Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/34352e3136322e3231382e302f32342d3234203d3e20323638353238.roa
File:                     34352e3136322e3231382e302f32342d3234203d3e20323638353238.roa (raw, json)
Hash identifier:          B/FW6NB9mbW4dLGdEb/iRIbaB2Z4d1Aejq3uYgvPCeA=
Subject key identifier:   60:B4:E3:9B:20:32:81:59:27:5F:34:12:A8:00:E1:23:A1:53:F7:51
Certificate issuer:       /CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
Certificate serial:       54C3AD098CFF2F6F2D474A7B33CB8E39A7C0C906
Authority key identifier: 8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/34352e3136322e3231382e302f32342d3234203d3e20323638353238.roa
Signing time:             Wed 23 Apr 2025 14:52:38 +0000
ROA not before:           Wed 23 Apr 2025 14:47:38 +0000
ROA not after:            Wed 22 Apr 2026 14:52:38 +0000
asID:                     268528
IP address blocks:        45.162.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.crl
                          rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c3:ad:09:8c:ff:2f:6f:2d:47:4a:7b:33:cb:8e:39:a7:c0:c9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
        Validity
            Not Before: Apr 23 14:47:38 2025 GMT
            Not After : Apr 22 14:52:38 2026 GMT
        Subject: CN=60B4E39B20328159275F3412A800E123A153F751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e1:67:00:83:b7:1a:59:96:92:4b:d7:33:54:
                    3e:e4:30:be:25:b7:d2:53:e8:6f:66:cf:7f:77:e1:
                    aa:ec:e3:1b:47:c9:de:9b:66:74:a5:fa:0e:7a:16:
                    01:c2:8f:a1:9b:2d:d1:7f:79:78:f8:70:0b:53:91:
                    f1:7e:c8:39:ed:28:1a:fb:09:8d:2d:d0:ca:f7:b3:
                    ff:09:cf:6b:f2:eb:b0:43:f7:54:68:18:5a:b2:05:
                    e4:86:ff:a2:ce:16:33:96:3c:97:d6:17:83:c7:95:
                    42:7c:51:63:36:db:57:6e:80:b0:53:62:80:cd:fc:
                    82:a1:0b:3e:f5:a2:96:fe:be:06:97:9e:b4:00:3d:
                    a2:10:6b:a9:0c:85:5b:ed:08:aa:ca:ae:8f:a5:06:
                    c9:e1:6b:ae:0d:b1:62:54:2c:7c:f9:28:b9:34:f3:
                    de:23:d6:d3:b0:e4:69:7e:3c:66:66:62:43:28:3f:
                    85:b5:d5:62:68:7e:0a:2d:cd:ae:f8:b1:4c:25:be:
                    4a:64:f1:58:5b:6c:81:9b:b9:9a:59:a4:10:8e:af:
                    ed:a9:7f:f5:3c:9f:61:c9:07:46:25:08:1c:e0:ba:
                    42:e2:d8:8e:fc:ff:75:07:14:5d:bd:12:28:57:e7:
                    93:52:79:7f:bd:93:98:2a:d6:65:d5:65:98:8e:4a:
                    49:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B4:E3:9B:20:32:81:59:27:5F:34:12:A8:00:E1:23:A1:53:F7:51
            X509v3 Authority Key Identifier:
                keyid:8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/34352e3136322e3231382e302f32342d3234203d3e20323638353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:ba:c7:32:65:bf:37:1c:3b:43:bb:3b:25:05:93:63:0e:5c:
         7b:76:a7:7f:4a:23:2d:1f:c9:59:ab:8d:5e:2f:34:ab:78:64:
         2c:4f:76:50:69:a7:53:b5:45:74:ef:d6:49:98:12:6e:b0:76:
         1d:36:68:4d:e0:5c:fd:d5:56:cd:25:8a:e4:35:6f:53:2e:85:
         49:0f:40:29:87:70:24:16:a8:dd:bf:82:66:53:42:5b:06:af:
         c0:b6:cc:5d:a8:d2:fb:30:42:fc:19:4a:2d:3a:3e:70:29:87:
         a3:11:47:37:81:16:46:65:38:c2:59:ee:87:32:03:8f:95:e4:
         df:fe:a4:0b:3f:c2:8a:d7:f6:c4:ec:6e:8c:e6:40:60:c5:a3:
         e1:da:57:dd:4e:52:79:49:57:af:21:55:6b:4c:68:f4:13:fe:
         eb:b4:f2:3a:ac:3e:8f:9b:43:a8:09:34:56:15:23:4e:7b:4a:
         42:0f:f2:ed:0b:bc:9b:e6:49:bf:76:3f:94:e9:0b:ce:7f:1f:
         f6:85:ca:3a:10:dd:42:34:d6:84:72:d5:bb:48:b2:35:a3:44:
         29:16:21:46:06:c6:5e:fe:7b:58:48:40:30:78:c9:0f:f5:43:
         ad:cc:4d:a1:81:ed:a1:37:dd:07:6c:70:c6:39:5f:44:95:68:
         ba:e6:7b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:36 2025 by rpki-client on console.sobornost.net