Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35332e302f32342d3234203d3e20323637393931.roa
File:                     34352e3136372e35332e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier:          RC3voqqEECx0ooe5W2KvgTsN9M9rJjOfAbPSBzYB4jM=
Subject key identifier:   3B:0F:FD:6C:D1:1E:7D:2C:46:94:2B:2E:01:47:2C:38:10:32:97:9D
Certificate issuer:       /CN=B34B813BD07DD631ACD8AE3270BDB4117422DF51
Certificate serial:       166A545E9E12E8DA4876848B0C2571A8F652DCF9
Authority key identifier: B3:4B:81:3B:D0:7D:D6:31:AC:D8:AE:32:70:BD:B4:11:74:22:DF:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B34B813BD07DD631ACD8AE3270BDB4117422DF51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35332e302f32342d3234203d3e20323637393931.roa
Signing time:             Tue 15 Apr 2025 14:36:09 +0000
ROA not before:           Tue 15 Apr 2025 14:31:09 +0000
ROA not after:            Tue 14 Apr 2026 14:36:09 +0000
asID:                     267991
IP address blocks:        45.167.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/B34B813BD07DD631ACD8AE3270BDB4117422DF51.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/B34B813BD07DD631ACD8AE3270BDB4117422DF51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B34B813BD07DD631ACD8AE3270BDB4117422DF51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6a:54:5e:9e:12:e8:da:48:76:84:8b:0c:25:71:a8:f6:52:dc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34B813BD07DD631ACD8AE3270BDB4117422DF51
        Validity
            Not Before: Apr 15 14:31:09 2025 GMT
            Not After : Apr 14 14:36:09 2026 GMT
        Subject: CN=3B0FFD6CD11E7D2C46942B2E01472C381032979D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:60:a4:c3:f0:4f:a8:01:be:f0:7b:3b:53:05:
                    3e:f9:29:25:26:9e:da:78:7f:b3:e2:88:2a:1d:08:
                    92:6f:75:8d:ed:fe:93:a5:ae:b3:b2:74:4a:13:de:
                    54:45:e0:c9:7d:68:69:68:6e:8e:4e:2d:f1:45:93:
                    89:0e:1e:7e:ea:e8:fd:c9:e2:44:56:d7:78:b9:c9:
                    33:d6:c3:79:c6:e2:33:de:86:0b:48:c3:c1:74:60:
                    da:31:2d:7c:3f:7e:05:b2:2c:db:4a:9d:1f:d9:a5:
                    c0:66:3d:63:f2:17:04:e4:70:be:aa:fe:04:d3:91:
                    15:f5:9c:78:a6:17:21:e9:6c:b7:30:8d:7d:d4:15:
                    83:5e:85:16:a4:4e:99:6a:d1:3e:25:8a:41:50:bb:
                    6d:13:84:65:ff:57:38:5e:e0:ec:b0:45:3b:e3:a4:
                    f4:67:7b:4a:5c:e0:44:ff:9f:6a:f3:ee:91:f7:72:
                    79:1f:66:40:aa:a6:fe:1d:1d:1f:4a:c9:79:0c:1c:
                    8d:23:32:5f:77:21:29:4b:a3:b1:38:c4:14:79:81:
                    fa:fd:34:bc:64:9a:82:0a:16:35:20:83:cc:7e:b9:
                    96:0c:d3:69:e9:ce:93:06:83:48:04:35:1e:d4:b3:
                    37:58:75:08:e6:1a:8b:a7:01:d0:9e:e5:c2:7e:5a:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0F:FD:6C:D1:1E:7D:2C:46:94:2B:2E:01:47:2C:38:10:32:97:9D
            X509v3 Authority Key Identifier:
                keyid:B3:4B:81:3B:D0:7D:D6:31:AC:D8:AE:32:70:BD:B4:11:74:22:DF:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/B34B813BD07DD631ACD8AE3270BDB4117422DF51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B34B813BD07DD631ACD8AE3270BDB4117422DF51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35332e302f32342d3234203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:b6:a5:4f:f7:02:29:89:c0:36:ec:13:ad:c1:4c:6a:9f:d1:
         18:26:fc:67:29:91:13:76:6d:ec:ed:3a:64:37:9d:51:4e:ac:
         a6:0b:ee:48:b4:64:36:2e:0e:97:d9:67:3c:fe:83:8b:d0:ee:
         fd:26:d8:58:2a:25:50:01:0c:7b:90:fb:a6:3e:8d:6c:d9:2a:
         df:8c:68:85:b8:eb:da:8a:d5:25:4c:45:3e:f8:76:e6:43:5b:
         ab:53:35:42:42:eb:4a:48:c2:81:fa:65:d2:19:0b:c3:ea:fe:
         cf:fe:8e:49:00:5b:68:67:44:90:17:09:0c:1b:c2:4d:d7:d8:
         8a:29:9f:77:b6:fe:4a:4e:40:f9:e2:18:a6:2c:e1:c3:a6:eb:
         8a:69:b7:1d:6c:bb:31:68:23:2e:99:60:a2:5d:13:ff:52:87:
         0d:4e:c8:bb:c6:93:c0:4d:bf:64:67:09:03:98:b7:9c:7c:76:
         46:69:45:95:68:c0:f8:de:ac:df:44:f6:f2:23:6b:f7:66:14:
         00:87:c5:22:98:3a:f7:9c:2f:32:fb:c9:30:6a:d8:d3:7a:87:
         71:79:88:1c:58:0b:88:48:6c:2b:1a:b8:79:b6:d1:37:b1:39:
         8a:b1:8b:50:3e:7c:d7:fb:92:12:12:83:a5:d8:af:41:bd:1e:
         26:f1:c4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:31 2025 by rpki-client on console.sobornost.net