Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/34352e3138372e3139362e302f32322d3234203d3e20323639353536.roa
File:                     34352e3138372e3139362e302f32322d3234203d3e20323639353536.roa (raw, json)
Hash identifier:          Z3eXqkLPkta5lxiN4hgxoRNVmpRnWufvbzb5xqsI8DM=
Subject key identifier:   13:29:E8:8C:04:90:E5:C5:42:44:21:81:5F:9B:53:C7:D2:1F:EA:74
Certificate issuer:       /CN=7CA1FCF91BD0F97C0D4500E2183D85782B175D28
Certificate serial:       168F8388797695AD60E6C09E6F51C82ED25CD667
Authority key identifier: 7C:A1:FC:F9:1B:D0:F9:7C:0D:45:00:E2:18:3D:85:78:2B:17:5D:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/34352e3138372e3139362e302f32322d3234203d3e20323639353536.roa
Signing time:             Wed 05 Mar 2025 19:52:04 +0000
ROA not before:           Wed 05 Mar 2025 19:47:04 +0000
ROA not after:            Wed 04 Mar 2026 19:52:04 +0000
asID:                     269556
IP address blocks:        45.187.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.crl
                          rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 12:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8f:83:88:79:76:95:ad:60:e6:c0:9e:6f:51:c8:2e:d2:5c:d6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA1FCF91BD0F97C0D4500E2183D85782B175D28
        Validity
            Not Before: Mar  5 19:47:04 2025 GMT
            Not After : Mar  4 19:52:04 2026 GMT
        Subject: CN=1329E88C0490E5C5424421815F9B53C7D21FEA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f2:1f:ed:82:b8:cc:45:2e:ca:32:d6:93:54:
                    0a:80:6d:55:c0:e4:a3:68:e2:e3:48:27:52:da:4b:
                    0c:cc:d6:8d:44:f6:58:c4:f0:17:db:61:fd:4d:5c:
                    38:c1:f7:e4:f9:50:8a:0a:64:c2:f1:a3:32:4b:7a:
                    69:0f:5d:f9:a4:e7:48:9b:99:6e:a2:f7:64:a9:3a:
                    a3:4d:26:7d:67:25:76:96:89:58:98:ce:58:cf:99:
                    e3:16:08:6e:6d:bf:a8:3a:13:a3:b1:ee:22:29:77:
                    e5:6b:10:2e:24:34:74:c2:61:af:f4:5a:a1:70:b8:
                    39:0f:b9:d0:d2:ff:86:bc:d4:b0:0c:ba:b2:40:62:
                    44:c5:ad:c1:28:16:ce:94:4e:32:49:da:74:04:24:
                    ba:ea:83:03:d6:a5:3c:57:ac:2f:51:60:2e:70:27:
                    0f:1a:67:88:a1:24:2d:c1:88:65:eb:e5:59:b0:ef:
                    ec:e9:ce:b2:85:d7:54:02:dd:6f:b2:f2:8f:ce:67:
                    b2:6a:94:9a:95:35:f5:ec:23:37:e0:b3:79:b2:02:
                    d8:a9:4b:bc:cd:d1:0d:78:b1:db:2c:5e:1a:57:8e:
                    e7:1b:82:c2:a4:33:44:9a:4c:38:78:05:5c:f1:0d:
                    9b:a9:ef:f0:c6:12:0c:18:15:54:3b:02:ae:58:5c:
                    d3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:29:E8:8C:04:90:E5:C5:42:44:21:81:5F:9B:53:C7:D2:1F:EA:74
            X509v3 Authority Key Identifier:
                keyid:7C:A1:FC:F9:1B:D0:F9:7C:0D:45:00:E2:18:3D:85:78:2B:17:5D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/34352e3138372e3139362e302f32322d3234203d3e20323639353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:c6:d3:ad:f3:25:02:aa:5b:7c:91:0b:83:75:d3:70:db:32:
         c3:e1:5e:41:78:28:25:54:e2:0d:ec:0c:6d:93:b1:44:6a:93:
         64:d5:1c:a3:70:27:84:01:6a:7c:33:69:87:15:24:be:55:a4:
         db:f2:cb:77:4c:a7:3c:8d:e7:0a:cd:20:ca:f7:44:5d:9c:6d:
         16:fa:b7:24:63:3f:bf:a1:4d:0e:df:5d:17:0c:82:ca:fb:8f:
         b9:2e:9b:3d:4b:08:39:c2:4c:6d:33:ad:3a:68:0e:94:d7:4c:
         70:75:f7:e3:c8:78:4f:7c:a5:5e:cf:b5:a3:0c:ea:d9:e2:18:
         46:95:cc:3b:70:e8:f1:71:9c:49:25:a6:c5:c4:c2:35:c4:bd:
         ac:9b:90:e0:97:81:4e:28:06:53:08:10:ec:6b:b6:ff:ec:c4:
         1e:4a:6d:4d:c1:05:90:5d:2a:5b:89:b4:cc:0d:f3:f0:de:6b:
         1b:fd:a6:1d:7c:c8:dd:30:d7:06:8b:23:8a:f7:09:bc:9b:23:
         1d:a8:10:6c:e5:65:59:fe:3d:7a:3c:2d:fa:94:77:2d:b8:15:
         da:aa:ee:be:e5:8b:58:e5:49:a8:a0:05:41:d5:47:6a:63:af:
         b8:df:e5:20:c3:ee:bb:91:18:e7:1c:37:79:cb:59:d8:b7:54:
         00:be:6c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:47 2025 by rpki-client on console.sobornost.net