Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3233302e32342e302f32322d3332203d3e20323632383933.roa
File:                     34352e3233302e32342e302f32322d3332203d3e20323632383933.roa (raw, json)
Hash identifier:          2NBBezvpWWq5VTF0qE/iFzFb6TEDNPt2eNBN8fnZ4m0=
Subject key identifier:   A1:37:B9:6B:20:ED:3E:B7:38:61:33:0D:0E:15:71:2F:A8:0D:F4:59
Certificate issuer:       /CN=99B35081E0645635AD4D8BE70E34F035910FB764
Certificate serial:       06FCD1193DFE9E2DB60B489E0BA7755D4627E456
Authority key identifier: 99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3233302e32342e302f32322d3332203d3e20323632383933.roa
Signing time:             Fri 07 Mar 2025 05:20:25 +0000
ROA not before:           Fri 07 Mar 2025 05:15:25 +0000
ROA not after:            Fri 06 Mar 2026 05:20:25 +0000
asID:                     262893
IP address blocks:        45.230.24.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl
                          rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fc:d1:19:3d:fe:9e:2d:b6:0b:48:9e:0b:a7:75:5d:46:27:e4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99B35081E0645635AD4D8BE70E34F035910FB764
        Validity
            Not Before: Mar  7 05:15:25 2025 GMT
            Not After : Mar  6 05:20:25 2026 GMT
        Subject: CN=A137B96B20ED3EB73861330D0E15712FA80DF459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7c:a3:a0:31:24:5d:e4:6d:8b:3b:50:10:07:
                    f9:eb:ce:39:97:f1:89:5b:aa:7c:c6:76:8b:11:25:
                    b0:c4:c7:cd:fb:24:37:02:34:8b:07:0f:95:c6:ff:
                    c5:eb:50:f1:49:ed:ce:75:4a:12:76:2f:f5:67:cf:
                    7c:f8:c2:e7:f1:0d:76:7a:ca:a1:16:7f:01:1b:35:
                    29:e9:de:1e:f6:3e:cb:53:60:7e:de:e0:c2:b0:07:
                    5d:70:e9:af:ed:20:2a:9d:36:12:2b:ac:ca:54:ad:
                    88:b4:3b:ea:94:1d:8b:2f:9e:81:85:9e:b9:dd:90:
                    61:9b:08:40:d3:0d:03:9e:77:84:97:b1:01:4e:87:
                    be:d0:f8:ec:f8:ea:65:43:e0:a9:7b:3d:54:f9:9a:
                    e0:f1:1d:28:6c:d2:dc:c7:6c:a6:4e:8c:59:9e:79:
                    fb:9e:1f:d6:48:27:cd:ed:62:ed:8f:f9:44:b6:f4:
                    0d:22:ff:dd:fe:02:bd:79:a9:fe:26:dd:d7:5f:8e:
                    5a:9c:df:2f:9d:ae:53:5c:81:83:e1:4c:18:60:24:
                    e5:62:ac:2b:46:a0:3d:15:55:4b:18:2c:30:d3:90:
                    1d:ba:38:30:a7:1c:5b:fa:24:7e:48:68:7d:c6:94:
                    a0:67:5d:e8:83:b9:c8:6d:f5:dc:2c:2a:fc:6e:ab:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:37:B9:6B:20:ED:3E:B7:38:61:33:0D:0E:15:71:2F:A8:0D:F4:59
            X509v3 Authority Key Identifier:
                keyid:99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3233302e32342e302f32322d3332203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:35:e1:4d:4b:d4:f6:a1:3e:2d:03:1f:7b:b2:62:7e:f9:
