Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/34352e3137382e3131362e302f32322d3332203d3e20323639303138.roa
File:                     34352e3137382e3131362e302f32322d3332203d3e20323639303138.roa (raw, json)
Hash identifier:          eJ0SnoP0rJrkB7BcraftQs77yC6H6cOfW2/8PM8SNdE=
Subject key identifier:   E0:58:76:40:AA:7E:A2:CC:C6:F8:DA:5B:29:DA:77:17:1A:BD:6D:FB
Certificate issuer:       /CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
Certificate serial:       08F877EAFDD3BD4A80A34E92C6826CC65054B1B6
Authority key identifier: 83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/34352e3137382e3131362e302f32322d3332203d3e20323639303138.roa
Signing time:             Thu 06 Mar 2025 03:03:19 +0000
ROA not before:           Thu 06 Mar 2025 02:58:19 +0000
ROA not after:            Thu 05 Mar 2026 03:03:19 +0000
asID:                     269018
IP address blocks:        45.178.116.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl
                          rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f8:77:ea:fd:d3:bd:4a:80:a3:4e:92:c6:82:6c:c6:50:54:b1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
        Validity
            Not Before: Mar  6 02:58:19 2025 GMT
            Not After : Mar  5 03:03:19 2026 GMT
        Subject: CN=E0587640AA7EA2CCC6F8DA5B29DA77171ABD6DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f0:ff:6e:de:0b:16:0e:5a:11:64:05:38:c3:
                    59:78:8c:87:48:d6:03:6d:b4:c8:10:dd:0d:83:f7:
                    e3:ba:2b:5f:1f:2b:28:5b:a7:06:ae:90:b0:b8:9d:
                    01:d9:34:29:8b:f1:07:5e:fb:b3:ee:95:c7:b2:0f:
                    e5:1a:85:92:d1:71:39:5f:91:19:3f:46:93:1e:74:
                    82:6b:0b:3a:c7:4f:75:f1:7b:61:61:13:8d:5d:6b:
                    0d:c2:c1:a0:39:4f:97:2e:a1:6a:fd:6a:ed:db:c3:
                    3c:d0:67:e7:e3:07:38:86:7d:82:c2:4b:0d:f4:97:
                    59:3d:2e:49:58:b4:5d:a0:f0:b8:65:0b:ab:69:42:
                    23:4f:6f:2d:99:8c:18:c1:f0:2c:81:6a:0b:70:b2:
                    ac:5c:19:e8:63:d2:e0:72:5c:52:b9:61:45:11:92:
                    bb:21:25:3e:4e:0d:42:da:4e:39:f6:8a:39:04:47:
                    be:7f:34:59:ff:c9:0d:74:e6:17:57:ff:a8:39:e3:
                    9a:9b:c9:02:4e:6a:2a:c3:19:cd:e8:8f:b5:3c:44:
                    7d:67:53:07:4d:f5:b8:b9:cf:d0:94:86:e1:87:69:
                    63:d5:ef:4f:12:96:7e:5f:1d:8e:c4:21:b5:2e:0a:
                    2a:c5:e1:1d:6c:16:67:a9:69:68:5c:01:c2:ba:cf:
                    4c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:58:76:40:AA:7E:A2:CC:C6:F8:DA:5B:29:DA:77:17:1A:BD:6D:FB
            X509v3 Authority Key Identifier:
