Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/34352e37312e38382e302f32322d3234203d3e20323637363138.roa
File:                     34352e37312e38382e302f32322d3234203d3e20323637363138.roa (raw, json)
Hash identifier:          qiK4B1q/mEqhWxVP31EOV/jhMfI3fIRg9yGJJ1u+v4o=
Subject key identifier:   6D:84:D4:EF:60:8A:9E:F7:6E:28:75:CD:A9:51:F4:7B:D9:79:FA:8F
Certificate issuer:       /CN=2A13E54025F9AF5EB95F1FB0CB069BC443107936
Certificate serial:       1E359F0EA44F7B8A21B7A65022BC4F695BBBB21A
Authority key identifier: 2A:13:E5:40:25:F9:AF:5E:B9:5F:1F:B0:CB:06:9B:C4:43:10:79:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/34352e37312e38382e302f32322d3234203d3e20323637363138.roa
Signing time:             Thu 10 Apr 2025 12:43:15 +0000
ROA not before:           Thu 10 Apr 2025 12:38:15 +0000
ROA not after:            Thu 09 Apr 2026 12:43:15 +0000
asID:                     267618
IP address blocks:        45.71.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.crl
                          rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:35:9f:0e:a4:4f:7b:8a:21:b7:a6:50:22:bc:4f:69:5b:bb:b2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A13E54025F9AF5EB95F1FB0CB069BC443107936
        Validity
            Not Before: Apr 10 12:38:15 2025 GMT
            Not After : Apr  9 12:43:15 2026 GMT
        Subject: CN=6D84D4EF608A9EF76E2875CDA951F47BD979FA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ce:6c:94:87:da:f5:ea:79:8c:94:4e:e2:a3:
                    3a:3e:2d:b2:60:2b:fd:48:2e:cb:cd:b5:4d:6e:62:
                    f0:4d:fd:e2:9e:91:b5:24:00:dc:b6:1b:42:b0:28:
                    bd:9a:86:66:df:4f:42:aa:63:22:47:e3:01:94:16:
                    b7:24:b2:79:60:bc:95:a5:a8:a6:94:08:bf:10:a0:
                    84:4e:40:c7:0a:af:73:59:e1:3f:eb:58:f6:d5:a7:
                    77:33:9d:c3:62:fc:18:a9:7d:7b:d2:25:25:c5:57:
                    0a:87:87:d0:4b:c5:87:08:8d:e4:0a:6d:26:b8:ab:
                    37:bc:77:62:ec:ef:db:23:44:b8:30:a9:c9:c6:91:
                    76:e8:62:bf:07:84:fc:95:96:00:8a:40:27:2f:74:
                    8a:9f:4c:d1:a5:3d:04:18:f3:ea:93:5d:91:87:b1:
                    99:f3:12:9a:0f:47:b0:ee:d2:cc:e5:8b:17:df:7a:
                    fd:2d:be:fa:1b:df:26:99:89:2d:1a:c6:50:8f:00:
                    6c:80:13:28:79:50:eb:31:41:3f:ae:72:58:58:2e:
                    19:cb:f9:f2:a5:b5:a4:37:b6:62:27:9f:06:fb:29:
                    17:98:d7:a2:57:4b:2e:17:15:f2:e3:0d:08:89:74:
                    43:5e:a0:a7:82:ce:fe:de:43:42:5e:ad:63:5c:6d:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:84:D4:EF:60:8A:9E:F7:6E:28:75:CD:A9:51:F4:7B:D9:79:FA:8F
            X509v3 Authority Key Identifier:
                keyid:2A:13:E5:40:25:F9:AF:5E:B9:5F:1F:B0:CB:06:9B:C4:43:10:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/34352e37312e38382e302f32322d3234203d3e20323637363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:56:8e:8a:cd:ba:0d:8e:b1:77:b1:41:94:84:3e:30:35:bf:
         1a:a4:bc:cb:56:ab:66:79:b3:d8:6f:6d:d1:2b:e9:37:35:0f:
         3a:a4:3f:39:b1:f6:b8:e6:59:1c:4e:1d:f2:83:9f:3b:94:58:
         be:af:4b:96:c0:08:35:48:6f:a3:b2:36:75:3d:35:ea:20:d2:
         d5:df:ca:ab:5d:ce:84:1c:bb:0f:48:c7:68:9b:08:f3:43:67:
         0a:b0:6d:16:cc:f4:40:ee:3c:d8:48:41:0d:c3:74:d1:bc:35:
         eb:16:a5:9b:6a:d6:23:bb:cc:fc:38:92:df:f6:8e:77:5e:ad:
         ba:3c:97:38:1a:fd:42:af:a6:a2:10:0b:88:f4:20:74:de:20:
         83:7e:08:dd:d0:e1:28:f8:20:14:26:9d:08:5e:bb:ca:53:91:
         0e:e9:a2:5c:ab:05:9f:b4:41:92:b6:f7:76:77:e1:e1:3c:e4:
         3a:b9:7c:b4:66:e7:eb:a1:23:0c:27:26:5c:99:71:b9:33:17:
         c1:ee:33:0b:bb:dc:77:2a:1c:b7:e0:76:35:a6:80:9f:bf:ef:
         fa:dc:a2:ac:c4:ec:9f:2a:97:c0:2f:cb:e6:c6:49:c7:d6:67:
         aa:4a:89:81:5c:08:4f:f3:2c:a4:c2:29:bd:8c:44:99:fe:57:
         d5:68:13:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:05 2025 by rpki-client on console.sobornost.net