Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e32382e302f32332d3233203d3e20323637313435.roa
File:                     34352e3233302e32382e302f32332d3233203d3e20323637313435.roa (raw, json)
Hash identifier:          u/lhR3CHoa7v3eJgTqrpENVDe1bNzDUZyrTvS8ROing=
Subject key identifier:   1B:FB:A7:DC:CC:C7:62:BF:D2:B9:34:14:99:43:85:99:05:33:FC:74
Certificate issuer:       /CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
Certificate serial:       2D10AD60460121F939C3F11BDB6CE82DB00DB2B9
Authority key identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e32382e302f32332d3233203d3e20323637313435.roa
Signing time:             Thu 06 Mar 2025 03:03:25 +0000
ROA not before:           Thu 06 Mar 2025 02:58:25 +0000
ROA not after:            Thu 05 Mar 2026 03:03:25 +0000
asID:                     267145
IP address blocks:        45.230.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 19:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:10:ad:60:46:01:21:f9:39:c3:f1:1b:db:6c:e8:2d:b0:0d:b2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
        Validity
            Not Before: Mar  6 02:58:25 2025 GMT
            Not After : Mar  5 03:03:25 2026 GMT
        Subject: CN=1BFBA7DCCCC762BFD2B93414994385990533FC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:2b:63:1b:9a:a8:ad:79:5c:8f:93:5e:58:
                    95:1f:76:a7:4c:24:e2:a2:b7:1e:a8:ad:ab:01:15:
                    c7:45:65:cd:ca:d7:b2:9a:2c:2e:37:06:b5:64:55:
                    1c:5a:8f:f6:58:eb:b1:99:d5:79:b4:3f:56:98:89:
                    dd:4d:a2:59:4f:56:95:9c:1f:53:60:0c:54:48:eb:
                    e9:7a:f1:b8:12:ed:cb:17:fa:e5:53:a6:ad:cd:c1:
                    70:c6:1b:d4:88:88:da:ae:ca:23:62:b5:03:52:2e:
                    ef:2c:6b:f2:ad:b8:e1:dd:a8:bd:b8:c4:44:7a:41:
                    a7:5c:3c:68:5b:77:9c:05:3f:f9:41:0e:7a:db:ec:
                    2c:83:92:9a:f8:a0:64:8a:13:76:85:0e:d6:0b:bd:
                    95:0c:86:a3:c6:52:f1:1a:ac:e7:29:87:5c:ef:99:
                    9b:d6:eb:31:b8:f5:56:bc:81:f5:02:d7:5e:97:fd:
                    1a:4d:cf:0a:46:53:d2:e7:fa:3e:04:6e:0f:57:c6:
                    5c:25:08:eb:54:66:1c:4e:cd:a5:06:f3:0c:11:8d:
                    36:3c:b2:17:2a:aa:7e:b2:d5:62:6e:d8:80:45:01:
                    a1:06:95:39:c5:6a:37:10:1b:7a:81:51:12:0d:d8:
                    96:95:71:cb:21:9b:f7:6d:77:96:c1:c4:78:1e:04:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FB:A7:DC:CC:C7:62:BF:D2:B9:34:14:99:43:85:99:05:33:FC:74
            X509v3 Authority Key Identifier:
                keyid:3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e32382e302f32332d3233203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:d7:ba:85:63:32:41:f4:2d:b4:f6:ca:f0:67:30:fb:90:
         f8:8a:2d:74:6b:c1:a4:9d:f5:6b:48:ec:13:ee:41:c1:30:90:
         09:a1:91:86:f4:c3:32:f2:cf:0f:73:de:30:74:ab:f4:c2:ed:
         4e:c4:f2:22:d6:ea:43:44:be:12:c9:36:2c:67:7a:35:ad:89:
         22:cb:39:49:b2:79:f5:df:38:21:07:c9:8b:24:71:4d:15:22:
         2a:bd:76:9b:81:2c:ec:60:b1:14:70:8e:c2:f4:77:5c:ef:e8:
         5c:55:07:f4:d7:bd:d4:22:10:82:e1:69:e0:87:13:12:45:b0:
         5a:54:1d:2a:85:2d:d0:87:1c:35:40:4f:20:3e:8c:9b:13:3a:
         47:53:38:69:f4:4e:c3:be:7a:98:73:ea:d0:61:b5:98:25:06:
         15:95:92:91:41:7b:be:ca:81:76:6e:d4:3c:bc:29:26:87:a0:
         be:44:2f:d5:63:86:8b:aa:07:64:f3:63:88:28:14:8e:f8:69:
         f1:c4:ad:53:b1:25:fa:1d:97:2d:78:3b:08:3b:07:f8:82:c7:
         0a:e7:1b:46:61:ac:5c:e5:b3:39:bb:ba:42:5b:2c:c8:47:c9:
         dd:2b:4d:09:28:c1:75:61:3d:72:a1:38:83:aa:a6:98:f3:cc:
         11:91:d4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:15 2025 by rpki-client on console.sobornost.net