Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e312e302f32342d3234203d3e20323639353032.roa
File:                     34352e3138362e312e302f32342d3234203d3e20323639353032.roa (raw, json)
Hash identifier:          UMdm9ZVfKB9dIrJPuWZhWTRsV08+Urf7pQFa7PcJ3VU=
Subject key identifier:   BC:8C:4A:2E:E3:5E:5E:A7:37:20:E5:37:0C:B6:9D:1E:65:86:69:37
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       08C1A5756AB3C451EE6960A8E4BF29DC88D51943
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e312e302f32342d3234203d3e20323639353032.roa
Signing time:             Sun 13 Apr 2025 00:09:43 +0000
ROA not before:           Sun 13 Apr 2025 00:04:43 +0000
ROA not after:            Sun 12 Apr 2026 00:09:43 +0000
asID:                     269502
IP address blocks:        45.186.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 14:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c1:a5:75:6a:b3:c4:51:ee:69:60:a8:e4:bf:29:dc:88:d5:19:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: Apr 13 00:04:43 2025 GMT
            Not After : Apr 12 00:09:43 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:4c:23:8a:c0:e3:ce:2e:38:54:f9:1c:6f:
                    12:14:40:de:72:0a:08:e2:2b:f1:3c:7e:d5:21:58:
                    0c:0e:f8:97:72:27:02:fb:10:aa:08:5c:61:b2:00:
                    d9:8d:04:40:a0:59:54:35:a9:ff:0d:37:00:fe:a4:
                    b2:ee:f3:56:f7:ec:b8:2f:b3:8c:15:59:9a:5c:69:
                    cc:b9:9d:31:09:10:b5:fb:f4:96:17:c6:eb:83:3f:
                    17:e9:24:0c:e8:ce:77:f5:47:f6:bc:2b:69:d8:2f:
                    c3:3b:25:00:ef:2d:1e:68:b8:7b:05:63:82:a1:e7:
                    d0:b3:b3:b5:c2:1a:85:73:12:b6:4a:00:df:3c:c1:
                    f0:ea:09:b3:c1:8f:bf:95:9a:cc:e9:be:7e:cf:d6:
                    b7:e9:02:70:bf:35:88:c4:af:80:18:b7:f1:de:99:
                    d8:04:57:a5:f1:e2:8b:e8:16:15:45:d0:11:ad:43:
                    b8:28:f7:b9:bb:83:21:c2:5f:aa:f2:8d:1d:14:f2:
                    f4:42:3f:fb:ba:00:0a:0e:90:82:84:1d:84:23:47:
                    80:d6:6f:1e:11:21:f8:79:e3:91:14:d8:49:0d:b4:
                    90:c3:4b:aa:a8:c8:b8:d6:3d:bd:32:f4:ea:87:f5:
                    e4:c4:c2:8d:e3:5e:0f:83:c3:f2:5a:72:a9:bf:f6:
                    df:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8C:4A:2E:E3:5E:5E:A7:37:20:E5:37:0C:B6:9D:1E:65:86:69:37
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e312e302f32342d3234203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:08:9c:bd:a3:56:e5:ad:d4:86:13:35:6f:ef:5b:e3:16:78:
         14:18:55:f7:b7:ac:38:db:10:91:d0:12:a5:21:e8:16:b3:d2:
         e0:8d:bc:55:6c:82:4d:ef:9b:dc:3e:84:0a:7b:44:2c:50:ce:
         32:eb:f5:b5:98:c0:c9:33:2d:9c:40:aa:a6:fe:af:84:58:a9:
         d6:27:5d:b8:67:8f:c4:90:92:27:52:29:a4:d0:f3:a2:ce:b8:
         a4:b9:e1:1b:d1:99:2d:54:4b:1e:83:73:60:a2:f3:89:3b:b9:
         5e:2f:d2:cb:27:d0:b3:ce:f7:93:1a:0c:de:e7:75:00:8f:a8:
         9f:39:ea:77:de:7b:1f:0d:dd:2a:a7:61:fe:28:fb:70:e3:3c:
         2d:82:88:89:4c:a5:ee:58:86:35:8d:30:4c:43:4c:82:0f:c8:
         bb:00:9b:1e:04:8b:ea:b5:15:3d:d4:d3:0d:66:43:e1:90:5a:
         41:a2:19:fe:3b:55:da:88:af:4b:86:c6:bd:01:3f:e7:c7:d0:
         f5:21:6e:ad:b9:5e:61:99:40:23:57:18:3b:70:d4:ec:7f:83:
         ad:26:57:fe:1e:ce:c4:a8:f2:30:a0:24:0d:43:cf:7b:10:48:
         00:25:79:48:e5:d5:60:36:ff:d4:d0:cb:54:e7:ec:bd:12:10:
         a3:75:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:59 2025 by rpki-client on console.sobornost.net