Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32342d3234203d3e20323639353032.roa
File:                     34352e3138362e302e302f32342d3234203d3e20323639353032.roa (raw, json)
Hash identifier:          Urv3dnpr/5exMpjAUl6xDvYyxiq3xhFafQ0MOG+0m/Y=
Subject key identifier:   5A:DD:8C:BC:FB:37:AA:43:82:4E:89:02:C7:7A:F6:11:2F:9D:F1:C5
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       3704E2E542FD36CE953C3E74DDB938B44C9CF225
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32342d3234203d3e20323639353032.roa
Signing time:             Sun 13 Apr 2025 00:09:39 +0000
ROA not before:           Sun 13 Apr 2025 00:04:39 +0000
ROA not after:            Sun 12 Apr 2026 00:09:39 +0000
asID:                     269502
IP address blocks:        45.186.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 14:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:04:e2:e5:42:fd:36:ce:95:3c:3e:74:dd:b9:38:b4:4c:9c:f2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: Apr 13 00:04:39 2025 GMT
            Not After : Apr 12 00:09:39 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:26:b4:77:b6:74:8f:a9:a0:28:48:3d:95:
                    4b:67:d8:17:ed:a2:87:02:61:ab:5f:6a:c7:65:10:
                    db:6f:8d:ff:87:7b:6e:13:d4:9f:4e:c0:85:f4:b9:
                    cb:66:6b:f0:d4:9b:de:81:78:27:b0:c4:5a:a2:b2:
                    f4:5b:02:db:d0:b3:98:b6:45:eb:46:0e:a2:06:a5:
                    ca:4a:40:1d:84:7a:7d:58:53:f4:ae:fd:c7:5e:62:
                    01:92:b6:6f:92:69:9c:ac:9f:2a:c8:02:dd:b3:c5:
                    4c:8b:67:3f:42:d8:86:69:f7:60:f5:4c:b1:61:f6:
                    e5:24:ca:1d:ae:ed:a9:7e:8a:85:1b:fc:e4:25:33:
                    71:b3:69:54:81:d0:e2:f5:33:2b:fb:eb:0e:4f:e2:
                    46:c6:24:3d:c0:47:b0:d6:50:31:b6:64:d8:9b:6a:
                    45:06:0e:c1:91:04:50:19:4d:dc:ca:c5:ab:e7:eb:
                    cd:a3:0e:71:c7:92:bd:8e:b3:fc:68:c4:fa:6a:cd:
                    d7:b9:af:22:40:72:4a:2c:95:22:4b:ef:a8:58:97:
                    f7:74:6f:ec:06:d4:34:d4:5c:db:fa:54:5b:f7:5f:
                    e6:29:a2:fd:2b:2f:08:0e:83:41:c5:90:de:f9:1f:
                    0c:15:43:38:31:04:91:ea:c3:82:48:32:6d:cd:d6:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DD:8C:BC:FB:37:AA:43:82:4E:89:02:C7:7A:F6:11:2F:9D:F1:C5
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e302e302f32342d3234203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:ea:9a:ff:46:bf:25:5d:6c:12:f4:48:d0:d5:ef:2d:5b:b6:
         29:be:df:ed:6b:32:f3:61:05:ae:ec:06:08:ac:71:9f:b8:52:
         a4:85:57:1e:7d:bf:a1:59:6d:93:f1:ee:ca:a2:3c:0a:c3:00:
         5f:d5:b8:06:d3:36:21:fa:d4:01:cd:42:b8:08:ee:fb:bc:94:
         2b:8b:be:b8:08:17:77:06:b2:bc:6e:59:e2:7c:c8:1e:67:18:
         27:ca:a4:ea:55:3c:ff:5c:a3:ea:76:22:dd:48:cf:90:4d:b5:
         53:9a:c9:19:79:4f:92:c6:21:4b:76:dd:43:b9:37:bc:fd:99:
         d7:be:3c:dc:ba:36:a3:a8:9b:ea:01:38:55:50:e9:cd:89:03:
         91:bd:f5:79:9f:16:f4:47:74:cf:b3:ea:b3:bc:ea:dc:cb:64:
         08:f2:3e:1e:bf:6c:b4:69:a9:c7:31:68:da:91:df:8e:6f:8d:
         25:ec:ab:d1:3f:bc:3a:e2:1d:a5:b0:9d:89:52:ce:c1:44:53:
         8c:4a:50:c3:42:cd:01:43:4c:13:76:e2:97:10:03:f1:ce:3d:
         e0:d1:88:4a:a0:7e:c9:99:d8:4a:f1:6f:a2:b9:30:13:6c:b4:
         f9:f0:de:9e:92:11:78:da:b1:a6:a6:75:f2:54:32:50:16:15:
         5a:71:36:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:59 2025 by rpki-client on console.sobornost.net