Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/34352e3233302e3132312e302f32342d3234203d3e20323637313537.roa
File:                     34352e3233302e3132312e302f32342d3234203d3e20323637313537.roa (raw, json)
Hash identifier:          rKg7e3D1BC9lR4RHoYWOCpDi+7Tit0afOpCqFd34wYw=
Subject key identifier:   76:0E:F8:E4:0E:EC:7B:68:33:A9:F8:E2:58:C2:2C:67:48:F6:F8:7D
Certificate issuer:       /CN=2136E155D06409C9B152A82F24B3CCCDF3692097
Certificate serial:       3C69DE439EEDBDF9AB4D9857FE21338BD3D43FA1
Authority key identifier: 21:36:E1:55:D0:64:09:C9:B1:52:A8:2F:24:B3:CC:CD:F3:69:20:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2136E155D06409C9B152A82F24B3CCCDF3692097.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/34352e3233302e3132312e302f32342d3234203d3e20323637313537.roa
Signing time:             Fri 11 Apr 2025 15:00:43 +0000
ROA not before:           Fri 11 Apr 2025 14:55:43 +0000
ROA not after:            Fri 10 Apr 2026 15:00:43 +0000
asID:                     267157
IP address blocks:        45.230.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.crl
                          rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2136E155D06409C9B152A82F24B3CCCDF3692097.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:69:de:43:9e:ed:bd:f9:ab:4d:98:57:fe:21:33:8b:d3:d4:3f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2136E155D06409C9B152A82F24B3CCCDF3692097
        Validity
            Not Before: Apr 11 14:55:43 2025 GMT
            Not After : Apr 10 15:00:43 2026 GMT
        Subject: CN=760EF8E40EEC7B6833A9F8E258C22C6748F6F87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:53:d5:15:8e:a8:7e:f9:57:0d:37:b7:3a:cb:
                    81:44:0c:13:99:04:52:82:7c:c9:02:8f:b2:30:ee:
                    ad:21:7a:52:ae:e4:6a:e9:b0:3d:22:c7:3b:c5:32:
                    81:61:32:a5:84:65:f2:99:39:9e:ca:be:c0:01:d2:
                    0e:7f:a7:ec:43:f1:9c:8b:b2:f7:e1:14:e6:77:9b:
                    73:d2:c2:ef:c1:e7:9a:ae:5f:4b:e3:3d:84:ee:e8:
                    b5:0c:01:2e:25:e3:8e:dc:24:cf:25:64:4b:5b:c0:
                    95:a9:bb:22:57:87:8e:4c:cf:f3:92:3b:2c:ff:d5:
                    73:ac:36:e4:a8:6f:59:2a:4f:53:ae:11:62:20:1a:
                    3a:06:35:b7:b7:6e:b7:50:93:45:fb:42:13:e5:8d:
                    73:0e:f3:ec:d6:29:e2:7b:7c:a7:c5:8c:90:31:61:
                    fc:8a:58:47:06:e7:5b:7f:ff:78:73:30:20:bd:1a:
                    42:91:02:7e:88:13:b9:c7:f8:63:bc:1c:ab:a4:03:
                    9e:12:09:1a:4c:c9:df:07:3b:c2:bb:2a:62:71:20:
                    54:3a:ea:10:5b:f0:47:e8:46:d1:3f:38:ac:26:c4:
                    8e:0e:6c:7f:88:1f:d9:48:e9:fc:9e:d5:e7:c1:7c:
                    99:03:82:5c:a7:a5:c5:38:dc:ec:89:82:09:da:2c:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0E:F8:E4:0E:EC:7B:68:33:A9:F8:E2:58:C2:2C:67:48:F6:F8:7D
            X509v3 Authority Key Identifier:
                keyid:21:36:E1:55:D0:64:09:C9:B1:52:A8:2F:24:B3:CC:CD:F3:69:20:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2136E155D06409C9B152A82F24B3CCCDF3692097.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/34352e3233302e3132312e302f32342d3234203d3e20323637313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:08:5c:74:e9:9f:6d:f7:61:89:02:cd:c8:3a:3f:84:02:0e:
         7d:83:79:2b:8b:c8:0d:6d:1a:ad:4e:9f:8e:84:fe:c2:bb:e3:
         96:c8:e2:85:0c:dd:6b:74:a6:1f:4f:84:d5:74:48:4f:b1:4b:
         16:3f:4a:f1:06:96:31:e6:ea:9e:19:b8:f6:ec:22:9f:a5:fc:
         81:68:cf:8a:f8:c4:88:12:a2:d7:63:05:e0:2b:cd:17:9e:7f:
         12:6e:7d:2b:3b:a0:84:30:b9:3c:db:ca:ac:d6:00:21:a8:39:
         bf:69:09:74:98:c7:16:a4:a9:90:b7:d3:a0:10:37:35:22:90:
         37:ff:cf:2f:71:4d:c9:9b:7d:36:1f:ce:0b:d8:24:10:70:b6:
         f8:4d:6e:e7:1d:85:32:b4:59:6d:27:98:20:1b:28:fe:dc:a3:
         01:b4:62:33:34:00:49:68:1b:e7:f0:31:8f:a1:b5:e3:da:46:
         ee:c4:2d:c3:0e:71:f4:54:c8:0f:8c:3f:4c:78:19:7c:66:6e:
         e1:d3:72:dd:7c:99:ba:84:e0:52:35:27:2e:8e:ab:89:20:2e:
         1a:6a:7d:28:2d:f7:b9:ec:f6:8a:61:9b:99:59:6d:80:7e:b6:
         38:89:91:8c:cc:de:d9:e3:a1:61:21:f2:a8:b6:05:2d:7b:06:
         4f:c1:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:51 2025 by rpki-client on console.sobornost.net