Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/34352e3232342e3133362e302f32322d3234203d3e20323733333530.roa
File:                     34352e3232342e3133362e302f32322d3234203d3e20323733333530.roa (raw, json)
Hash identifier:          x7Tm3VmskDsI2c7sK4dsIZV/6WDzu2Tew1g768U+5Vs=
Subject key identifier:   3D:8C:81:5D:E8:72:AD:3E:B3:19:28:F7:82:AB:74:BA:91:8B:71:67
Certificate issuer:       /CN=613FAA413557F145002B707154580B79D61AF413
Certificate serial:       6653E7A9B68C09E185E24BC85E77054DE9B312D8
Authority key identifier: 61:3F:AA:41:35:57:F1:45:00:2B:70:71:54:58:0B:79:D6:1A:F4:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/34352e3232342e3133362e302f32322d3234203d3e20323733333530.roa
Signing time:             Thu 06 Mar 2025 11:33:15 +0000
ROA not before:           Thu 06 Mar 2025 11:28:15 +0000
ROA not after:            Thu 05 Mar 2026 11:33:15 +0000
asID:                     273350
IP address blocks:        45.224.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.crl
                          rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:53:e7:a9:b6:8c:09:e1:85:e2:4b:c8:5e:77:05:4d:e9:b3:12:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613FAA413557F145002B707154580B79D61AF413
        Validity
            Not Before: Mar  6 11:28:15 2025 GMT
            Not After : Mar  5 11:33:15 2026 GMT
        Subject: CN=3D8C815DE872AD3EB31928F782AB74BA918B7167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:c9:a8:b1:d9:40:6b:29:3d:4e:4f:d8:11:
                    9f:7d:85:42:c6:5d:22:14:3f:2d:73:10:ee:44:a9:
                    dc:1d:e0:46:d7:91:ed:91:ec:1d:cb:a9:d1:f4:bc:
                    a4:ce:52:cf:37:dd:bf:12:16:a6:d5:e3:7e:df:4c:
                    21:e4:10:1c:41:54:60:d3:df:eb:51:e5:d9:9f:0e:
                    82:62:c9:8c:5f:70:c0:1f:be:ae:1a:4e:e5:47:18:
                    90:dd:25:78:b0:b3:2f:32:6c:85:5f:5d:43:1a:68:
                    5d:9d:9f:7f:3d:be:4d:1c:ce:60:c5:87:63:1a:06:
                    51:e8:ac:e8:5f:c7:b9:68:b9:08:25:8b:97:68:03:
                    96:f9:ed:35:6b:b2:15:6e:3d:00:41:b3:1e:a5:39:
                    95:1f:84:dd:41:01:b7:5e:2e:f7:97:86:0f:79:26:
                    20:d4:0c:68:e7:a6:e6:35:56:22:a9:0a:c8:74:34:
                    31:d6:b4:38:84:d5:2b:28:98:24:df:99:b2:55:61:
                    74:a2:2a:14:d0:28:d1:7c:7a:a2:30:62:d8:1d:97:
                    ba:9e:8c:47:db:c7:f7:6d:99:c5:c2:bf:20:7d:24:
                    bb:8f:dd:22:d3:50:da:30:05:20:6e:f7:b7:c4:60:
                    b3:f7:c2:63:e6:3c:71:aa:4c:a5:b6:ee:e6:4a:fd:
                    0c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8C:81:5D:E8:72:AD:3E:B3:19:28:F7:82:AB:74:BA:91:8B:71:67
            X509v3 Authority Key Identifier:
