Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230302e302f32342d3234203d3e20323637303732.roa
File:                     34352e3232352e3230302e302f32342d3234203d3e20323637303732.roa (raw, json)
Hash identifier:          IZ9hG2S36dAdJw2+2Q3SVhkAZ9cJ/OFeiqAsfRE7VfU=
Subject key identifier:   4D:4C:00:C3:A4:19:1A:B3:84:A2:7D:19:B7:F5:E9:A5:B0:78:2B:1D
Certificate issuer:       /CN=A942C31B9D70569B2761518A130F2D4756DBFC61
Certificate serial:       2281DC9AC0BB8FB7CE0D47E064F524DD9A633F51
Authority key identifier: A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230302e302f32342d3234203d3e20323637303732.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     267072
IP address blocks:        45.225.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl
                          rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:81:dc:9a:c0:bb:8f:b7:ce:0d:47:e0:64:f5:24:dd:9a:63:3f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A942C31B9D70569B2761518A130F2D4756DBFC61
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:88:b9:29:d2:e1:17:fc:05:5f:81:14:7e:
                    28:7b:11:70:57:94:22:c1:d9:a7:72:76:59:ce:86:
                    2d:56:3a:60:51:f8:79:51:0d:23:04:62:36:e8:9c:
                    95:32:e7:79:88:21:55:18:ab:a1:35:b8:de:5a:2e:
                    3d:f2:c3:aa:71:0f:97:91:c7:a7:dd:fc:97:83:dd:
                    1f:e9:65:c6:e0:2a:f5:82:11:f7:0f:be:58:74:33:
                    bd:81:20:66:98:af:60:b4:54:7e:42:ed:b2:c0:07:
                    d3:bc:9c:2b:16:dc:3c:ea:f2:a6:0e:7a:6d:59:53:
                    6f:ce:81:92:d0:8e:9b:99:3f:3f:95:2b:51:6d:ba:
                    dd:c1:55:72:34:17:6e:1b:24:93:68:0a:c5:34:83:
                    c1:1f:36:da:01:28:84:28:5e:42:d1:63:fd:a8:17:
                    ff:8b:47:5a:17:3b:38:90:20:4f:ba:88:c2:11:7b:
                    71:c7:f4:21:11:35:43:2e:71:79:e3:e7:8a:6e:b6:
                    bf:b3:8b:fc:c2:1c:a0:02:21:c6:2d:a9:7e:30:47:
                    65:3a:fc:32:c4:e5:cc:54:85:44:14:32:2d:fd:e2:
                    b1:6d:f5:82:6d:ed:49:c1:91:40:af:fd:b2:aa:87:
                    87:17:29:79:b7:86:25:cf:7d:47:97:63:8b:f5:97:
                    60:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4C:00:C3:A4:19:1A:B3:84:A2:7D:19:B7:F5:E9:A5:B0:78:2B:1D
            X509v3 Authority Key Identifier:
                keyid:A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230302e302f32342d3234203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:2a:e6:29:b5:bd:d8:08:cb:02:4d:de:ea:87:f2:97:ac:cb:
         16:3e:12:74:ef:e3:60:bd:25:2f:ad:53:ee:b2:2d:fb:de:44:
         cc:69:76:af:27:96:a6:e5:a0:44:0e:35:04:91:27:42:29:28:
         36:ba:11:8e:88:2d:b4:b0:02:b7:5d:3e:64:ce:91:42:56:3c:
         3f:60:a3:6f:c3:e2:fd:73:3c:1d:25:5d:6f:a4:93:eb:b5:ec:
         5b:ba:d3:a0:a1:c9:06:fc:d6:88:81:bb:4f:18:f9:24:c0:4a:
         ce:81:19:25:72:5b:b8:a9:0e:24:c8:09:29:45:db:63:12:1e:
         db:ba:16:84:0e:65:44:0e:23:b4:3a:42:15:26:0c:88:25:b9:
         ce:3f:62:78:22:b9:b6:07:ee:5f:57:a2:3d:b8:00:4a:75:12:
         5b:d8:e8:78:08:cf:09:1b:70:34:bc:2a:80:47:59:52:a3:3a:
         63:df:6d:ca:84:17:9f:45:e1:fe:3a:d7:72:80:8d:51:33:61:
         b4:56:19:7c:3b:cf:f9:98:96:fd:bf:88:ca:e0:31:f4:69:da:
         07:8b:7c:99:b0:07:6a:87:0e:83:be:e6:63:07:b9:49:aa:c5:
         7c:ab:48:a2:41:ff:7a:ef:7f:c7:d8:b6:7c:8b:92:ce:ee:26:
         56:a0:b2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:30 2025 by rpki-client on console.sobornost.net