Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230312e302f32342d3234203d3e20323637303732.roa
File:                     34352e3232352e3230312e302f32342d3234203d3e20323637303732.roa (raw, json)
Hash identifier:          DwpkDJnR1lYNV7kIiOyhTZufFGHc0r8DUYs2HSQKfXg=
Subject key identifier:   AB:B9:53:19:51:24:9E:D8:E6:D6:19:47:17:A5:23:85:46:BE:AF:59
Certificate issuer:       /CN=A942C31B9D70569B2761518A130F2D4756DBFC61
Certificate serial:       7335EDA54BFE42AB26FE74A4FBA36C57E797DCAB
Authority key identifier: A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230312e302f32342d3234203d3e20323637303732.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     267072
IP address blocks:        45.225.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl
                          rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:35:ed:a5:4b:fe:42:ab:26:fe:74:a4:fb:a3:6c:57:e7:97:dc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A942C31B9D70569B2761518A130F2D4756DBFC61
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:e8:e8:68:40:a6:44:c9:e3:5c:55:0b:04:
                    f5:7e:2c:55:d7:5f:41:95:94:e6:75:8e:90:69:27:
                    7e:b2:ff:c4:91:67:31:e1:5a:68:52:bf:d8:9f:b7:
                    3b:94:ff:05:5c:a4:67:15:76:90:0e:37:c1:37:b6:
                    3c:c8:43:50:f0:c3:38:db:e3:39:9b:83:87:29:c8:
                    15:5f:01:bb:36:35:b2:03:80:80:3c:4e:8c:31:af:
                    7a:5d:90:d3:20:4a:f9:7e:49:78:7e:55:9b:4e:e2:
                    e7:ac:b2:0a:6c:a1:5d:59:65:15:08:bf:35:7e:a4:
                    02:7a:eb:30:10:44:fd:26:24:3f:03:07:d1:f9:d2:
                    3b:69:39:9f:1f:d6:f6:46:66:aa:ec:33:42:1c:08:
                    15:a9:01:e7:bd:c5:8e:1c:de:80:ec:1b:ef:80:1a:
                    13:95:ed:c6:25:41:55:97:c6:de:71:dc:c5:10:0a:
                    01:a9:46:9e:47:b0:31:f2:1f:9c:14:05:e7:4c:2a:
                    02:84:38:8c:00:0a:05:87:3f:f1:13:89:f1:80:47:
                    12:fa:b8:db:67:6a:74:f3:61:17:98:c9:3a:ca:90:
                    cd:f6:b2:8a:52:db:ad:ca:88:81:42:4c:75:15:99:
                    93:c0:ae:0a:1d:22:06:e8:77:15:d6:a3:75:ef:ec:
                    60:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B9:53:19:51:24:9E:D8:E6:D6:19:47:17:A5:23:85:46:BE:AF:59
            X509v3 Authority Key Identifier:
                keyid:A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230312e302f32342d3234203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:8c:56:dd:53:01:f1:e1:10:6e:97:16:5c:af:68:05:92:c3:
         82:86:5b:6a:66:1b:84:78:8e:cb:a5:93:e1:11:ee:d7:fc:f5:
         77:62:cd:ad:26:e8:b3:d1:cd:da:be:e9:6a:fc:c1:79:a9:94:
         07:4d:41:a4:f4:7b:08:bf:38:61:7c:43:53:3c:c0:c0:a6:41:
         6e:89:33:ea:f5:92:0e:06:de:63:43:b8:85:ed:bc:33:d1:be:
         c7:59:3a:d5:73:0e:df:3b:26:d7:08:b0:48:2c:3f:de:32:39:
         d0:25:e9:cd:55:03:35:63:83:26:b8:97:20:a7:24:a2:be:bf:
