Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/34352e3136312e39322e302f32322d3332203d3e203532363137.roa
File:                     34352e3136312e39322e302f32322d3332203d3e203532363137.roa (raw, json)
Hash identifier:          v4ibcZ6QyW6is9knft2a+b/qKlA/FqRjUFeBFDGRwjk=
Subject key identifier:   A1:51:BB:74:FB:AD:7E:EC:A9:42:12:B5:F5:72:79:C9:23:8A:E0:45
Certificate issuer:       /CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65
Certificate serial:       1C2AD5D15BF0E3CCC394C3C9BFABB1F3668C111E
Authority key identifier: D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/34352e3136312e39322e302f32322d3332203d3e203532363137.roa
Signing time:             Thu 06 Mar 2025 12:59:16 +0000
ROA not before:           Thu 06 Mar 2025 12:54:16 +0000
ROA not after:            Thu 05 Mar 2026 12:59:16 +0000
asID:                     52617
IP address blocks:        45.161.92.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.crl
                          rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2a:d5:d1:5b:f0:e3:cc:c3:94:c3:c9:bf:ab:b1:f3:66:8c:11:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65
        Validity
            Not Before: Mar  6 12:54:16 2025 GMT
            Not After : Mar  5 12:59:16 2026 GMT
        Subject: CN=A151BB74FBAD7EECA94212B5F57279C9238AE045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:a3:fe:b7:69:d7:fa:1c:81:3f:28:f8:fd:
                    82:e4:32:10:9d:ef:a1:81:3d:da:2e:ba:7d:6d:e7:
                    53:61:df:2d:7f:b8:c7:ab:ff:30:8d:83:28:cb:e5:
                    8d:52:52:db:04:75:f2:e4:14:0e:8f:c2:06:7d:8d:
                    43:60:bb:bf:33:47:98:56:5f:6c:43:0d:c3:6b:87:
                    8f:85:e9:43:86:95:1a:3d:67:2c:63:74:df:e7:60:
                    cc:1d:fb:56:ad:ed:77:61:3c:a4:42:2f:a9:d5:31:
                    08:9a:50:53:2e:0c:ea:2e:aa:07:64:6e:41:19:47:
                    b2:1c:df:62:b6:bb:22:4a:f1:24:b4:fc:b2:d1:42:
                    c1:bf:a4:b0:66:e2:90:87:96:99:5f:0f:10:95:3a:
                    46:04:1b:3b:09:f3:d6:43:e2:b3:d2:f1:c2:0a:26:
                    fa:2d:63:de:49:d7:7c:36:2b:6d:3d:a5:7e:10:ff:
                    37:5b:6b:60:8b:44:ea:78:2a:43:8d:68:c3:ce:e3:
                    80:b3:41:26:eb:0d:56:83:bb:5d:2c:1d:e1:6f:63:
                    e5:3e:74:2d:2f:34:6c:86:ff:fc:70:9a:27:89:4b:
                    36:84:57:51:eb:f6:9a:51:a9:db:ad:bb:36:f7:f4:
                    a2:aa:8a:dc:da:92:21:9b:c4:e7:7f:2d:a8:e4:07:
                    f7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:51:BB:74:FB:AD:7E:EC:A9:42:12:B5:F5:72:79:C9:23:8A:E0:45
            X509v3 Authority Key Identifier:
                keyid:D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/34352e3136312e39322e302f32322d3332203d3e203532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:33:06:63:e8:9a:52:e2:da:a6:af:53:76:7d:3a:53:d3:16:
         d6:d0:77:e5:00:33:4c:10:8c:f5:7e:96:4e:59:e3:b9:5e:06:
         7b:3c:dc:ed:1c:f1:0c:df:5f:b8:cb:97:fb:ad:e9:f1:76:fe:
         e5:b0:8f:9c:3b:ac:91:f4:74:26:df:98:38:69:cb:5d:37:01:
         cc:71:b0:33:a0:ac:ac:de:89:7e:79:b3:d2:41:26:62:1e:6c:
         a6:e7:db:61:d8:20:90:66:09:b2:64:58:29:3a:ff:81:44:d4:
         76:cc:7f:13:eb:65:a3:2f:f8:ff:2f:25:c9:1f:4d:ee:b6:b4:
         73:49:91:f2:83:d6:54:f9:59:c5:49:2e:d5:a1:08:42:17:21:
         37:bc:18:06:a0:12:91:8f:9e:a5:16:09:cb:86:07:ad:0b:57:
         11:16:e5:0d:dd:27:4c:6f:47:0e:ab:4c:91:3d:dc:3d:05:0e:
         02:52:91:91:57:15:af:ca:c9:91:c7:77:83:6a:25:54:8d:b5:
         6f:93:b2:3a:f7:4a:aa:20:84:b6:c1:21:85:bb:06:0b:39:a3:
         3f:8a:cf:80:da:19:e0:0a:60:29:dd:c9:23:12:5b:9a:7e:76:
         98:f8:00:66:00:19:dc:5b:e0:f3:ba:5a:d9:1f:89:e6:85:8e:
         5d:7a:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:45 2025 by rpki-client on console.sobornost.net