Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa
File:                     34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa (raw, json)
Hash identifier:          5bSUPkODUWs9/kJhkVx3i4fO1qFGfYEB0H4MohPcXH8=
Subject key identifier:   91:24:C1:DE:06:4E:8D:1D:A5:E0:FB:42:C3:C5:05:C4:16:49:8E:EF
Certificate issuer:       /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
Certificate serial:       052D8B7AC39A6AEC5AFDE9090A354004443190CA
Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa
Signing time:             Thu 06 Mar 2025 10:04:40 +0000
ROA not before:           Thu 06 Mar 2025 09:59:40 +0000
ROA not after:            Thu 05 Mar 2026 10:04:40 +0000
asID:                     268683
IP address blocks:        45.165.166.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl
                          rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2d:8b:7a:c3:9a:6a:ec:5a:fd:e9:09:0a:35:40:04:44:31:90:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
        Validity
            Not Before: Mar  6 09:59:40 2025 GMT
            Not After : Mar  5 10:04:40 2026 GMT
        Subject: CN=9124C1DE064E8D1DA5E0FB42C3C505C416498EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e3:9a:79:4f:45:91:54:ff:a7:2a:44:90:a6:
                    1e:6a:87:c1:7b:c4:57:0e:16:89:3b:63:ea:80:f0:
                    8a:6c:55:b2:62:f1:73:7a:3f:ab:9a:34:51:8d:0b:
                    a0:a0:c3:1c:47:19:a1:31:dc:04:e6:13:ba:b9:22:
                    3c:f6:a7:14:f6:0c:15:23:94:27:63:86:6e:8a:08:
                    6f:6c:53:50:6d:0f:6d:5a:a8:6a:79:d7:f2:61:98:
                    44:40:e9:2d:8d:87:36:2a:10:7b:42:90:a8:b2:29:
                    16:87:37:95:d1:af:ca:7b:68:6f:26:79:8a:da:a9:
                    0c:07:ee:56:92:50:3f:26:9f:ee:07:2c:12:2c:8a:
                    d2:a8:5e:f0:6c:8c:17:f2:1e:a6:29:36:7d:00:7a:
                    2e:a7:7b:dc:09:99:c1:dc:c1:ee:57:06:9b:dc:28:
                    cb:b6:0b:b0:3a:d6:84:a3:51:0c:41:5e:75:ed:53:
                    40:cd:69:cc:5d:c1:4d:6d:2f:83:13:67:b1:18:4e:
                    a0:89:7a:7d:c7:9d:12:3b:af:97:0e:44:4c:61:7e:
                    b2:df:bf:e6:a3:0a:ba:b2:87:0f:ef:8c:17:4b:1f:
                    0c:85:4e:23:35:03:0d:d6:98:2f:8a:14:f4:e9:9c:
                    83:63:ee:ba:bb:72:5a:d1:eb:c5:77:ab:90:b2:07:
                    80:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:24:C1:DE:06:4E:8D:1D:A5:E0:FB:42:C3:C5:05:C4:16:49:8E:EF
            X509v3 Authority Key Identifier:
                keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:7e:29:31:59:5a:34:f2:6c:cc:f1:df:2f:61:6a:5b:14:01:
         df:4f:ec:3a:6c:d3:15:f8:3e:9d:e6:d6:5c:33:6f:90:cd:8d:
         b5:98:14:ca:9c:fc:50:65:a8:ea:7b:30:a7:d7:b4:b6:96:82:
         85:a6:87:d1:1e:d6:6d:4a:ac:33:e1:71:93:1b:03:38:62:ec:
         5f:9a:37:e8:d2:a8:41:f7:b9:0c:ad:7b:eb:bb:40:74:0f:b9:
         9a:19:fe:88:40:21:fd:01:70:ba:a4:7c:19:95:cf:22:a5:e0:
         81:ba:0d:17:9b:f2:63:18:5c:2b:c5:89:ca:69:36:ab:67:bf:
         59:9c:2a:e2:28:df:39:82:44:30:30:5e:84:54:c9:99:4b:40:
         98:57:b6:7a:8c:d7:34:68:d0:76:22:af:28:ef:a9:8e:c8:6f:
         bc:2d:93:23:34:3d:84:a4:9b:58:76:06:23:04:17:36:fd:a4:
         ff:05:e2:2f:0e:4e:27:f2:c8:37:30:85:dc:65:40:0b:1d:aa:
         33:0d:2c:de:c1:95:fd:d0:1a:6f:11:58:65:25:54:53:d6:0c:
         f3:74:17:d2:54:b3:5b:9e:d2:41:9d:88:e6:28:46:b7:5a:ca:
         7d:94:2f:ce:e7:b9:2e:96:06:86:8c:e5:df:7a:3f:0e:4c:d3:
         e2:f0:2e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:53 2025 by rpki-client on console.sobornost.net