Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/34352e3138382e3134322e302f32332d3234203d3e20323639353332.roa
File:                     34352e3138382e3134322e302f32332d3234203d3e20323639353332.roa (raw, json)
Hash identifier:          unrzR5EwjC5FPwc+mwECXp74DRR/417i3vOHKUmLttw=
Subject key identifier:   EA:FA:23:A0:01:BD:8C:9A:CD:31:1D:64:DA:67:6C:EB:29:1D:9A:27
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       1AE983E620C5D7AD8565BBAD1E63020335DDCE64
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/34352e3138382e3134322e302f32332d3234203d3e20323639353332.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     269532
IP address blocks:        45.188.142.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e9:83:e6:20:c5:d7:ad:85:65:bb:ad:1e:63:02:03:35:dd:ce:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:d9:2b:34:dc:25:0c:12:85:19:a0:53:a5:
                    2b:7c:c3:2b:17:fa:b4:11:f6:11:52:e2:36:6e:78:
                    85:73:c3:74:2b:70:23:cf:ec:46:5f:87:58:5a:53:
                    79:70:7a:fd:0e:29:b2:e4:52:75:cd:37:02:15:d7:
                    6f:d4:22:99:c4:2d:5a:0d:14:1f:9a:02:0e:37:cf:
                    ca:91:40:91:3a:b4:ab:52:0a:13:ca:44:2c:17:f4:
                    ed:5a:69:c7:17:b5:1e:e1:79:ac:72:f9:eb:04:19:
                    44:6a:11:a8:74:89:7f:0d:bf:1a:21:0a:13:62:ae:
                    36:f7:a5:49:6a:f5:bd:dc:65:29:40:df:21:c2:89:
                    1c:d5:92:dd:e2:f4:d9:b9:2e:0f:d7:0b:77:f8:d3:
                    56:e7:78:ee:37:7a:28:93:5d:ac:3a:cc:44:56:10:
                    76:02:78:24:ff:e7:7f:2e:b5:ac:f4:cc:40:f4:89:
                    11:d0:14:28:04:aa:bb:c8:27:1b:e8:66:7e:db:05:
                    07:b1:c6:9c:56:70:20:c5:fd:a4:7b:fb:35:9b:69:
                    01:3d:47:d6:2f:e6:d6:60:1d:23:0b:73:9b:34:ba:
                    b6:23:c7:d6:a5:d9:67:74:c4:5d:b4:d9:97:46:fc:
                    bb:03:65:56:7f:2e:fb:2e:d8:ef:43:a3:dd:36:9d:
                    41:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FA:23:A0:01:BD:8C:9A:CD:31:1D:64:DA:67:6C:EB:29:1D:9A:27
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/34352e3138382e3134322e302f32332d3234203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:96:79:ff:6c:c5:08:06:5c:d3:a1:87:4d:63:c8:f2:e4:6b:
         5e:71:d5:1c:ca:ea:a7:9e:db:7a:2b:09:ce:b2:b5:97:a6:67:
         09:12:87:43:a0:77:93:ee:62:28:2a:83:d3:6e:0a:c9:d6:b6:
         a1:c6:29:47:a5:9d:fe:16:18:a2:d0:89:ec:12:aa:71:62:94:
         c2:61:20:86:0a:b9:66:60:7b:cd:c9:59:28:80:1f:e9:63:d3:
         a3:56:fc:f0:c5:79:d2:fd:d9:e2:b7:65:ba:6b:79:5f:58:6e:
         90:88:ab:96:0a:10:86:b0:df:8d:99:81:d0:64:08:11:51:c9:
         b4:98:2f:61:83:ec:50:be:c2:0e:f2:6a:87:9b:f5:6f:d1:c2:
         2d:85:6a:a6:d9:c0:41:b4:28:4d:27:5a:c1:0f:af:74:87:97:
         8d:93:84:c2:94:fd:3f:0d:23:16:e3:98:c0:9a:cd:c1:45:1f:
         b7:cc:ef:01:53:e1:d1:c9:3a:2e:db:e8:76:06:99:76:f6:3b:
         b6:bd:60:8b:fe:13:36:3b:c9:06:6b:21:2c:3f:11:d7:b2:d5:
         94:aa:6d:79:de:09:75:3c:bc:36:f4:6e:97:5c:14:95:20:43:
         73:32:7a:02:c2:9c:0e:14:26:60:6d:06:41:76:20:00:97:f8:
         d2:c5:62:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:11 2025 by rpki-client on console.sobornost.net