Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/34352e3138382e3131362e302f32322d3234203d3e20323639353231.roa
File:                     34352e3138382e3131362e302f32322d3234203d3e20323639353231.roa (raw, json)
Hash identifier:          bTJuEpKIuD1e4gs6oIK9cB0is95QImDXYJ2HWozdnyg=
Subject key identifier:   A5:3B:4A:5D:84:C4:14:9F:6B:62:05:8D:1C:FA:34:D5:53:35:38:B2
Certificate issuer:       /CN=896EBA0532E8601F8056D3EFCFA7787B3A582833
Certificate serial:       021CFD9182E0B3949B247AB68C5E078A18CD7357
Authority key identifier: 89:6E:BA:05:32:E8:60:1F:80:56:D3:EF:CF:A7:78:7B:3A:58:28:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896EBA0532E8601F8056D3EFCFA7787B3A582833.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/34352e3138382e3131362e302f32322d3234203d3e20323639353231.roa
Signing time:             Mon 06 Jan 2025 14:50:30 +0000
ROA not before:           Mon 06 Jan 2025 14:45:30 +0000
ROA not after:            Mon 05 Jan 2026 14:50:30 +0000
asID:                     269521
IP address blocks:        45.188.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/896EBA0532E8601F8056D3EFCFA7787B3A582833.crl
                          rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/896EBA0532E8601F8056D3EFCFA7787B3A582833.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896EBA0532E8601F8056D3EFCFA7787B3A582833.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1c:fd:91:82:e0:b3:94:9b:24:7a:b6:8c:5e:07:8a:18:cd:73:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896EBA0532E8601F8056D3EFCFA7787B3A582833
        Validity
            Not Before: Jan  6 14:45:30 2025 GMT
            Not After : Jan  5 14:50:30 2026 GMT
        Subject: CN=A53B4A5D84C4149F6B62058D1CFA34D5533538B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:d1:f5:ee:53:16:f7:a9:68:a0:1f:2a:77:
                    8f:ea:e5:26:fd:2c:fe:dd:a4:d2:f2:c5:5a:df:1a:
                    97:2c:93:ae:59:5e:aa:57:59:be:c0:73:06:f1:d6:
                    1e:be:a6:a2:86:7e:27:6c:53:a4:1e:fa:a9:2e:ed:
                    3b:ec:82:6e:38:ff:f7:18:5a:82:0c:8d:a9:7c:4d:
                    36:08:89:29:0f:66:a2:ab:fc:71:01:db:ed:fc:a8:
                    dc:28:2d:62:37:00:bf:7d:d3:cb:2c:d2:2d:e4:02:
                    cf:84:62:d8:63:b8:4f:30:69:c2:b0:51:78:47:a1:
                    79:8f:ba:9c:30:cd:24:79:92:56:5d:dd:3b:e4:db:
                    88:e9:97:c4:cc:3f:c5:ab:63:00:cb:27:dc:09:d8:
                    36:3d:be:87:7f:bd:bf:14:e3:b6:ab:12:ce:ab:52:
                    8c:cc:80:eb:b6:72:4e:5e:f6:b2:c9:06:03:d3:a4:
                    c7:8d:83:09:ec:9a:f8:c2:90:20:7c:89:2b:5d:65:
                    3c:af:16:a2:a8:e3:9a:fc:49:9d:bb:68:f4:d9:93:
                    a4:1e:25:ad:a2:e3:e8:38:3d:0f:b1:78:42:7e:00:
                    7f:17:46:3f:bc:97:af:fc:b2:62:d7:bb:52:a0:db:
                    e8:25:91:5e:03:db:11:09:4b:dc:95:66:f5:f7:b7:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3B:4A:5D:84:C4:14:9F:6B:62:05:8D:1C:FA:34:D5:53:35:38:B2
            X509v3 Authority Key Identifier:
                keyid:89:6E:BA:05:32:E8:60:1F:80:56:D3:EF:CF:A7:78:7B:3A:58:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/896EBA0532E8601F8056D3EFCFA7787B3A582833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/896EBA0532E8601F8056D3EFCFA7787B3A582833.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/34352e3138382e3131362e302f32322d3234203d3e20323639353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:18:ea:e0:42:58:27:f0:0a:cc:07:52:48:88:3b:66:8b:bd:
         7c:5f:f6:3f:51:37:ff:4e:d7:a0:5a:14:8d:8e:52:0a:3f:36:
         5a:73:2b:76:a2:ef:c2:d2:5d:26:ff:24:c5:76:ef:90:1a:a5:
         1a:b5:08:af:66:66:85:58:83:35:98:8b:48:31:e3:e0:58:ed:
         9b:b3:f0:cc:da:2d:1e:37:da:65:3b:e4:c3:c3:28:a0:67:6f:
         18:64:89:e2:f3:f2:76:24:6d:b3:4d:85:bb:a3:b6:04:d0:2c:
         b1:58:a4:f0:38:5d:5c:7e:94:a9:27:75:98:c2:87:c9:4a:99:
         68:c1:22:b8:90:2d:f2:48:e8:e9:bd:b8:13:94:e2:11:7c:3e:
         5d:bd:a0:75:69:1f:e5:3c:6d:e8:b2:82:82:d2:6d:df:e2:bd:
         b2:95:a5:e9:24:ab:a5:26:68:84:93:40:b3:b1:30:93:d6:24:
         7f:e5:a3:ec:cd:68:4f:d9:72:cc:c3:1c:6e:d5:b0:07:27:d0:
         ef:fb:57:12:c3:0c:58:6a:f9:5c:f1:96:37:92:a6:42:78:91:
         78:2f:d4:1d:97:b5:00:10:f9:51:57:a1:73:6e:2f:fb:51:88:
         f3:0b:d1:94:a4:5a:f0:49:bb:75:16:5a:3d:2f:e1:12:10:f9:
         ca:76:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:52 2025 by rpki-client on console.sobornost.net