Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/34352e3232352e31322e302f32322d3234203d3e20323636393135.roa
File:                     34352e3232352e31322e302f32322d3234203d3e20323636393135.roa (raw, json)
Hash identifier:          uc84MAlUKgjPLk9WRCx6IVNIl1qVc0KBKTxGeoF0tb0=
Subject key identifier:   5B:4F:BE:F7:ED:0F:06:C2:82:E4:29:6D:4D:2E:DA:B4:09:39:44:12
Certificate issuer:       /CN=FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB
Certificate serial:       0C191CF4B302C1F8CCC70CC42BB1D3C1D82FE3B1
Authority key identifier: FC:73:A4:E3:1D:0C:1C:36:1F:3F:55:58:3E:97:E6:B1:BF:56:84:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/34352e3232352e31322e302f32322d3234203d3e20323636393135.roa
Signing time:             Wed 05 Mar 2025 22:34:28 +0000
ROA not before:           Wed 05 Mar 2025 22:29:28 +0000
ROA not after:            Wed 04 Mar 2026 22:34:28 +0000
asID:                     266915
IP address blocks:        45.225.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.crl
                          rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:19:1c:f4:b3:02:c1:f8:cc:c7:0c:c4:2b:b1:d3:c1:d8:2f:e3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB
        Validity
            Not Before: Mar  5 22:29:28 2025 GMT
            Not After : Mar  4 22:34:28 2026 GMT
        Subject: CN=5B4FBEF7ED0F06C282E4296D4D2EDAB409394412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:85:5e:f4:11:14:c2:09:a1:37:1d:e5:ef:
                    9c:61:40:cd:e4:69:e0:98:7c:e8:e7:27:9e:45:ea:
                    18:8b:36:30:6f:6b:0f:44:73:5a:a0:f6:d4:c3:da:
                    4e:d2:a6:bc:1d:2c:ab:95:e1:cb:35:07:7e:f9:9d:
                    47:3b:88:58:b3:cd:20:82:bd:2b:10:5c:79:47:b8:
                    e4:2d:6f:1f:a1:4f:53:33:e2:16:b0:fe:f8:f5:ce:
                    9f:69:4a:cb:20:c2:e7:05:7d:cb:b0:c2:4d:f5:4e:
                    15:c3:f3:b8:40:ed:72:f7:03:30:8e:06:c2:17:39:
                    51:4b:e4:7b:a6:1e:ec:15:a9:71:86:43:2a:ec:ca:
                    45:a4:75:e1:0e:f8:3f:90:2a:2a:aa:1f:4d:59:8a:
                    be:62:e4:f0:93:fe:5a:ea:a6:ab:8b:05:06:6b:5c:
                    5f:c1:05:c5:8a:f0:47:9f:ac:99:9d:aa:18:84:cd:
                    25:7a:d0:bf:a0:15:7b:b9:86:11:3a:5e:6f:06:47:
                    3a:21:bb:16:12:77:39:14:2f:f2:83:e1:c6:9b:59:
                    a4:ee:d4:09:52:d3:35:72:47:c9:6e:c4:09:60:e1:
                    8c:43:03:23:a6:16:13:ee:3b:8a:8c:64:17:4d:f4:
                    e9:c9:81:f6:05:2c:79:d4:e1:4c:54:6a:4a:42:14:
                    2c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4F:BE:F7:ED:0F:06:C2:82:E4:29:6D:4D:2E:DA:B4:09:39:44:12
            X509v3 Authority Key Identifier:
                keyid:FC:73:A4:E3:1D:0C:1C:36:1F:3F:55:58:3E:97:E6:B1:BF:56:84:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/34352e3232352e31322e302f32322d3234203d3e20323636393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:85:e8:a7:65:a6:b0:fc:6a:fd:bc:9c:52:40:d6:a5:db:a1:
         64:60:19:79:68:ac:a2:27:ce:f3:d9:0e:45:5f:d3:99:f7:6c:
         f2:c3:d8:fe:3b:e9:12:95:8a:11:1a:a9:48:89:e4:e0:5d:13:
         a6:57:97:d1:ee:cd:a4:81:69:cb:d5:9d:fd:09:5e:52:ae:00:
         1c:7b:08:38:b1:86:f6:e3:57:fd:3c:2a:70:a9:07:db:2e:4d:
         58:94:bd:8c:73:59:cd:ce:5a:5c:7e:d1:36:ac:c8:d5:49:63:
         54:92:b7:9c:c4:53:f3:26:a2:6f:2d:8a:6f:db:20:31:eb:39:
         05:cb:9b:4f:50:0b:ba:dc:f7:d8:3f:0b:2a:c6:a2:ef:5a:59:
         7f:53:5e:69:24:bb:81:c3:f3:38:70:29:fc:4a:50:bd:c9:99:
         3d:dc:c8:f9:98:2e:4f:58:17:e5:27:3b:1f:07:6c:56:7a:08:
         cd:86:3c:3a:cc:b8:97:de:d3:62:c4:bb:03:22:e2:18:25:1a:
         19:04:4c:34:84:bc:4a:1b:59:fe:57:cf:e2:63:98:55:c8:27:
         dc:c4:d3:05:3d:1c:10:0a:62:85:4d:b5:19:fa:15:6c:18:c8:
         e4:3b:17:e3:01:3f:1b:dc:4a:81:7a:94:85:41:46:bd:ba:b4:
         3d:b4:5a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:49 2025 by rpki-client on console.sobornost.net