Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa
File:                     34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa (raw, json)
Hash identifier:          mpZHAAPJTUQXooOaT1oXKL/6OVYZoElxqPmWeW2/+og=
Subject key identifier:   C3:BA:B4:ED:50:07:38:93:AA:1E:54:19:5F:5A:81:DB:35:44:BC:A7
Certificate issuer:       /CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
Certificate serial:       757AB9B9940B28360F684114808CA4DC5B42B2FD
Authority key identifier: 3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     269478
IP address blocks:        45.187.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl
                          rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7a:b9:b9:94:0b:28:36:0f:68:41:14:80:8c:a4:dc:5b:42:b2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100DA7408A31E19B6247263AB08F48F88E417A76213E8A00B9FADC51C36C09CB8E9422C0FD4AD85C4B2F95AFB8515576590FEDC01EA14339CDDAF0F40E879F9BBD012684563F9E4BCCBE4366247A7CB5E7EEB5E45598505C5D994F54214D20540E7ED1FB925D6C61CAB54FBF3F6F51D491F7B42F4B76003CC13BD563B0019C0A3C197D7033366753E29786984BEF7668E59F66BCAAA52AEC742BAE8934A1B210567EACD2567ECE7F9E8C8620C47D8A863A266AB3A4BC508732178567FA83E64F5A2E946387EE9332D9DC0893A45C4934A7B834A51DAA58EE1C66564ED6799229D8E86B746AEFC37ACE6F07AF0F87A288DACD2D1AC0E7D1B44F56D1699B597B020430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:08:a3:1e:19:b6:24:72:63:ab:08:f4:8f:
                    88:e4:17:a7:62:13:e8:a0:0b:9f:ad:c5:1c:36:c0:
                    9c:b8:e9:42:2c:0f:d4:ad:85:c4:b2:f9:5a:fb:85:
                    15:57:65:90:fe:dc:01:ea:14:33:9c:dd:af:0f:40:
                    e8:79:f9:bb:d0:12:68:45:63:f9:e4:bc:cb:e4:36:
                    62:47:a7:cb:5e:7e:eb:5e:45:59:85:05:c5:d9:94:
                    f5:42:14:d2:05:40:e7:ed:1f:b9:25:d6:c6:1c:ab:
                    54:fb:f3:f6:f5:1d:49:1f:7b:42:f4:b7:60:03:cc:
                    13:bd:56:3b:00:19:c0:a3:c1:97:d7:03:33:66:75:
                    3e:29:78:69:84:be:f7:66:8e:59:f6:6b:ca:aa:52:
                    ae:c7:42:ba:e8:93:4a:1b:21:05:67:ea:cd:25:67:
                    ec:e7:f9:e8:c8:62:0c:47:d8:a8:63:a2:66:ab:3a:
                    4b:c5:08:73:21:78:56:7f:a8:3e:64:f5:a2:e9:46:
                    38:7e:e9:33:2d:9d:c0:89:3a:45:c4:93:4a:7b:83:
                    4a:51:da:a5:8e:e1:c6:65:64:ed:67:99:22:9d:8e:
                    86:b7:46:ae:fc:37:ac:e6:f0:7a:f0:f8:7a:28:8d:
                    ac:d2:d1:ac:0e:7d:1b:44:f5:6d:16:99:b5:97:b0:
                    20:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BA:B4:ED:50:07:38:93:AA:1E:54:19:5F:5A:81:DB:35:44:BC:A7
            X509v3 Authority Key Identifier:
                keyid:3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:3b:b9:5a:76:18:4c:65:4c:2f:6b:10:a2:71:3c:d5:0d:2b:
         99:ac:c5:fb:4c:c8:53:ea:1e:82:78:48:52:4b:10:b8:b9:df:
         ed:27:db:aa:09:7a:1f:a4:a4:cf:15:87:14:bb:79:b0:ac:d8:
         1c:ed:15:b0:2f:2f:0a:22:0a:7e:87:5a:55:c0:0e:01:c0:41:
         51:07:7e:68:4f:96:ed:b0:3d:aa:4c:0e:1b:b0:e4:d3:d4:44:
         7f:dc:0f:34:58:b3:b5:68:4b:14:4e:2e:7e:73:f8:5c:95:fa:
         99:9b:2f:d3:1f:d4:e1:ac:39:be:6a:d1:59:c6:f7:3a:a8:d6:
         f1:d9:53:d0:3d:dd:0f:4a:ec:97:2e:70:36:cb:a4:ef:62:ce:
         11:d5:b1:a5:a1:2f:c2:3b:70:24:b0:1f:9f:03:13:f8:c9:91:
         de:e5:7d:37:a5:c3:c7:3c:8c:1b:45:a0:c6:d4:60:9c:a9:43:
         03:13:72:52:5d:ff:d4:b5:5a:9f:b5:2b:42:dc:9d:6b:5e:3f:
         c9:c4:b1:9f:59:5b:06:a6:ed:b7:54:ec:96:b8:64:fb:b6:85:
         fc:56:ad:fa:fb:bb:87:08:9a:b3:8e:ec:73:b2:ce:01:56:88:
         4c:bc:5b:04:7e:b5:e9:9b:25:b0:de:2d:27:49:4b:25:f2:27:
         f6:05:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:06 2025 by rpki-client on console.sobornost.net