Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/34352e3136322e3231362e302f32332d3234203d3e20323638353238.roa
File:                     34352e3136322e3231362e302f32332d3234203d3e20323638353238.roa (raw, json)
Hash identifier:          iA+ldL/fGyDGB/XdXsXTUs22s5Gfxyq23UOMWKTack8=
Subject key identifier:   FB:07:F8:B9:4D:46:3B:CC:A3:84:0F:C7:5D:D8:DC:A2:E8:92:08:91
Certificate issuer:       /CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
Certificate serial:       6827EF5B61DD35F11FA5E6A68F7A97C16DA68C29
Authority key identifier: 8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/34352e3136322e3231362e302f32332d3234203d3e20323638353238.roa
Signing time:             Wed 23 Apr 2025 14:52:22 +0000
ROA not before:           Wed 23 Apr 2025 14:47:22 +0000
ROA not after:            Wed 22 Apr 2026 14:52:22 +0000
asID:                     268528
IP address blocks:        45.162.216.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.crl
                          rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 23:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:27:ef:5b:61:dd:35:f1:1f:a5:e6:a6:8f:7a:97:c1:6d:a6:8c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
        Validity
            Not Before: Apr 23 14:47:22 2025 GMT
            Not After : Apr 22 14:52:22 2026 GMT
        Subject: CN=FB07F8B94D463BCCA3840FC75DD8DCA2E8920891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:63:cb:db:39:60:b4:94:99:a2:43:a4:1c:
                    e8:fe:38:f7:24:20:76:af:71:a9:35:3a:b6:c2:07:
                    44:5e:08:4a:62:89:56:32:39:f6:36:a9:c9:af:bf:
                    f2:f4:45:4f:65:71:85:5e:81:e6:ad:a6:9c:9c:dd:
                    9b:1c:33:28:9c:4a:9e:9c:da:fb:bd:af:85:28:97:
                    53:92:a6:f0:0a:2e:d3:7c:f1:be:a3:37:0e:53:97:
                    78:fd:0d:c6:5c:e2:16:7d:b1:65:aa:59:be:bb:00:
                    ec:7d:42:67:fe:81:0c:ee:42:15:a7:43:b7:7c:79:
                    33:a8:2d:42:8b:c5:70:90:5b:0a:f9:10:7f:ef:f2:
                    2f:b8:fa:21:19:59:46:0b:a1:da:41:43:8c:c4:ca:
                    e1:8f:fd:14:37:43:ba:ca:37:1c:cf:a2:26:56:42:
                    c7:59:55:b0:fc:b7:12:21:b7:bc:c8:1d:f0:25:df:
                    df:ef:d5:a1:d2:a7:d7:59:24:e1:e6:d5:06:49:64:
                    ac:4c:5d:80:43:e1:78:5d:61:e1:f4:bc:4b:b1:5a:
                    fa:5d:0f:72:f2:57:c6:56:f2:ef:7d:c6:ee:16:b0:
                    14:85:ee:bb:f7:c9:16:d5:f5:52:e9:ef:11:46:21:
                    cc:e6:cc:7a:b6:e9:03:5d:28:8b:08:6c:f6:3f:77:
                    20:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:07:F8:B9:4D:46:3B:CC:A3:84:0F:C7:5D:D8:DC:A2:E8:92:08:91
            X509v3 Authority Key Identifier:
