Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131342e302f32332d3233203d3e20323731363537.roa
File:                     34352e3232352e3131342e302f32332d3233203d3e20323731363537.roa (raw, json)
Hash identifier:          wfLh4GCuxMujYLzoFw6keFFMCF1W9FtsovtArrXh0Co=
Subject key identifier:   F5:57:98:1F:10:7F:CE:3C:47:27:8E:1C:1A:0D:DE:90:C3:EC:CC:7D
Certificate issuer:       /CN=2114B3B965382FA7393E772A6837B5B8D7173834
Certificate serial:       48E23643440051BDD2624F85A8A34C5D0E42851C
Authority key identifier: 21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131342e302f32332d3233203d3e20323731363537.roa
Signing time:             Tue 22 Apr 2025 14:38:50 +0000
ROA not before:           Tue 22 Apr 2025 14:33:50 +0000
ROA not after:            Tue 21 Apr 2026 14:38:50 +0000
asID:                     271657
IP address blocks:        45.225.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl
                          rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e2:36:43:44:00:51:bd:d2:62:4f:85:a8:a3:4c:5d:0e:42:85:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2114B3B965382FA7393E772A6837B5B8D7173834
        Validity
            Not Before: Apr 22 14:33:50 2025 GMT
            Not After : Apr 21 14:38:50 2026 GMT
        Subject: CN=F557981F107FCE3C47278E1C1A0DDE90C3ECCC7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:a5:bb:6f:34:aa:93:b2:be:8a:b8:2f:1a:
                    bb:21:b5:11:8f:18:3a:77:db:51:d9:63:09:80:c6:
                    d7:6c:50:58:16:05:d3:11:28:73:52:96:da:5b:d5:
                    9f:d8:54:28:a2:5e:e3:1a:f9:17:ea:86:da:36:7f:
                    93:ad:05:91:4a:8e:71:5d:bf:d9:fb:f6:17:3c:de:
                    fe:00:8b:65:eb:7b:fa:ea:b7:29:f8:8b:46:db:92:
                    c9:da:d3:67:df:5c:50:6a:ae:4d:28:ed:51:81:65:
                    28:56:e9:56:ad:39:8b:ea:58:57:5a:25:72:e0:cc:
                    63:be:01:23:88:e6:31:e3:d3:fd:48:96:ed:30:a1:
                    2a:1a:eb:1d:bd:35:b1:9d:94:df:5c:00:d7:27:f3:
                    e7:79:49:2f:fe:9c:89:7f:8f:b4:cb:37:dc:10:fb:
                    a4:5f:2a:fe:34:d1:33:14:1c:09:2c:67:c3:f8:ac:
                    a6:9a:b4:37:ae:bc:25:a3:c1:b8:cb:83:fd:43:85:
                    9c:4b:58:00:8e:db:c5:4a:9e:e7:fb:12:d4:ee:4f:
                    d6:6d:83:89:10:3e:03:54:32:23:a2:42:68:04:98:
                    b5:fe:70:61:3d:a9:92:a5:21:18:de:f0:07:4b:91:
                    88:c6:fd:7b:9f:23:cf:75:b9:87:31:be:5a:42:0f:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:57:98:1F:10:7F:CE:3C:47:27:8E:1C:1A:0D:DE:90:C3:EC:CC:7D
            X509v3 Authority Key Identifier:
                keyid:21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131342e302f32332d3233203d3e20323731363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:3b:30:21:ca:22:ca:2c:5d:ea:6f:36:9a:1f:86:23:64:4a:
