Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/3230302e32362e3234382e302f32322d3332203d3e20323730343433.roa
File:                     3230302e32362e3234382e302f32322d3332203d3e20323730343433.roa (raw, json)
Hash identifier:          OMYedh++Y2KNxkEhennwEKHFd8dRgY+NlTAWEorwO58=
Subject key identifier:   54:21:67:2F:0F:88:FD:79:34:19:D9:10:D3:0B:14:9B:36:C7:11:F5
Certificate issuer:       /CN=EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4
Certificate serial:       575B0D7350A3B3A9CA47D850FB419D3FE767AEF7
Authority key identifier: EA:34:5B:A6:03:EC:E3:DC:78:BD:25:C6:14:FE:3B:B4:50:F4:C4:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/3230302e32362e3234382e302f32322d3332203d3e20323730343433.roa
Signing time:             Fri 11 Apr 2025 19:06:16 +0000
ROA not before:           Fri 11 Apr 2025 19:01:16 +0000
ROA not after:            Fri 10 Apr 2026 19:06:16 +0000
asID:                     270443
IP address blocks:        200.26.248.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.crl
                          rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5b:0d:73:50:a3:b3:a9:ca:47:d8:50:fb:41:9d:3f:e7:67:ae:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4
        Validity
            Not Before: Apr 11 19:01:16 2025 GMT
            Not After : Apr 10 19:06:16 2026 GMT
        Subject: CN=5421672F0F88FD793419D910D30B149B36C711F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:4c:46:25:28:f1:16:d7:00:0d:af:06:ac:
                    19:a1:e9:aa:ee:90:94:2e:f8:06:84:c6:68:49:f5:
                    34:fd:91:13:fc:35:1e:54:67:bf:91:b1:80:83:39:
                    43:b1:e0:b8:91:3f:13:ef:fb:d3:ef:bc:58:28:98:
                    f3:d1:bd:96:2e:6e:58:a9:a4:45:14:10:07:6e:b9:
                    a5:77:db:7c:00:30:8a:f2:ec:54:25:ce:01:3a:fd:
                    97:66:b3:00:02:4c:9b:9f:c1:c0:f0:d9:98:37:83:
                    25:e7:a0:48:a5:b7:22:af:c2:a2:4d:c9:0e:26:e3:
                    c7:90:94:d0:e1:2a:54:aa:0e:74:55:9b:97:26:1d:
                    19:af:2c:4d:1a:9a:31:8d:09:77:63:c0:99:93:4f:
                    80:e6:dd:9c:6e:01:6e:43:38:92:5e:8b:57:02:71:
                    25:e3:a9:2d:47:26:11:77:5b:05:df:bd:ea:73:34:
                    59:93:2f:92:31:96:cd:a4:49:0e:c1:9f:82:2a:20:
                    f1:7d:9e:26:40:23:80:91:92:c7:9b:b0:94:ba:40:
                    17:a1:11:b7:26:d8:d6:d9:f1:8c:18:67:21:ba:68:
                    8a:81:ff:bb:27:2c:0c:ff:75:d9:e8:5e:c7:56:ce:
                    0d:78:63:35:59:cc:f7:73:ba:94:64:2b:46:f2:96:
                    30:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:21:67:2F:0F:88:FD:79:34:19:D9:10:D3:0B:14:9B:36:C7:11:F5
            X509v3 Authority Key Identifier:
                keyid:EA:34:5B:A6:03:EC:E3:DC:78:BD:25:C6:14:FE:3B:B4:50:F4:C4:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/3230302e32362e3234382e302f32322d3332203d3e20323730343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:bd:d3:4f:01:b3:69:8a:b0:1d:e0:ed:ff:47:c1:0c:21:62:
         a2:42:53:24:d3:35:02:55:f5:6c:6a:93:87:f2:58:bd:47:21:
         0c:52:36:88:da:bd:01:a7:56:e4:46:fa:98:d3:9c:af:ea:32:
         b8:5f:b7:b3:5a:53:a0:6a:13:4b:a1:c9:de:c9:a5:f2:cb:97:
         fb:88:29:02:db:df:0a:f3:2d:fc:1b:41:8f:7b:c6:6c:f9:5c:
         ee:8f:3c:59:76:6b:80:81:bf:61:db:ad:23:a6:f0:e9:3e:ac:
         a5:37:03:7c:56:92:0f:ce:d5:80:9c:20:7d:60:84:1f:92:b7:
         2e:56:17:82:c8:3d:d9:c5:c7:bd:44:bf:be:b7:26:a4:ac:91:
         f0:9c:b5:27:e6:b2:ee:a6:03:8f:73:10:aa:b4:90:2e:19:59:
         dc:ed:e7:d9:a9:05:21:0f:8e:c0:c4:7e:67:b1:74:b4:b8:f2:
         d1:31:eb:7b:44:ba:3a:de:5a:04:9f:ab:08:d5:f2:2c:60:f8:
         6c:26:69:da:48:36:5c:90:9d:4e:71:c8:13:e9:28:32:02:e1:
         7e:d7:96:1e:3c:ab:b5:3a:ee:16:70:b1:9d:5a:e4:3f:7d:e9:
         bb:57:2a:2c:ab:63:56:00:3e:b5:19:3b:bf:f5:eb:1e:d8:df:
         0a:a2:76:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:37 2025 by rpki-client on console.sobornost.net