Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/34352e3233392e32342e302f32322d3234203d3e20323638333734.roa
File:                     34352e3233392e32342e302f32322d3234203d3e20323638333734.roa (raw, json)
Hash identifier:          pjcENXhwN39gPAIuzrYcrkt1/jTP1rUfHtlUwzsHBWs=
Subject key identifier:   D7:CA:09:6F:D5:60:EE:2E:05:C3:A8:9F:DB:3A:A2:A0:D8:2E:D1:3B
Certificate issuer:       /CN=DEF78BE3350057ACC8FE96EE5D24BD578A03464E
Certificate serial:       0B609938B025C50E51D12E79D3A1D15598932DAC
Authority key identifier: DE:F7:8B:E3:35:00:57:AC:C8:FE:96:EE:5D:24:BD:57:8A:03:46:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/34352e3233392e32342e302f32322d3234203d3e20323638333734.roa
Signing time:             Thu 10 Apr 2025 19:01:07 +0000
ROA not before:           Thu 10 Apr 2025 18:56:07 +0000
ROA not after:            Thu 09 Apr 2026 19:01:07 +0000
asID:                     268374
IP address blocks:        45.239.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl
                          rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:60:99:38:b0:25:c5:0e:51:d1:2e:79:d3:a1:d1:55:98:93:2d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEF78BE3350057ACC8FE96EE5D24BD578A03464E
        Validity
            Not Before: Apr 10 18:56:07 2025 GMT
            Not After : Apr  9 19:01:07 2026 GMT
        Subject: CN=D7CA096FD560EE2E05C3A89FDB3AA2A0D82ED13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:e2:14:ac:40:9a:cb:c2:bc:61:2e:62:f1:
                    c2:30:91:66:d6:09:1f:80:56:6b:19:6a:af:48:f5:
                    e8:98:4f:3d:3b:5e:87:44:17:85:84:db:8b:a1:6b:
                    b9:c3:18:98:86:32:a7:9d:40:3a:0a:58:8b:6e:ba:
                    6c:a4:a5:d4:bc:ea:0d:57:4b:e3:59:24:f2:ba:1e:
                    3f:64:b9:c5:e8:80:3c:fa:88:3c:3e:61:ef:df:6e:
                    17:52:23:06:d8:ae:00:22:d0:07:f0:7d:81:22:d7:
                    70:00:e2:06:62:8c:08:39:3b:31:36:24:7d:6c:36:
                    36:aa:e6:75:f4:0f:59:ca:8f:f0:65:33:68:65:09:
                    40:b2:86:34:50:72:03:53:81:fa:b9:91:3f:9c:43:
                    83:bb:27:c6:d3:75:32:49:12:38:7e:5e:bd:ab:bc:
                    a5:d4:4e:e8:62:da:95:9b:d9:f2:95:b4:31:4e:52:
                    e2:60:6e:e7:6e:46:f5:48:4f:67:1f:9d:bd:a2:5f:
                    a3:4e:b4:fe:95:e5:6d:47:e4:31:ec:cc:9e:89:31:
                    cf:1d:55:fa:bd:e3:17:8e:df:57:86:c8:3d:e1:a2:
                    27:9d:88:28:7e:5b:f3:fc:da:10:f6:22:8d:0e:d8:
                    5b:97:f4:b4:4a:9f:27:58:8e:1e:dc:ae:a3:98:8b:
                    2d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CA:09:6F:D5:60:EE:2E:05:C3:A8:9F:DB:3A:A2:A0:D8:2E:D1:3B
            X509v3 Authority Key Identifier:
                keyid:DE:F7:8B:E3:35:00:57:AC:C8:FE:96:EE:5D:24:BD:57:8A:03:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/34352e3233392e32342e302f32322d3234203d3e20323638333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:1d:ca:08:7a:89:2d:07:48:b4:c2:ef:46:c3:84:55:9e:52:
         f5:7d:fc:82:40:7a:42:7c:c5:5e:53:7d:84:28:e3:b7:a0:57:
         f6:48:2d:ed:80:14:cc:a5:2a:9e:51:7b:4f:cb:9c:92:54:90:
         9d:95:9b:d6:c7:7d:02:ab:8a:08:20:1a:87:50:27:90:d6:40:
         cc:9d:98:4a:f3:51:a2:86:3b:1e:8c:4d:8c:3c:5f:bb:b3:a7:
         d8:ff:aa:43:3b:cf:f8:49:94:0c:05:f1:f0:92:f9:45:c2:15:
         b8:93:ac:04:39:91:e2:b5:04:a4:be:10:15:6f:da:54:d4:c2:
         62:8d:0c:17:0e:f0:44:57:83:cd:4a:54:32:38:b4:52:b6:0d:
         27:10:58:de:cf:e2:7e:34:84:67:19:94:f8:1f:06:44:93:34:
         b1:89:c3:38:6a:22:9a:b7:92:0a:33:8b:ba:7f:f9:79:9a:8e:
         9d:07:fd:d5:1e:4d:c7:ec:a0:0a:b7:cc:96:04:2b:bf:75:d4:
         7e:80:03:75:dd:f8:ad:c6:39:57:e1:2e:da:73:37:d2:75:08:
         0c:71:f6:65:32:b9:ae:4c:d0:6c:e2:3e:1c:77:a3:75:8b:36:
         d9:90:21:30:f4:b2:27:48:23:13:e7:78:e0:8e:6c:5b:52:6f:
         f6:23:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:34 2025 by rpki-client on console.sobornost.net