Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131322e302f32322d3232203d3e20323731363537.roa
File:                     34352e3232352e3131322e302f32322d3232203d3e20323731363537.roa (raw, json)
Hash identifier:          L4K8MASRL2tmJzfi+7Lf6ycvlhitXjBy6mqdiKUQnHA=
Subject key identifier:   EB:22:24:06:95:FB:48:1F:45:61:F8:D8:22:A5:51:67:AA:23:51:CF
Certificate issuer:       /CN=2114B3B965382FA7393E772A6837B5B8D7173834
Certificate serial:       582F8F6293DC39DEF8B255053D33B5FC2E6AC017
Authority key identifier: 21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131322e302f32322d3232203d3e20323731363537.roa
Signing time:             Tue 22 Apr 2025 14:38:50 +0000
ROA not before:           Tue 22 Apr 2025 14:33:50 +0000
ROA not after:            Tue 21 Apr 2026 14:38:50 +0000
asID:                     271657
IP address blocks:        45.225.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl
                          rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2f:8f:62:93:dc:39:de:f8:b2:55:05:3d:33:b5:fc:2e:6a:c0:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2114B3B965382FA7393E772A6837B5B8D7173834
        Validity
            Not Before: Apr 22 14:33:50 2025 GMT
            Not After : Apr 21 14:38:50 2026 GMT
        Subject: CN=EB22240695FB481F4561F8D822A55167AA2351CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:69:b5:df:ba:43:16:66:6d:0d:a4:20:83:
                    72:ac:4c:52:e5:21:99:28:1a:0b:1f:a8:83:45:fd:
                    0e:8b:35:01:6c:f8:64:03:28:21:3b:c0:cd:a7:98:
                    6e:94:64:b9:64:86:6b:df:82:f8:2a:53:35:7d:fd:
                    8e:03:1a:58:04:98:c0:f8:c2:27:05:e9:d1:1d:c2:
                    e5:b9:4e:77:90:5f:51:1d:c5:6d:80:10:b5:c4:98:
                    f3:4a:dc:c1:57:d4:97:60:2c:d5:12:63:e8:93:60:
                    cb:85:bf:c4:8d:13:87:f4:0c:a5:65:eb:22:2d:a1:
                    15:e3:c8:50:95:6f:85:55:0f:66:ba:60:fb:53:f3:
                    16:06:8a:15:03:ed:5d:62:8f:2d:73:9b:21:9e:1e:
                    32:a4:4b:d3:1a:c1:91:dc:83:e9:3a:42:0c:0b:16:
                    e7:8b:c1:d1:55:56:d1:72:fb:22:18:8d:ba:4d:6a:
                    33:34:31:0b:fa:bd:4b:74:54:01:0c:74:5c:4f:fd:
                    ee:c8:11:33:e0:c9:5b:5a:1a:84:e2:39:87:21:e7:
                    62:2b:95:09:3a:df:fd:53:4b:14:e1:31:35:3c:c5:
                    ce:e5:12:b2:a2:0a:1f:ac:d9:e4:78:9a:c5:35:5a:
                    06:0d:b1:5c:95:78:73:3b:98:35:06:e7:23:bf:e6:
                    8b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:22:24:06:95:FB:48:1F:45:61:F8:D8:22:A5:51:67:AA:23:51:CF
            X509v3 Authority Key Identifier:
                keyid:21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131322e302f32322d3232203d3e20323731363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:23:80:e9:e0:9a:d1:d2:2b:58:58:3f:e2:61:eb:67:50:37:
         72:62:2a:b5:11:7d:93:b1:70:da:87:3c:31:05:c8:9f:56:15:
         e4:7c:c0:3b:ec:1f:68:40:78:00:dc:44:1e:9d:58:2f:48:50:
         25:21:4e:4a:7e:19:be:da:95:c9:82:80:70:10:a4:aa:ea:3d:
         27:9a:58:f0:09:9b:74:44:c9:7b:5a:94:af:f8:38:27:01:84:
         15:6f:64:bb:b1:dd:b0:9e:c9:30:5b:93:cd:c6:8c:99:17:13:
         c1:71:92:90:f4:4a:4b:77:4b:70:bc:10:67:8c:20:44:95:09:
         9c:3e:b3:e8:3b:6e:8c:af:58:11:f6:3c:67:a0:fd:2e:62:b2:
         96:fe:4b:dd:e9:70:af:49:d3:97:fa:1b:b2:6e:26:15:67:ec:
         0d:89:57:e5:04:0f:6d:f8:9b:fc:4f:f9:88:28:bf:b9:d8:ae:
         fb:82:a1:8f:9d:5c:40:2f:c6:05:2f:59:be:c7:ee:d1:aa:ba:
         0f:11:5d:fd:db:a2:d9:34:29:04:ef:16:f7:ed:3d:60:d8:05:
         ab:c3:1e:a8:1d:c5:2f:2b:f9:42:d0:f1:20:35:af:13:f2:df:
         be:89:2a:5e:18:29:f9:7d:f8:12:e4:6c:44:61:57:d5:6f:b8:
         2e:75:db:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:08 2025 by rpki-client on console.sobornost.net