Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3136332e39362e302f32322d3234203d3e20323638353535.roa
File:                     34352e3136332e39362e302f32322d3234203d3e20323638353535.roa (raw, json)
Hash identifier:          F21UU/rt70Cftx2qyvWgWomJKFRCmrHnTltSTTjJJ6k=
Subject key identifier:   CE:C4:FB:9A:C6:30:6C:4B:31:BF:B9:6C:6E:97:01:87:3E:ED:EC:FF
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       6DA803E2ADC16CF23DAEC8A39401372AADB0CF28
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3136332e39362e302f32322d3234203d3e20323638353535.roa
Signing time:             Mon 10 Feb 2025 14:35:15 +0000
ROA not before:           Mon 10 Feb 2025 14:30:15 +0000
ROA not after:            Mon 09 Feb 2026 14:35:15 +0000
asID:                     268555
IP address blocks:        45.163.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a8:03:e2:ad:c1:6c:f2:3d:ae:c8:a3:94:01:37:2a:ad:b0:cf:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:30:15 2025 GMT
            Not After : Feb  9 14:35:15 2026 GMT
        Subject: CN=CEC4FB9AC6306C4B31BFB96C6E9701873EEDECFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:19:00:00:25:8e:2a:9c:24:06:75:8a:6b:
                    78:0d:ee:34:64:8c:9e:b0:3e:c1:f8:58:91:b3:c4:
                    6c:8e:bc:37:6e:05:b1:6f:e5:33:34:32:b1:86:2a:
                    c5:66:af:e9:9e:cd:17:dc:ab:fb:e8:61:d7:2f:c6:
                    77:1f:96:0d:2a:ca:1f:f9:76:8f:6a:15:74:0a:11:
                    27:91:b3:96:41:9d:b9:ee:64:d4:f0:55:45:70:c4:
                    57:37:35:0d:b0:09:ad:7f:86:5c:e4:d5:c8:bf:e0:
                    b3:60:87:5c:42:f2:31:2a:9a:74:8d:3d:32:46:c8:
                    64:cc:33:2f:50:d0:7b:4d:5e:1c:df:5e:fa:19:35:
                    c4:03:f6:51:0c:b9:5f:f3:b1:65:2b:bf:77:6b:71:
                    87:3a:eb:fa:a2:22:6c:a1:90:a6:7d:0c:bc:6b:a3:
                    9a:07:21:2c:a6:2a:eb:ca:d2:73:e5:63:9a:84:a0:
                    e2:c7:2e:11:2f:d2:cf:24:11:ec:2d:ee:41:40:68:
                    3d:9f:4a:1a:02:e3:19:0e:ed:8a:86:41:93:ba:8e:
                    61:9a:58:94:e6:63:fb:32:79:02:01:69:cc:ff:af:
                    85:bb:2b:03:15:cf:99:2c:f8:7e:dd:3d:b9:09:c7:
                    00:d3:50:dd:a0:24:8b:85:3a:7b:e4:3d:e2:36:d6:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C4:FB:9A:C6:30:6C:4B:31:BF:B9:6C:6E:97:01:87:3E:ED:EC:FF
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3136332e39362e302f32322d3234203d3e20323638353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:44:ce:23:f6:21:4e:99:d1:ad:01:e3:05:4c:88:be:a9:34:
         82:ad:d2:bd:af:27:aa:af:20:c7:4c:b2:7c:fd:3a:55:be:33:
         25:1b:99:2d:d3:61:5c:04:85:62:8f:50:12:f8:25:61:a6:aa:
         46:20:15:77:c6:b0:c7:a5:8a:26:31:d1:cd:68:9d:7a:ff:55:
         9b:d0:e3:a2:08:0e:a7:27:a4:1b:49:92:7c:60:8b:17:8f:70:
         20:7c:36:94:6e:d6:58:a5:a6:bd:7e:33:2f:43:60:0c:60:d6:
         12:a6:0f:a8:b7:ed:fb:55:a0:f2:07:b4:24:0f:50:30:ad:07:
         5d:ef:25:ac:4d:33:7d:0b:90:e4:c2:e6:a8:86:9d:64:ad:20:
         18:36:bb:a4:a9:ac:ad:76:15:aa:1b:a3:3d:f2:1c:52:04:74:
         a7:6d:f3:9c:28:72:fb:56:10:b6:77:0e:73:dd:84:a3:e8:55:
         3e:a5:6c:97:25:bf:83:87:46:df:30:86:4e:cf:39:98:54:fe:
         dc:db:57:fb:28:be:30:79:49:03:2c:08:75:09:96:5c:70:8d:
         5b:15:02:50:db:19:0e:89:ab:ac:6b:f8:19:75:d8:5c:0f:81:
         34:42:28:45:4a:bc:0c:4c:cb:40:86:8c:3b:9f:6b:55:b9:ce:
         62:20:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:10 2025 by rpki-client on console.sobornost.net