Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/34352e3233302e3132302e302f32342d3234203d3e20323637313537.roa
File:                     34352e3233302e3132302e302f32342d3234203d3e20323637313537.roa (raw, json)
Hash identifier:          FXl2TPPtOo3uuGg1g0LDTI27JQXGNL5vhg/3V01Sv8A=
Subject key identifier:   1E:4C:E8:48:77:BB:A1:AE:D3:31:0B:E4:C2:81:BD:B0:8C:30:9D:60
Certificate issuer:       /CN=2136E155D06409C9B152A82F24B3CCCDF3692097
Certificate serial:       74958EF4DB573DB1DE72D968D029380CB8263406
Authority key identifier: 21:36:E1:55:D0:64:09:C9:B1:52:A8:2F:24:B3:CC:CD:F3:69:20:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2136E155D06409C9B152A82F24B3CCCDF3692097.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/34352e3233302e3132302e302f32342d3234203d3e20323637313537.roa
Signing time:             Fri 11 Apr 2025 14:59:13 +0000
ROA not before:           Fri 11 Apr 2025 14:54:13 +0000
ROA not after:            Fri 10 Apr 2026 14:59:13 +0000
asID:                     267157
IP address blocks:        45.230.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.crl
                          rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2136E155D06409C9B152A82F24B3CCCDF3692097.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:95:8e:f4:db:57:3d:b1:de:72:d9:68:d0:29:38:0c:b8:26:34:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2136E155D06409C9B152A82F24B3CCCDF3692097
        Validity
            Not Before: Apr 11 14:54:13 2025 GMT
            Not After : Apr 10 14:59:13 2026 GMT
        Subject: CN=1E4CE84877BBA1AED3310BE4C281BDB08C309D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:b9:ff:a6:e9:a4:10:8f:38:e9:c6:1c:96:
                    c9:50:4f:02:5d:7e:21:5a:c8:1d:c2:6c:e4:2d:12:
                    c6:97:7a:1a:2a:e7:6b:8b:a4:64:e5:0f:9c:b9:53:
                    af:53:ae:ef:d4:69:40:47:c7:4b:cc:86:ae:90:cd:
                    12:7b:e2:a5:c8:0a:6a:30:37:db:b3:7c:f8:3d:3c:
                    95:7a:fb:25:2c:7e:f9:40:f3:19:05:f1:63:9a:71:
                    52:b9:ac:a2:16:d1:de:32:7b:d9:0e:90:57:a1:27:
                    13:b3:e2:24:8a:3c:2f:d4:eb:8d:9e:4a:16:e5:6e:
                    92:c0:9f:f3:c3:b5:0c:9a:3e:ee:d2:39:b7:6d:13:
                    fd:6a:b2:8e:1a:f5:af:33:61:4e:b4:df:e2:7e:58:
                    18:86:01:a5:c5:6b:9e:63:62:f5:13:f7:41:e7:32:
                    08:01:4a:2f:22:0f:32:b1:2f:da:f8:54:09:0d:8a:
                    db:75:2b:31:d6:2e:a1:fb:88:57:e1:8c:ff:77:ed:
                    49:f6:c1:c5:ca:34:45:e4:0c:29:fb:0f:ce:ec:6d:
                    5b:22:62:07:f4:54:f5:17:d1:52:0c:f1:26:75:78:
                    4e:b4:0b:70:46:48:2f:02:97:c9:d1:0f:f5:a7:34:
                    dc:30:7e:cf:14:b2:71:23:75:cc:b2:45:c0:60:68:
                    53:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4C:E8:48:77:BB:A1:AE:D3:31:0B:E4:C2:81:BD:B0:8C:30:9D:60
            X509v3 Authority Key Identifier:
                keyid:21:36:E1:55:D0:64:09:C9:B1:52:A8:2F:24:B3:CC:CD:F3:69:20:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2136E155D06409C9B152A82F24B3CCCDF3692097.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/34352e3233302e3132302e302f32342d3234203d3e20323637313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:53:72:21:aa:c7:42:e7:6f:55:a8:87:f8:9e:d0:d1:ee:76:
         f6:75:da:c8:b8:e2:3e:ed:79:e1:d9:bb:fd:b5:ea:6b:61:7a:
         52:46:f3:ef:10:5a:96:5c:41:93:d3:ae:b3:d0:b5:94:f8:22:
         a2:4b:d7:d0:b0:12:df:0a:6a:70:54:89:1a:83:79:7f:1b:21:
         60:ec:0d:bd:03:29:cb:27:53:b3:34:9c:7a:50:46:5f:f5:cc:
         2a:9e:a3:58:8e:84:89:8a:46:be:c3:c0:aa:64:d3:6d:e8:23:
         bd:55:d2:09:a6:17:37:37:92:99:c6:a8:80:9a:00:3f:fa:6b:
         5b:be:5a:cc:c0:95:a7:08:ea:3c:f5:a5:37:97:79:65:59:22:
         20:08:c8:15:01:4a:27:22:77:a1:20:d1:3c:d3:c9:ff:0b:34:
         51:67:d6:6f:2f:2c:5f:07:71:43:cf:2f:d2:11:cc:b4:1b:7a:
         a0:e2:d9:c3:a1:aa:df:b7:b7:18:eb:1a:b3:ca:26:bb:f4:e0:
         a0:fa:89:fc:a0:06:79:3d:4c:a2:72:41:7f:ba:7d:da:8e:09:
         49:b7:c9:f3:d3:fb:71:bb:b4:27:f3:c3:5d:a6:e9:5f:2f:4b:
         15:6c:73:a3:6a:01:a1:60:45:9e:26:4d:99:70:33:3e:80:69:
         23:a3:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:29 2025 by rpki-client on console.sobornost.net