Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131352e302f32342d3234203d3e20323731363537.roa
File:                     34352e3232352e3131352e302f32342d3234203d3e20323731363537.roa (raw, json)
Hash identifier:          UWtLfp68Rzi6LML2YroqQNe9Ib2jl6xz7IuH2d8Pimw=
Subject key identifier:   C5:4B:F8:4C:5F:15:D8:1A:21:3F:E3:E8:C2:26:AB:AA:26:57:67:78
Certificate issuer:       /CN=2114B3B965382FA7393E772A6837B5B8D7173834
Certificate serial:       77663275999A0D83941347558E8908282FD78094
Authority key identifier: 21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131352e302f32342d3234203d3e20323731363537.roa
Signing time:             Tue 22 Apr 2025 14:38:51 +0000
ROA not before:           Tue 22 Apr 2025 14:33:51 +0000
ROA not after:            Tue 21 Apr 2026 14:38:51 +0000
asID:                     271657
IP address blocks:        45.225.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl
                          rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:66:32:75:99:9a:0d:83:94:13:47:55:8e:89:08:28:2f:d7:80:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2114B3B965382FA7393E772A6837B5B8D7173834
        Validity
            Not Before: Apr 22 14:33:51 2025 GMT
            Not After : Apr 21 14:38:51 2026 GMT
        Subject: CN=C54BF84C5F15D81A213FE3E8C226ABAA26576778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:df:89:be:ff:29:25:0b:eb:a1:f0:17:0f:
                    2a:0f:21:3e:a5:06:a8:85:4f:f4:7a:b7:5b:7d:73:
                    ed:82:1d:81:d6:fc:8e:74:d1:12:15:55:5c:e5:45:
                    d9:d9:e0:6f:2a:b2:36:f8:7d:b8:2a:bd:81:cb:bb:
                    fc:12:0e:65:e6:c5:d7:b1:21:ee:b7:13:4f:41:b4:
                    aa:ba:2b:fe:a9:d4:2e:84:c9:ff:e2:cf:6e:ea:31:
                    92:58:ad:6b:50:44:96:50:97:d8:80:b6:56:23:d2:
                    8c:e4:e4:d1:79:ac:e9:9c:4d:6f:da:da:04:97:53:
                    9d:3b:ca:36:25:bd:20:cb:8c:a7:40:f6:9f:10:99:
                    c2:93:a1:98:2c:6d:9f:8c:e7:a8:ff:b6:2c:d0:c0:
                    ed:dc:32:34:83:4d:f8:34:1c:b6:a3:db:31:06:da:
                    ae:7a:9c:1c:0d:85:1a:35:11:19:f5:24:04:d7:47:
                    ff:8d:78:a0:0d:42:4c:f2:59:7f:55:dc:fa:f7:d6:
                    3d:20:a8:b7:94:cc:f5:12:02:76:29:42:69:ee:6e:
                    66:82:af:88:74:f2:ff:ce:c8:77:bb:26:50:68:7d:
                    ba:3b:b8:12:37:67:90:8f:ca:f1:14:bd:da:52:84:
                    8a:77:bf:a1:ae:d0:79:6f:09:2e:af:6b:cb:ba:42:
                    ab:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4B:F8:4C:5F:15:D8:1A:21:3F:E3:E8:C2:26:AB:AA:26:57:67:78
            X509v3 Authority Key Identifier:
                keyid:21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131352e302f32342d3234203d3e20323731363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:e9:b3:55:75:e3:49:0f:7b:ce:f4:95:e3:08:fe:f0:bb:bc:
         f1:d4:a2:a3:e2:b7:95:d9:fd:81:ac:ee:30:aa:cd:91:c0:87:
         50:75:16:67:b4:67:40:45:6a:9a:15:6d:d4:a7:b5:33:be:1f:
         46:41:d0:9e:fd:1d:2e:28:d2:ba:f4:16:d6:2d:ba:81:97:fa:
         6d:90:6a:d6:d9:43:05:b7:68:b4:a8:a7:e7:03:c6:5e:08:82:
         0c:36:fa:90:2a:2d:06:08:96:f4:a5:96:5f:50:47:e6:91:26:
         26:f3:88:bd:b1:81:f7:a6:6b:12:68:56:06:da:60:86:9a:2f:
         20:04:ff:21:73:f4:b3:ca:80:80:1e:db:38:fc:60:bb:b0:21:
         20:0a:61:0c:43:55:22:4d:91:ad:09:72:a4:b9:ae:88:ea:e7:
         bb:9f:88:c5:64:8f:8f:8d:45:c6:d9:24:68:18:4b:7e:1c:01:
         38:69:a2:5d:78:c2:93:16:e8:df:48:2d:48:eb:48:d5:91:0b:
         47:fe:49:fa:e6:42:73:b0:d9:0a:a7:36:7f:77:86:db:88:c5:
         e9:3a:49:ba:45:55:c0:b7:5e:d4:1a:ec:d8:3a:b0:34:51:b0:
         23:68:0c:86:35:15:0e:bc:f0:ca:a2:5c:4f:1e:d1:61:88:15:
         99:6f:6d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:07 2025 by rpki-client on console.sobornost.net