                keyid:61:3F:AA:41:35:57:F1:45:00:2B:70:71:54:58:0B:79:D6:1A:F4:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/34352e3232342e3133362e302f32322d3234203d3e20323733333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:bb:f2:05:ed:4a:ff:67:31:0c:83:90:93:92:b5:37:b8:50:
         de:c7:f2:ff:d5:18:ae:3c:b1:42:27:05:2f:36:d6:3c:00:d1:
         d2:52:21:e2:46:67:88:0a:da:0d:1e:0c:df:2f:bd:e2:83:2d:
         96:b7:e1:eb:a2:aa:c3:83:2a:db:ff:5e:1f:96:db:1f:49:64:
         14:02:8b:66:95:00:b4:7e:c9:d1:aa:6e:1b:d8:2a:7b:40:e6:
         08:f4:31:49:24:5a:e7:90:e1:46:93:0b:8d:d5:3c:df:0c:52:
         21:69:54:03:17:bb:71:7b:31:b5:1a:80:a8:8d:9d:c4:cf:be:
         38:fd:b1:4b:1c:a7:ba:69:e2:d5:ea:49:8e:1d:61:c5:a5:81:
         b6:3f:ed:35:6f:47:f0:a7:c1:09:ee:f9:6f:8d:dd:7a:20:d3:
         2d:c7:22:a0:cc:e7:19:21:10:68:2c:f0:85:25:ba:ef:a7:0a:
         e5:6e:dd:ba:b7:91:20:a2:c1:db:0e:5e:36:25:0a:6f:60:21:
         67:bf:bd:57:f3:b7:a3:ad:a4:c2:41:8a:bc:3f:9d:e2:ac:47:
         66:78:cb:67:e8:ea:2f:5d:76:c9:22:eb:12:56:58:44:b6:84:
         03:09:9c:09:54:84:80:7e:b1:f1:04:cc:00:c6:a5:1b:7d:8f:
         00:cc:33:d3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZlPnqbaMCeGF4kvIXncFTemzEtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEzRkFBNDEzNTU3RjE0NTAwMkI3MDcxNTQ1ODBCNzlE
NjFBRjQxMzAeFw0yNTAzMDYxMTI4MTVaFw0yNjAzMDUxMTMzMTVaMDMxMTAvBgNV
BAMTKDNEOEM4MTVERTg3MkFEM0VCMzE5MjhGNzgyQUI3NEJBOTE4QjcxNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVn8mosdlAayk9Tk/YEZ99hULG
XSIUPy1zEO5Eqdwd4EbXke2R7B3LqdH0vKTOUs833b8SFqbV437fTCHkEBxBVGDT
3+tR5dmfDoJiyYxfcMAfvq4aTuVHGJDdJXiwsy8ybIVfXUMaaF2dn389vk0czmDF
h2MaBlHorOhfx7louQgli5doA5b57TVrshVuPQBBsx6lOZUfhN1BAbdeLveXhg95
JiDUDGjnpuY1ViKpCsh0NDHWtDiE1SsomCTfmbJVYXSiKhTQKNF8eqIwYtgdl7qe
jEfbx/dtmcXCvyB9JLuP3SLTUNowBSBu97fEYLP3wmPmPHGqTKW27uZK/QzdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPYyBXehyrT6zGSj3gqt0upGLcWcwHwYDVR0j
BBgwFoAUYT+qQTVX8UUAK3BxVFgLedYa9BMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkhpZGhNTGhibTJZS0t1UEw1UVdqWXhMNzlDRW0yVkcxVExSOUhLUGR1
VDEvMS82MTNGQUE0MTM1NTdGMTQ1MDAyQjcwNzE1NDU4MEI3OUQ2MUFGNDEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxM0ZBQTQxMzU1N0YxNDUw
MDJCNzA3MTU0NTgwQjc5RDYxQUY0MTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JIaWRoTUxoYm0yWUtLdVBMNVFXall4TDc5Q0VtMlZHMVRMUjlIS1BkdVQxLzEv
MzQzNTJlMzIzMjM0MmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzMzMzM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4IgwDQYJKoZIhvcNAQELBQADggEBALy78gXt
Sv9nMQyDkJOStTe4UN7H8v/VGK48sUInBS821jwA0dJSIeJGZ4gK2g0eDN8vveKD
LZa34euiqsODKtv/Xh+W2x9JZBQCi2aVALR+ydGqbhvYKntA5gj0MUkkWueQ4UaT
C43VPN8MUiFpVAMXu3F7MbUagKiNncTPvjj9sUscp7pp4tXqSY4dYcWlgbY/7TVv
R/CnwQnu+W+N3Xog0y3HIqDM5xkhEGgs8IUluu+nCuVu3bq3kSCiwdsOXjYlCm9g
IWe/vVfzt6OtpMJBirw/neKsR2Z4y2fo6i9ddski6xJWWES2hAMJnAlUhIB+sfEE
zADGpRt9jwDMM9M=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:58 2025 by rpki-client on console.sobornost.net