mar  5 01:48:58 2026 GMT
        Subject: CN=3F0145A0EE3E2CB569B90D9E89B1526C516640EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1b:6f:05:b1:d9:30:6e:91:b1:9a:0d:33:51:
                    79:a2:0c:f7:6d:cd:0a:b4:6b:a9:d7:e0:4b:64:d7:
                    90:68:a1:05:13:83:c8:ff:da:f0:d8:a8:38:01:13:
                    a0:23:a7:2a:d1:20:f5:2b:fc:3f:05:cb:f8:18:8a:
                    cb:a1:eb:98:9f:eb:69:6d:e3:01:68:aa:bc:80:16:
                    a3:90:cc:f0:e7:4d:7f:72:dc:a7:11:81:12:78:98:
                    3d:0b:7a:4a:e5:41:b1:c6:af:0e:2f:96:d3:ad:9b:
                    09:44:ce:8a:fb:58:76:63:94:b3:c2:7e:94:f1:3b:
                    7f:8d:67:a1:bb:fa:ce:d3:b0:42:da:f5:cc:39:73:
                    7a:71:e6:ff:1b:ef:57:d2:28:ae:a8:23:40:3a:96:
                    b4:33:bd:a7:aa:db:22:ea:3e:e0:c8:c4:9d:e5:3d:
                    7a:72:80:cc:31:90:83:6c:c1:a7:91:c4:14:04:a3:
                    aa:80:4a:74:01:22:08:00:9d:6c:ae:f0:58:02:18:
                    15:46:5b:bb:d1:34:9b:6f:7f:00:fa:97:89:e5:d7:
                    84:f7:5e:ee:44:cb:9d:5a:73:8e:26:ba:9a:60:76:
                    98:4a:af:21:3e:ea:60:d7:6d:a0:7a:b3:47:a7:b3:
                    83:b1:fd:88:c8:3a:94:2e:6a:8a:68:3a:f8:d0:60:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:01:45:A0:EE:3E:2C:B5:69:B9:0D:9E:89:B1:52:6C:51:66:40:EE
            X509v3 Authority Key Identifier:
                keyid:6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37322e302f32342d3234203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:98:03:d7:e4:04:cf:43:d7:8c:6c:1f:93:f3:6e:4e:28:
         24:d3:62:9f:a5:d5:fd:09:40:9a:1d:91:b8:f3:57:e1:1a:ce:
         dd:8d:47:77:17:1c:c4:e6:15:db:39:c2:96:a2:f1:63:39:cc:
         79:7d:97:77:be:f8:d2:07:23:21:f1:17:2b:ba:42:cc:70:80:
         1f:98:7c:9f:08:dd:45:f9:65:f8:cc:e0:5a:99:a1:f2:74:b2:
         75:b2:52:f4:ab:2e:06:ab:59:ef:e1:a5:d7:c2:dc:5c:f2:a4:
         62:90:b1:d8:ac:0f:0f:0c:72:35:c6:c8:89:83:d6:37:a5:48:
         c8:f9:e0:72:d5:0a:58:b7:3d:43:0a:5b:b1:1d:f9:bb:b9:91:
         26:b2:ee:51:c4:1d:ff:7a:c6:fb:14:7e:81:ca:b7:80:a7:55:
         b0:b8:52:78:71:e5:b9:0d:9f:f5:54:15:9e:2c:37:57:1a:a3:
         3c:c9:99:2b:93:9c:cf:60:3d:fe:d3:54:ef:84:93:85:cd:ba:
         f1:00:c8:5c:de:42:f8:bf:48:00:71:46:da:b8:6d:62:f7:48:
         c9:ae:e9:e4:89:d3:9e:95:c2:58:e0:3b:03:16:aa:bc:fd:b3:
         fb:c7:32:47:de:4e:9e:95:27:6c:3c:ac:04:a1:bb:b3:b6:2b:
         44:19:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:23 2025 by rpki-client on console.sobornost.net