                keyid:83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/34352e3137382e3131362e302f32322d3332203d3e20323639303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:84:22:a9:45:96:73:1d:08:a3:0f:f1:93:46:b0:fd:54:09:
         1f:ab:e5:d5:98:10:65:ca:c0:02:46:76:60:12:4a:2b:de:39:
         46:60:19:4f:9c:f6:42:e0:7a:a7:0b:13:f0:7a:69:55:ee:59:
         31:9f:44:e7:82:be:76:99:ba:8c:e0:18:fc:5d:ab:ae:4f:16:
         3a:bc:85:f6:d3:d5:c5:21:7b:9c:dc:16:e3:0c:bf:3f:16:16:
         f4:99:19:9e:81:c1:e4:c3:f5:7d:b6:7f:e0:f2:c5:10:ae:a2:
         6f:fa:91:8a:59:55:9d:45:bd:a4:4a:16:22:65:ad:ea:c6:fc:
         72:0e:d8:f3:ba:ce:30:bc:b9:32:46:e9:76:5f:16:95:20:ce:
         e8:d7:a4:7c:10:83:45:f1:74:d2:93:e2:a8:f4:be:57:2c:41:
         79:7c:dd:ff:af:02:a6:ed:01:50:3f:92:c5:1e:25:ba:99:20:
         5d:5e:fd:4a:c7:33:cb:bb:0d:ab:43:32:ce:22:a8:f5:5f:d5:
         25:d5:a0:8f:47:58:f8:5e:3f:83:a7:49:d7:61:0f:ea:59:93:
         09:50:25:df:d1:6b:23:17:32:c0:41:44:cf:67:4b:c3:89:03:
         ea:9a:3c:80:f2:c0:be:b6:56:39:1a:e6:c9:41:58:71:f3:56:
         57:e2:2a:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCPh36v3TvUqAo06SxoJsxlBUsbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNDRTYxNTJDNURDMkFGMkU2MjhENTc0MjM3QjE5ODQz
Q0I4MDU2QzAeFw0yNTAzMDYwMjU4MTlaFw0yNjAzMDUwMzAzMTlaMDMxMTAvBgNV
BAMTKEUwNTg3NjQwQUE3RUEyQ0NDNkY4REE1QjI5REE3NzE3MUFCRDZERkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8P9u3gsWDloRZAU4w1l4jIdI
1gNttMgQ3Q2D9+O6K18fKyhbpwaukLC4nQHZNCmL8Qde+7PulceyD+UahZLRcTlf
kRk/RpMedIJrCzrHT3Xxe2FhE41daw3CwaA5T5cuoWr9au3bwzzQZ+fjBziGfYLC
Sw30l1k9LklYtF2g8LhlC6tpQiNPby2ZjBjB8CyBagtwsqxcGehj0uByXFK5YUUR
krshJT5ODULaTjn2ijkER75/NFn/yQ105hdX/6g545qbyQJOairDGc3oj7U8RH1n
UwdN9bi5z9CUhuGHaWPV708Sln5fHY7EIbUuCirF4R1sFmepaWhcAcK6z0wFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4Fh2QKp+oszG+NpbKdp3Fxq9bfswHwYDVR0j
BBgwFoAUg85hUsXcKvLmKNV0I3sZhDy4BWwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHlNYUJBRm1UYkVidTFZeHN2Mm5kd0NKR1RHY2g1RW1CcFJWaWt2SnVx
QksvMS84M0NFNjE1MkM1REMyQUYyRTYyOEQ1NzQyMzdCMTk4NDNDQjgwNTZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzQ0U2MTUyQzVEQzJBRjJF
NjI4RDU3NDIzN0IxOTg0M0NCODA1NkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R5TWFCQUZtVGJFYnUxWXhzdjJuZHdDSkdUR2NoNUVtQnBSVmlrdkp1cUJLLzEv
MzQzNTJlMzEzNzM4MmUzMTMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsnQwDQYJKoZIhvcNAQELBQADggEBAJiEIqlF
lnMdCKMP8ZNGsP1UCR+r5dWYEGXKwAJGdmASSiveOUZgGU+c9kLgeqcLE/B6aVXu
WTGfROeCvnaZuozgGPxdq65PFjq8hfbT1cUhe5zcFuMMvz8WFvSZGZ6BweTD9X22
f+DyxRCuom/6kYpZVZ1FvaRKFiJlrerG/HIO2PO6zjC8uTJG6XZfFpUgzujXpHwQ
g0XxdNKT4qj0vlcsQXl83f+vAqbtAVA/ksUeJbqZIF1e/UrHM8u7DatDMs4iqPVf
1SXVoI9HWPheP4OnSddhD+pZkwlQJd/RayMXMsBBRM9nS8OJA+qaPIDywL62Vjka
5slBWHHzVlfiKnU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:38 2025 by rpki-client on console.sobornost.net