         33:2c:3d:e6:eb:a2:fb:d7:5e:9a:43:08:ca:25:8c:14:b4:f5:
         87:3a:2f:4d:c9:ba:c4:34:24:a0:80:12:a7:2f:0c:45:2a:ee:
         4a:1e:e0:3d:f1:dd:8e:16:4d:09:40:1b:64:a8:b1:3a:6b:0c:
         1d:6a:b0:23:9e:85:2c:eb:a8:fe:ca:70:72:98:e7:25:3d:96:
         40:be:57:54:7f:58:2f:35:3e:ef:73:37:54:fa:2e:82:39:13:
         f1:6d:8e:6b:b7:f1:b3:fa:eb:fe:af:bc:8a:7e:e6:f2:31:92:
         0c:7d:6d:38:2b:47:1a:b1:82:91:27:38:18:e8:6c:4c:72:61:
         a1:f6:29:a6
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUczXtpUv+Qqsm/nSk+6NsV+eX3KswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk0MkMzMUI5RDcwNTY5QjI3NjE1MThBMTMwRjJENDc1
NkRCRkM2MTAeFw0yNTAzMDUxODU1MDNaFw0yNjAzMDQxOTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg1MkU4RTg2ODQwQTY0NEM5
RTM1QzU1MEIwNEY1N0UyQzU1RDc1RjQxOTU5NEU2NzU4RTkwNjkyNzdFQjJGRkM0
OTE2NzMxRTE1QTY4NTJCRkQ4OUZCNzNCOTRGRjA1NUNBNDY3MTU3NjkwMEUzN0Mx
MzdCNjNDQzg0MzUwRjBDMzM4REJFMzM5OUI4Mzg3MjlDODE1NUYwMUJCMzYzNUIy
MDM4MDgwM0M0RThDMzFBRjdBNUQ5MEQzMjA0QUY5N0U0OTc4N0U1NTlCNEVFMkU3
QUNCMjBBNkNBMTVENTk2NTE1MDhCRjM1N0VBNDAyN0FFQjMwMTA0NEZEMjYyNDNG
MDMwN0QxRjlEMjNCNjkzOTlGMUZENkY2NDY2NkFBRUMzMzQyMUMwODE1QTkwMUU3
QkRDNThFMUNERTgwRUMxQkVGODAxQTEzOTVFREM2MjU0MTU1OTdDNkRFNzFEQ0M1
MTAwQTAxQTk0NjlFNDdCMDMxRjIxRjlDMTQwNUU3NEMyQTAyODQzODhDMDAwQTA1
ODczRkYxMTM4OUYxODA0NzEyRkFCOERCNjc2QTc0RjM2MTE3OThDOTNBQ0E5MENE
RjZCMjhBNTJEQkFEQ0E4ODgxNDI0Qzc1MTU5OTkzQzBBRTBBMUQyMjA2RTg3NzE1
RDZBMzc1RUZFQzYwQzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyFLo6GhApkTJ41xVCwT1fixV119BlZTmdY6QaSd+sv/EkWcx4Vpo
Ur/Yn7c7lP8FXKRnFXaQDjfBN7Y8yENQ8MM42+M5m4OHKcgVXwG7NjWyA4CAPE6M
Ma96XZDTIEr5fkl4flWbTuLnrLIKbKFdWWUVCL81fqQCeuswEET9JiQ/AwfR+dI7
aTmfH9b2Rmaq7DNCHAgVqQHnvcWOHN6A7BvvgBoTle3GJUFVl8becdzFEAoBqUae
R7Ax8h+cFAXnTCoChDiMAAoFhz/xE4nxgEcS+rjbZ2p082EXmMk6ypDN9rKKUtut
yoiBQkx1FZmTwK4KHSIG6HcV1qN17+xgxwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FKu5UxlRJJ7Y5tYZRxelI4VGvq9ZMB8GA1UdIwQYMBaAFKlCwxudcFabJ2FRihMP
LUdW2/xhMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NxeUNHb1AzTGRuZEJa
enJZVkZoMkQxUHExSnp4V1BHTnNtYlQ4ZFQ5Q3BlLzEvQTk0MkMzMUI5RDcwNTY5
QjI3NjE1MThBMTMwRjJENDc1NkRCRkM2MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BOTQyQzMxQjlENzA1NjlCMjc2MTUxOEExMzBGMkQ0NzU2REJG
QzYxLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DcXlDR29QM0xkbmRCWnpyWVZG
aDJEMVBxMUp6eFdQR05zbWJUOGRUOUNwZS8xLzM0MzUyZTMyMzIzNTJlMzIzMDMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzAzNzMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LeHJMA0GCSqGSIb3DQEBCwUAA4IBAQB+jFbdUwHx4RBulxZcr2gFksOChltqZhuE
eI7LpZPhEe7X/PV3Ys2tJuiz0c3avulq/MF5qZQHTUGk9HsIvzhhfENTPMDApkFu
iTPq9ZIOBt5jQ7iF7bwz0b7HWTrVcw7fOybXCLBILD/eMjnQJenNVQM1Y4MmuJcg
pySivr8zLD3m66L7116aQwjKJYwUtPWHOi9NybrENCSggBKnLwxFKu5KHuA98d2O
Fk0JQBtkqLE6awwdarAjnoUs66j+ynBymOclPZZAvldUf1gvNT7vczdU+i6CORPx
bY5rt/Gz+uv+r7yKfubyMZIMfW04K0casYKRJzgY6GxMcmGh9imm
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:47 2025 by rpki-client on console.sobornost.net