Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/34352e3137372e3139312e302f32342d3234203d3e20323732363636.roa
File:                     34352e3137372e3139312e302f32342d3234203d3e20323732363636.roa (raw, json)
Hash identifier:          2VBNtxTzyR1D0PHTY6ihs2E7Rac6w3MG8UUKcl1RrV4=
Subject key identifier:   28:7B:5A:63:BD:AF:45:6C:A0:8B:8C:1C:72:CF:E2:05:59:DC:7C:A9
Certificate issuer:       /CN=6415817E779BB65D15ABFE0332192044330D88A4
Certificate serial:       26A61EEEED36DCAEC29CB2C848D55969143CC6
Authority key identifier: 64:15:81:7E:77:9B:B6:5D:15:AB:FE:03:32:19:20:44:33:0D:88:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6415817E779BB65D15ABFE0332192044330D88A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/34352e3137372e3139312e302f32342d3234203d3e20323732363636.roa
Signing time:             Sun 13 Apr 2025 14:28:04 +0000
ROA not before:           Sun 13 Apr 2025 14:23:04 +0000
ROA not after:            Sun 12 Apr 2026 14:28:04 +0000
asID:                     272666
IP address blocks:        45.177.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/6415817E779BB65D15ABFE0332192044330D88A4.crl
                          rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/6415817E779BB65D15ABFE0332192044330D88A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6415817E779BB65D15ABFE0332192044330D88A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a6:1e:ee:ed:36:dc:ae:c2:9c:b2:c8:48:d5:59:69:14:3c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6415817E779BB65D15ABFE0332192044330D88A4
        Validity
            Not Before: Apr 13 14:23:04 2025 GMT
            Not After : Apr 12 14:28:04 2026 GMT
        Subject: CN=287B5A63BDAF456CA08B8C1C72CFE20559DC7CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:bc:da:48:77:cf:1e:4a:7c:eb:81:44:22:
                    0c:91:be:27:00:57:24:2d:b4:78:ac:2e:68:d7:47:
                    af:f5:43:0b:52:48:56:23:71:dd:74:d3:0b:95:cb:
                    c2:ec:80:9f:42:e7:55:20:a7:89:ce:6b:f9:cf:04:
                    e6:80:eb:81:73:40:d2:05:9d:a1:3e:e2:d1:ea:25:
                    23:b8:89:94:72:d5:42:b9:e0:19:e1:f6:53:d7:5f:
                    d7:89:00:72:ab:db:9a:50:0f:a7:12:11:83:dc:3a:
                    ec:16:db:f5:d6:45:f0:87:5b:11:0f:30:ec:55:54:
                    19:e2:2b:4b:e8:97:fa:9e:34:46:4d:45:f9:bb:bf:
                    c0:b9:39:5b:3e:fd:79:97:87:93:c3:b3:14:6f:c4:
                    4a:50:d1:53:bd:d3:d1:f9:9a:e8:7d:8f:c0:d0:5d:
                    a0:9c:dc:6c:c5:de:d6:24:dc:96:77:7a:73:ae:34:
                    71:03:ee:ee:0c:f3:68:7a:52:26:15:3c:b9:ed:3b:
                    98:bd:cd:61:d5:26:a1:7b:18:51:af:07:89:73:cd:
                    4e:29:d7:e4:69:db:61:e4:54:28:9f:74:a6:0e:3b:
                    5d:e2:b0:c5:0e:89:14:43:17:c9:95:c7:18:0e:0f:
                    4c:5f:67:c3:72:60:f4:73:c0:8c:58:00:8a:b8:42:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7B:5A:63:BD:AF:45:6C:A0:8B:8C:1C:72:CF:E2:05:59:DC:7C:A9
            X509v3 Authority Key Identifier:
                keyid:64:15:81:7E:77:9B:B6:5D:15:AB:FE:03:32:19:20:44:33:0D:88:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/6415817E779BB65D15ABFE0332192044330D88A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6415817E779BB65D15ABFE0332192044330D88A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/34352e3137372e3139312e302f32342d3234203d3e20323732363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d0:32:51:ee:dd:fc:b3:a5:8b:85:86:48:8d:a2:fd:59:dd:
         b5:a9:38:84:27:a1:72:ce:7a:39:11:e9:6a:cb:9b:ac:d5:0e:
         11:f2:ef:49:be:b8:41:77:6e:5f:e1:2a:69:54:4b:f2:19:bd:
         57:dd:ed:9f:79:6b:2f:12:b7:54:b8:52:ab:99:af:3b:8a:b6:
         42:9a:31:32:0b:c1:5b:04:fc:27:59:d0:f4:d0:a4:e0:74:3e:
         9a:6a:c0:43:5e:62:63:b1:57:3f:7f:3f:d7:e9:b2:f6:37:4f:
         9d:a7:dd:36:e5:94:14:a1:04:f6:ed:f3:33:10:91:b4:c5:43:
         ac:48:a1:2c:38:84:02:31:80:6f:51:7e:91:52:5b:f3:3d:e7:
         21:a9:64:1f:50:1a:26:28:ff:2a:72:1a:74:f9:5e:b4:86:10:
         e2:a2:3f:06:4f:7d:fe:bf:1e:04:29:61:72:77:da:92:92:50:
         43:84:82:9f:dc:55:4b:ab:62:06:dc:30:bc:eb:8b:6e:98:3b:
         4f:62:b9:c5:09:c5:23:37:3a:37:3c:cb:2a:94:cf:01:79:c3:
         77:44:cf:8e:a0:da:1a:4b:de:87:48:aa:9a:d5:ee:bc:b2:6a:
         18:85:e6:9a:24:ac:0c:64:67:56:37:34:20:73:d9:5c:a6:2e:
         3a:e4:fb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:52 2025 by rpki-client on console.sobornost.net