Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138342e302f32342d3234203d3e20323638393034.roa
File:                     34352e3137352e3138342e302f32342d3234203d3e20323638393034.roa (raw, json)
Hash identifier:          Q/K8A5fQ/41nbRWRq/usIxM+PooOi2kSiiBn5IUAbUI=
Subject key identifier:   AC:40:90:61:46:7D:FF:9B:1B:AE:81:C0:F7:DB:A7:27:0D:68:3A:79
Certificate issuer:       /CN=51C7BA1E3942705B2F09644F9699345322A65D7B
Certificate serial:       35A3BFE45C8B2FA0FF2255F75CFE2578F2BE2A90
Authority key identifier: 51:C7:BA:1E:39:42:70:5B:2F:09:64:4F:96:99:34:53:22:A6:5D:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138342e302f32342d3234203d3e20323638393034.roa
Signing time:             Mon 14 Apr 2025 17:50:44 +0000
ROA not before:           Mon 14 Apr 2025 17:45:44 +0000
ROA not after:            Mon 13 Apr 2026 17:50:44 +0000
asID:                     268904
IP address blocks:        45.175.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.crl
                          rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a3:bf:e4:5c:8b:2f:a0:ff:22:55:f7:5c:fe:25:78:f2:be:2a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C7BA1E3942705B2F09644F9699345322A65D7B
        Validity
            Not Before: Apr 14 17:45:44 2025 GMT
            Not After : Apr 13 17:50:44 2026 GMT
        Subject: CN=AC409061467DFF9B1BAE81C0F7DBA7270D683A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:44:2d:88:4b:c7:f9:07:4b:a3:14:e6:1a:
                    33:78:17:4e:26:d4:09:a4:fa:41:2f:a6:a1:5d:9e:
                    1c:08:6f:d9:0e:10:12:1e:07:bd:77:d3:b8:73:1b:
                    c7:e0:15:fe:86:a2:53:eb:5a:a5:1c:7f:81:f3:33:
                    ea:89:b7:b6:71:54:ac:44:97:96:1d:7d:b3:b6:0f:
                    c2:a8:6b:02:96:2c:ff:65:eb:d5:73:6e:f0:b4:bf:
                    e0:d4:5a:60:8a:67:27:a7:71:52:87:7b:5a:6d:d8:
                    d7:1f:16:99:bd:4e:e6:87:73:73:82:75:c6:90:1d:
                    a4:f5:d6:b9:74:fd:ef:6d:14:46:8a:9b:26:4c:be:
                    ce:10:3d:9c:a0:eb:84:4c:34:2b:aa:93:fe:c4:33:
                    f3:77:54:0a:0a:45:48:fe:47:ec:a0:35:07:0b:16:
                    fd:87:7e:94:3d:96:6f:05:78:02:32:82:cf:52:d4:
                    71:0f:b0:c3:26:eb:8a:75:2b:2e:59:1d:a1:7b:cf:
                    8d:c3:b1:29:34:96:a6:3a:32:89:7a:f3:09:b7:e9:
                    b5:b1:b8:75:06:71:ad:09:39:4f:ea:e8:15:21:30:
                    ab:aa:da:85:d0:d3:0e:d1:bb:80:7b:c3:e7:bb:0c:
                    e4:a1:8f:14:ff:74:6a:c1:30:0d:9a:96:92:22:4c:
                    c8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:40:90:61:46:7D:FF:9B:1B:AE:81:C0:F7:DB:A7:27:0D:68:3A:79
            X509v3 Authority Key Identifier:
                keyid:51:C7:BA:1E:39:42:70:5B:2F:09:64:4F:96:99:34:53:22:A6:5D:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138342e302f32342d3234203d3e20323638393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:27:1e:95:68:6a:58:2c:a0:96:a5:7c:81:31:c9:2b:1b:36:
         a4:58:cd:b7:25:da:30:31:01:e5:58:42:35:f9:4e:80:8d:21:
         54:7c:4f:a6:e6:d1:a3:27:b0:88:ff:57:bf:f4:8c:5c:91:24:
         e1:6c:2e:c4:e7:66:03:e0:87:ef:09:63:8a:19:52:d3:21:8d:
         9b:d4:ec:60:55:83:3f:75:33:a6:46:05:66:a6:0f:86:8d:83:
         6b:c4:94:8a:40:60:6d:09:b5:b0:bb:d0:83:78:50:c3:ee:fe:
         1b:d8:cc:73:18:bb:40:23:cd:2c:53:0a:a5:48:f3:da:1a:f9:
         36:8f:0c:74:d7:a6:46:0c:ab:65:9f:bc:41:da:03:b9:fc:09:
         82:ad:9e:8a:94:30:c9:27:b2:8c:74:3b:39:38:d0:5e:b2:71:
         0d:9d:3f:27:da:d7:06:6f:54:85:d3:80:16:d4:87:d6:34:b3:
         fa:0d:59:71:90:07:87:0f:f2:be:48:3b:6b:6d:29:91:ef:b4:
         02:34:07:cb:aa:f4:d3:02:c4:76:38:76:14:d0:40:1d:7c:ea:
         44:d1:69:af:00:bc:06:a8:cc:7d:56:99:11:d0:9f:34:ec:cc:
         70:ef:35:be:26:8f:a4:34:7c:3f:4d:b8:ed:23:f8:fa:ca:3c:
         ba:e3:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:03 2025 by rpki-client on console.sobornost.net