Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa
File:                     34352e36352e3133302e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier:          Y5K1r5CF+tQf/1gLx3G7GXhfmEu4UGA0sI9DzjM2ZSw=
Subject key identifier:   B8:84:8D:7E:F5:07:7F:6A:AC:94:81:D2:6E:B7:79:8C:42:6F:14:23
Certificate issuer:       /CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
Certificate serial:       70A2E844896757A4029343A03F19E54012FEA70D
Authority key identifier: 26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa
Signing time:             Mon 31 Mar 2025 18:49:50 +0000
ROA not before:           Mon 31 Mar 2025 18:44:50 +0000
ROA not after:            Mon 30 Mar 2026 18:49:50 +0000
asID:                     266528
IP address blocks:        45.65.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.crl
                          rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a2:e8:44:89:67:57:a4:02:93:43:a0:3f:19:e5:40:12:fe:a7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
        Validity
            Not Before: Mar 31 18:44:50 2025 GMT
            Not After : Mar 30 18:49:50 2026 GMT
        Subject: CN=B8848D7EF5077F6AAC9481D26EB7798C426F1423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:2d:0a:1d:5d:04:5e:88:a6:ba:4e:aa:a9:
                    ff:f4:0c:03:fd:8d:1d:9b:67:ed:b6:c8:18:dd:6f:
                    e0:47:37:0b:04:63:12:6c:02:d7:47:97:dd:55:d6:
                    89:a3:0e:a5:74:22:da:d5:e1:46:ab:2e:f8:9d:0c:
                    b0:e8:80:05:2f:1c:ff:ca:10:b8:9f:16:19:2e:7b:
                    ba:8d:c8:cf:c7:86:e7:cc:8c:cb:19:30:c6:ba:1e:
                    17:37:c8:ec:a0:54:7a:55:38:f6:1a:5b:85:da:92:
                    ee:a2:ea:71:0c:6e:9c:12:25:eb:50:37:3a:41:04:
                    df:a2:d5:73:d8:a1:dc:8f:17:1c:b8:a7:1b:46:c2:
                    20:15:c7:1b:86:39:63:e4:90:c5:32:90:ba:6f:45:
                    fa:2d:ee:49:f8:ca:b4:1a:22:91:d5:7c:e9:91:b2:
                    c8:2b:e1:d6:85:cb:4e:ec:65:ab:cd:83:d7:13:1a:
                    29:53:4a:0b:7c:be:6e:2f:52:a8:2e:b5:5b:21:c4:
                    40:d8:66:d1:f1:8a:ee:25:d4:eb:ea:65:07:91:a1:
                    2c:a4:10:8b:24:5e:d9:44:5d:01:c7:49:d1:88:61:
                    ce:c0:5f:37:44:8a:58:0c:8f:3a:6b:c6:a8:41:d6:
                    3a:9e:0b:7b:16:c6:f4:34:63:ab:fc:0e:00:3f:33:
                    2a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:8D:7E:F5:07:7F:6A:AC:94:81:D2:6E:B7:79:8C:42:6F:14:23
            X509v3 Authority Key Identifier:
                keyid:26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:4a:04:e7:38:93:f9:5b:93:e9:11:45:19:6b:ae:7d:f5:7a:
         f9:2e:87:52:a7:0e:f2:78:e1:12:63:6e:1e:d1:fb:02:b8:49:
         31:3d:63:8f:18:df:8f:fe:22:9b:67:93:95:1c:9a:1e:b5:5d:
         7d:e9:9f:62:d2:92:76:64:d5:62:7f:67:8f:e9:4a:af:d4:06:
         f1:0c:4d:a7:00:17:66:67:03:ee:22:e0:f9:76:ee:fc:30:ae:
         d5:b4:a1:ab:24:da:9e:e9:f6:72:c6:6a:3f:41:7c:c0:eb:70:
         c1:2a:70:91:e8:c9:ee:d6:40:e6:7d:bf:2a:cb:6d:a1:9a:c3:
         b9:d4:d7:90:41:bb:e5:cb:18:c3:b5:7d:c5:29:5e:97:d9:3f:
         d5:42:2b:24:7a:9a:6b:e9:e3:7e:48:d6:39:3f:7e:14:28:ab:
         bd:c9:7f:d2:35:7f:a8:0e:92:f2:0b:ef:ed:19:a3:6d:2a:e1:
         57:d9:ad:ee:c4:f5:d2:5c:ba:0d:64:74:c5:0e:61:21:ac:c7:
         91:96:bb:d6:2f:da:17:bb:fe:f7:cb:ab:75:6e:38:fd:ed:2c:
         43:fc:62:79:6c:f7:e2:d6:ed:54:c4:ec:4a:5e:08:94:d1:54:
         95:c1:63:0c:ef:3e:64:3b:9c:94:92:73:51:e7:a8:da:1a:48:
         01:58:d0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:27 2025 by rpki-client on console.sobornost.net