Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3232372e38342e302f32322d3232203d3e20323733333039.roa
File:                     34352e3232372e38342e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          33dWS269AOFS2NsRCEUN67E+YAfm57GsCSQde/gmTGM=
Subject key identifier:   7D:82:C7:DB:90:07:20:C1:58:E1:6D:21:70:99:7A:2F:1F:34:4A:A9
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       12721BEC41021C8743A2883F1FA939A7D29B88E5
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3232372e38342e302f32322d3232203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:38 +0000
ROA not before:           Wed 09 Apr 2025 13:48:38 +0000
ROA not after:            Wed 08 Apr 2026 13:53:38 +0000
asID:                     273309
IP address blocks:        45.227.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:72:1b:ec:41:02:1c:87:43:a2:88:3f:1f:a9:39:a7:d2:9b:88:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:38 2025 GMT
            Not After : Apr  8 13:53:38 2026 GMT
        Subject: CN=7D82C7DB900720C158E16D2170997A2F1F344AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:f2:2a:9e:ad:8c:39:83:99:0e:f0:a3:98:
                    ff:8a:7a:ee:39:56:26:bf:82:b9:94:3c:73:a1:35:
                    b1:29:c0:13:34:2f:48:16:e6:3c:4c:23:fc:a2:bf:
                    09:45:be:15:51:9c:c4:1a:a6:2d:7c:42:03:d8:fe:
                    aa:c5:fa:a3:d8:54:91:8c:b5:19:5f:89:be:4a:1e:
                    7f:b2:0e:53:d8:a7:f3:da:a4:89:c1:88:eb:22:68:
                    54:37:3f:17:3f:22:95:1e:02:79:6a:43:e1:fc:d3:
                    db:6d:be:a6:af:43:e0:9e:41:08:22:b6:96:c2:5b:
                    a3:86:a9:df:d9:6a:26:32:6c:22:96:4f:ef:23:af:
                    a6:79:26:30:87:96:38:61:20:e9:ad:53:f2:09:45:
                    07:2b:95:39:56:5b:8b:f7:66:20:87:c5:3f:59:08:
                    e6:18:5c:12:7c:46:2d:0f:9a:d5:84:b5:e4:7a:25:
                    04:08:e4:6c:19:64:d7:21:a3:d5:be:41:b4:40:2e:
                    21:30:00:fd:ce:0b:e0:9d:de:13:35:70:17:92:a6:
                    66:a1:0a:64:70:b3:02:f2:34:46:f6:0d:a2:73:83:
                    00:04:93:d2:61:ce:51:5c:ce:02:00:93:8b:fd:21:
                    94:bf:21:6d:ab:94:80:61:57:e3:d1:d7:0c:a9:f7:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:82:C7:DB:90:07:20:C1:58:E1:6D:21:70:99:7A:2F:1F:34:4A:A9
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3232372e38342e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:6a:a7:77:dc:49:ea:11:b1:64:c6:b0:d1:3e:02:af:33:bb:
         43:a5:54:88:f9:02:c1:c3:4d:3a:bc:5f:48:9b:b9:9f:0e:47:
         ea:23:6c:72:f0:8c:bb:c8:2a:66:de:d8:eb:bd:be:dd:28:49:
         77:55:8a:e9:42:64:63:07:51:32:3a:17:9c:77:1e:cc:aa:59:
         4f:bd:2d:ff:0f:a2:e2:71:b8:26:c3:11:14:06:2c:36:dd:19:
         d2:27:07:51:48:58:20:f9:7e:c1:dc:3b:c1:f7:12:7c:b6:17:
         5c:5f:45:32:88:75:6c:70:1e:ac:eb:a0:3b:c3:db:0a:de:57:
         48:17:2e:79:42:9a:b7:9f:52:70:d1:b2:29:e0:67:62:4d:72:
         0b:65:1a:97:c9:21:bf:68:bd:93:e8:c7:2d:42:b0:d3:65:84:
         d6:d9:c0:d6:65:6c:3a:18:68:65:f7:a5:03:7d:01:54:b3:9b:
         a3:f8:64:b3:b9:ec:c4:25:db:4c:00:17:13:a2:d1:3e:5b:fa:
         9e:72:f2:87:a7:67:79:6f:f9:ba:3e:6b:61:ae:fb:41:3d:35:
         35:6d:ec:e3:ab:15:17:07:15:fd:7a:51:f6:c7:01:ab:4f:33:
         53:04:b8:31:d4:37:3e:5d:dc:05:ec:54:27:40:23:c8:25:dc:
         fb:a3:92:e9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEnIb7EECHIdDoog/H6k5p9KbiOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE0NkI0QUI5RkVCQzczQUZERjEzNTA1QkVDRTE2RDc0
MTc3OUIwMzAeFw0yNTA0MDkxMzQ4MzhaFw0yNjA0MDgxMzUzMzhaMDMxMTAvBgNV
BAMTKDdEODJDN0RCOTAwNzIwQzE1OEUxNkQyMTcwOTk3QTJGMUYzNDRBQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAm/Iqnq2MOYOZDvCjmP+Keu45
Via/grmUPHOhNbEpwBM0L0gW5jxMI/yivwlFvhVRnMQapi18QgPY/qrF+qPYVJGM
tRlfib5KHn+yDlPYp/PapInBiOsiaFQ3Pxc/IpUeAnlqQ+H809ttvqavQ+CeQQgi
tpbCW6OGqd/ZaiYybCKWT+8jr6Z5JjCHljhhIOmtU/IJRQcrlTlWW4v3ZiCHxT9Z
COYYXBJ8Ri0PmtWEteR6JQQI5GwZZNcho9W+QbRALiEwAP3OC+Cd3hM1cBeSpmah
CmRwswLyNEb2DaJzgwAEk9JhzlFczgIAk4v9IZS/IW2rlIBhV+PR1wyp9xlnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfYLH25AHIMFY4W0hcJl6Lx80SqkwHwYDVR0j
BBgwFoAUKka0q5/rxzr98TUFvs4W10F3mwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8yQTQ2QjRBQjlGRUJDNzNBRkRGMTM1MDVCRUNFMTZENzQxNzc5QjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNDZCNEFCOUZFQkM3M0FG
REYxMzUwNUJFQ0UxNkQ3NDE3NzlCMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzQzNTJlMzIzMjM3MmUzODM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMz
MzMzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeNUMA0GCSqGSIb3DQEBCwUAA4IBAQCraqd33Enq
EbFkxrDRPgKvM7tDpVSI+QLBw006vF9Im7mfDkfqI2xy8Iy7yCpm3tjrvb7dKEl3
VYrpQmRjB1EyOhecdx7MqllPvS3/D6LicbgmwxEUBiw23RnSJwdRSFgg+X7B3DvB
9xJ8thdcX0UyiHVscB6s66A7w9sK3ldIFy55Qpq3n1Jw0bIp4GdiTXILZRqXySG/
aL2T6MctQrDTZYTW2cDWZWw6GGhl96UDfQFUs5uj+GSzuezEJdtMABcTotE+W/qe
cvKHp2d5b/m6PmthrvtBPTU1bezjqxUXBxX9elH2xwGrTzNTBLgx1Dc+XdwF7FQn
QCPIJdz7o5Lp
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net