         11:37:85:62:6c:6a:11:5d:e5:6e:33:29:11:5c:2e:86:52:5c:
         94:c4:90:60:d8:fe:53:e3:18:ae:59:0d:cc:56:bd:2d:ba:42:
         fd:84:29:35:7c:95:ef:d1:50:42:b2:40:02:f9:e6:9a:31:0d:
         6e:08:cf:26:7b:78:28:15:1d:12:8c:8e:51:2e:21:05:ff:64:
         56:d7:ff:04:72:72:38:5b:0f:d6:73:08:11:5e:90:c7:4d:dc:
         e6:6b:cc:82:2e:45:e2:f7:f3:54:4b:d1:dc:4a:9d:73:71:9c:
         f2:c3:4a:36:9a:a1:95:27:32:05:e9:2f:64:5f:6a:72:ba:60:
         1b:47:21:c6:d5:8f:4b:48:23:d8:c7:7c:b0:67:c4:ed:70:8c:
         00:20:35:d5:a2:f4:5b:19:2d:0e:01:0c:f0:36:b0:55:30:4d:
         46:ab:fc:32:7d:3e:da:ff:a4:2b:21:de:aa:e8:ea:92:9a:95:
         59:32:4f:70:d8:ac:bf:47:f0:ca:c5:e8:33:f5:2f:60:18:f5:
         98:12:05:b8:59:97:7f:29:0b:89:96:3e:0c:77:7e:73:aa:ff:
         77:2a:15:b7:20:de:ab:d5:b5:61:97:53:ba:b2:da:3d:ab:de:
         d8:9d:0c:08
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSOI2Q0QAUb3SYk+FqKNMXQ5ChRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExNEIzQjk2NTM4MkZBNzM5M0U3NzJBNjgzN0I1QjhE
NzE3MzgzNDAeFw0yNTA0MjIxNDMzNTBaFw0yNjA0MjExNDM4NTBaMDMxMTAvBgNV
BAMTKEY1NTc5ODFGMTA3RkNFM0M0NzI3OEUxQzFBMERERTkwQzNFQ0NDN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4B6W7bzSqk7K+irgvGrshtRGP
GDp321HZYwmAxtdsUFgWBdMRKHNSltpb1Z/YVCiiXuMa+Rfqhto2f5OtBZFKjnFd
v9n79hc83v4Ai2Xre/rqtyn4i0bbksna02ffXFBqrk0o7VGBZShW6VatOYvqWFda
JXLgzGO+ASOI5jHj0/1Ilu0woSoa6x29NbGdlN9cANcn8+d5SS/+nIl/j7TLN9wQ
+6RfKv400TMUHAksZ8P4rKaatDeuvCWjwbjLg/1DhZxLWACO28VKnuf7EtTuT9Zt
g4kQPgNUMiOiQmgEmLX+cGE9qZKlIRje8AdLkYjG/XufI891uYcxvlpCDy8pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9VeYHxB/zjxHJ44cGg3ekMPszH0wHwYDVR0j
BBgwFoAUIRSzuWU4L6c5PncqaDe1uNcXODQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZtZG04Q1pmbXhEcGNmZkpncWQzN1U1NlptZlhteGVOUzdXVENjV3g1
UUovMC8yMTE0QjNCOTY1MzgyRkE3MzkzRTc3MkE2ODM3QjVCOEQ3MTczODM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTRCM0I5NjUzODJGQTcz
OTNFNzcyQTY4MzdCNUI4RDcxNzM4MzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2bWRtOENaZm14RHBjZmZKZ3FkMzdVNTZabWZYbXhlTlM3V1RDY1d4NVFKLzAv
MzQzNTJlMzIzMjM1MmUzMTMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzNjM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt4XIwDQYJKoZIhvcNAQELBQADggEBAIs7MCHK
IsosXepvNpofhiNkShE3hWJsahFd5W4zKRFcLoZSXJTEkGDY/lPjGK5ZDcxWvS26
Qv2EKTV8le/RUEKyQAL55poxDW4IzyZ7eCgVHRKMjlEuIQX/ZFbX/wRycjhbD9Zz
CBFekMdN3OZrzIIuReL381RL0dxKnXNxnPLDSjaaoZUnMgXpL2RfanK6YBtHIcbV
j0tII9jHfLBnxO1wjAAgNdWi9FsZLQ4BDPA2sFUwTUar/DJ9Ptr/pCsh3qro6pKa
lVkyT3DYrL9H8MrF6DP1L2AY9ZgSBbhZl38pC4mWPgx3fnOq/3cqFbcg3qvVtWGX
U7qy2j2r3tidDAg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:19 2025 by rpki-client on console.sobornost.net