         60:8c:05:1d:ff:b2:8f:e7:11:9b:84:ab:6a:b7:f1:a1:90:a5:
         b0:fe:03:4c:b4:15:dc:0d:93:21:08:86:40:07:32:29:85:c5:
         bd:21:f7:ac:cd:b2:a4:6a:1d:de:42:f1:30:26:b3:3e:67:8c:
         44:08:1e:96:8e:31:1f:e8:8d:4f:d0:cb:76:50:c2:aa:b0:3b:
         cb:8b:ec:a3:42:9c:0b:42:3a:e2:78:3a:64:22:37:68:37:d8:
         2a:cb:9b:a6:fe:28:17:b8:8c:0e:27:b6:d8:3d:2b:33:65:42:
         a5:01:95:7d:6b:76:e8:7a:43:06:da:56:10:18:ca:0d:55:77:
         51:99:09:12:8a:27:f0:6d:d5:8c:67:c3:b3:ec:40:09:42:4a:
         a1:6a:4b:6e:83:7c:9e:1d:d1:de:2f:13:cd:b7:82:1d:47:d5:
         77:b0:9f:5a:6c:ea:f3:58:9d:b2:18:bb:a5:96:a2:4f:7b:68:
         5e:65:3c:f9:9a:9a:34:c1:02:86:b3:ae:23:f4:02:04:d3:a1:
         1b:48:73:40:f9:ed:f5:f0:13:5c:65:22:f4:ec:c1:74:74:bd:
         7f:23:98:91:eb:62:b8:7e:c1:76:28:c3:cc:c5:74:2c:12:01:
         ed:ce:15:e1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBvzRGT3+ni22C0ieC6d1XUYn5FYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlCMzUwODFFMDY0NTYzNUFENEQ4QkU3MEUzNEYwMzU5
MTBGQjc2NDAeFw0yNTAzMDcwNTE1MjVaFw0yNjAzMDYwNTIwMjVaMDMxMTAvBgNV
BAMTKEExMzdCOTZCMjBFRDNFQjczODYxMzMwRDBFMTU3MTJGQTgwREY0NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjfKOgMSRd5G2LO1AQB/nrzjmX
8YlbqnzGdosRJbDEx837JDcCNIsHD5XG/8XrUPFJ7c51ShJ2L/Vnz3z4wufxDXZ6
yqEWfwEbNSnp3h72PstTYH7e4MKwB11w6a/tICqdNhIrrMpUrYi0O+qUHYsvnoGF
nrndkGGbCEDTDQOed4SXsQFOh77Q+Oz46mVD4Kl7PVT5muDxHShs0tzHbKZOjFme
efueH9ZIJ83tYu2P+US29A0i/93+Ar15qf4m3ddfjlqc3y+drlNcgYPhTBhgJOVi
rCtGoD0VVUsYLDDTkB26ODCnHFv6JH5IaH3GlKBnXeiDucht9dwsKvxuq7WdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoTe5ayDtPrc4YTMNDhVxL6gN9FkwHwYDVR0j
BBgwFoAUmbNQgeBkVjWtTYvnDjTwNZEPt2QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU1GRm5vcGdkR0xjM0hRcTM1Sk1ZcFVNRkhEU01reUFLOFNrSzFZdjI3
bzcvMS85OUIzNTA4MUUwNjQ1NjM1QUQ0RDhCRTcwRTM0RjAzNTkxMEZCNzY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QjM1MDgxRTA2NDU2MzVB
RDREOEJFNzBFMzRGMDM1OTEwRkI3NjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FNRkZub3BnZEdMYzNIUXEzNUpNWXBVTUZIRFNNa3lBSzhTa0sxWXYyN283LzEv
MzQzNTJlMzIzMzMwMmUzMjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzgzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeYYMA0GCSqGSIb3DQEBCwUAA4IBAQARCjXhTUvU
9qE+LQMfe7JifvlgjAUd/7KP5xGbhKtqt/GhkKWw/gNMtBXcDZMhCIZABzIphcW9
IfeszbKkah3eQvEwJrM+Z4xECB6WjjEf6I1P0Mt2UMKqsDvLi+yjQpwLQjrieDpk
IjdoN9gqy5um/igXuIwOJ7bYPSszZUKlAZV9a3boekMG2lYQGMoNVXdRmQkSiifw
bdWMZ8Oz7EAJQkqhaktug3yeHdHeLxPNt4IdR9V3sJ9abOrzWJ2yGLullqJPe2he
ZTz5mpo0wQKGs64j9AIE06EbSHNA+e318BNcZSL07MF0dL1/I5iR62K4fsF2KMPM
xXQsEgHtzhXh
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:59 2025 by rpki-client on console.sobornost.net