                keyid:8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/34352e3136322e3231362e302f32332d3234203d3e20323638353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:77:ca:3d:df:03:5b:06:c3:e6:e6:d3:a8:16:3f:c7:e7:f4:
         65:17:30:2d:58:c4:2d:b3:0e:99:4f:00:a4:a2:13:14:a8:f4:
         44:fd:e6:5b:05:fd:c1:dc:82:f4:ed:90:12:62:76:44:b7:d3:
         4b:45:d3:ca:b9:13:8e:07:01:61:b3:0a:32:e2:cc:e1:5e:3a:
         ed:d4:e8:3a:f6:18:53:03:69:ee:d6:80:40:f3:97:c3:64:4b:
         62:eb:ea:bf:d4:ed:fb:09:3c:79:5b:3f:50:5f:90:a1:64:cf:
         24:89:c9:8b:50:45:37:40:86:09:18:e2:7c:9c:73:cf:b9:84:
         21:35:e3:be:ad:b9:aa:30:40:71:b0:80:5f:1d:ae:48:e3:4d:
         49:c7:22:79:17:cf:ea:be:d2:d1:38:0f:ce:df:90:41:38:d0:
         04:a9:5d:3b:45:04:24:92:3a:9b:3c:9b:81:b9:ed:19:74:ee:
         3c:b3:26:8b:ad:b6:61:bc:f5:7d:7d:ad:1d:50:18:a8:f3:49:
         0b:79:a6:ea:af:eb:61:e4:11:7c:0b:88:7b:df:be:23:01:22:
         65:70:19:64:5d:61:39:a7:a0:97:30:02:77:34:a4:6a:48:98:
         51:31:0d:57:61:73:8d:90:52:e4:06:9c:e8:c4:3d:4b:a5:81:
         9c:b4:0e:65
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaCfvW2HdNfEfpeamj3qXwW2mjCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM5NDg5QjVGMTYyMzcwQjNDRDZBRTYxMUY4MjU2Nzg5
MUFBMkY3OTAeFw0yNTA0MjMxNDQ3MjJaFw0yNjA0MjIxNDUyMjJaMDMxMTAvBgNV
BAMTKEZCMDdGOEI5NEQ0NjNCQ0NBMzg0MEZDNzVERDhEQ0EyRTg5MjA4OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwmPL2zlgtJSZokOkHOj+OPck
IHavcak1OrbCB0ReCEpiiVYyOfY2qcmvv/L0RU9lcYVegeatppyc3ZscMyicSp6c
2vu9r4Uol1OSpvAKLtN88b6jNw5Tl3j9DcZc4hZ9sWWqWb67AOx9Qmf+gQzuQhWn
Q7d8eTOoLUKLxXCQWwr5EH/v8i+4+iEZWUYLodpBQ4zEyuGP/RQ3Q7rKNxzPoiZW
QsdZVbD8txIht7zIHfAl39/v1aHSp9dZJOHm1QZJZKxMXYBD4XhdYeH0vEuxWvpd
D3LyV8ZW8u99xu4WsBSF7rv3yRbV9VLp7xFGIczmzHq26QNdKIsIbPY/dyBrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+wf4uU1GO8yjhA/HXdjcouiSCJEwHwYDVR0j
BBgwFoAUjJSJtfFiNws81q5hH4JWeJGqL3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndlelBxQ3RwRlpFN1ZtcVJTeVBRRlBzTHc1Y1NKMm52UGlGMjlSQ0w0
OXYvMC84Qzk0ODlCNUYxNjIzNzBCM0NENkFFNjExRjgyNTY3ODkxQUEyRjc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDOTQ4OUI1RjE2MjM3MEIz
Q0Q2QUU2MTFGODI1Njc4OTFBQTJGNzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3ZXpQcUN0cEZaRTdWbXFSU3lQUUZQc0x3NWNTSjJudlBpRjI5UkNMNDl2LzAv
MzQzNTJlMzEzNjMyMmUzMjMxMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNTMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtotgwDQYJKoZIhvcNAQELBQADggEBABV3yj3f
A1sGw+bm06gWP8fn9GUXMC1YxC2zDplPAKSiExSo9ET95lsF/cHcgvTtkBJidkS3
00tF08q5E44HAWGzCjLizOFeOu3U6Dr2GFMDae7WgEDzl8NkS2Lr6r/U7fsJPHlb
P1BfkKFkzySJyYtQRTdAhgkY4nycc8+5hCE1476tuaowQHGwgF8drkjjTUnHInkX
z+q+0tE4D87fkEE40ASpXTtFBCSSOps8m4G57Rl07jyzJouttmG89X19rR1QGKjz
SQt5puqv62HkEXwLiHvfviMBImVwGWRdYTmnoJcwAnc0pGpImFExDVdhc42QUuQG
nOjEPUulgZy0DmU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:08 2025 by rpki-client on console.sobornost.net