Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/34352e372e3132382e302f32322d3234203d3e203533303632.roa
File:                     34352e372e3132382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier:          QGBfqn9DgQIpzRxbxzniKR8VczmyhMJBgfwPEd70wdI=
Subject key identifier:   9C:C8:80:0D:53:63:73:34:5C:B1:AA:C4:3D:1E:DA:BD:14:32:11:00
Certificate issuer:       /CN=F8410D54252926C3AE5A91AFD3992AC828829031
Certificate serial:       3324779C09AE06C315EDC6F8A85E7A94F79BB959
Authority key identifier: F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/34352e372e3132382e302f32322d3234203d3e203533303632.roa
Signing time:             Mon 07 Apr 2025 18:10:08 +0000
ROA not before:           Mon 07 Apr 2025 18:05:08 +0000
ROA not after:            Mon 06 Apr 2026 18:10:08 +0000
asID:                     53062
IP address blocks:        45.7.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:24:77:9c:09:ae:06:c3:15:ed:c6:f8:a8:5e:7a:94:f7:9b:b9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8410D54252926C3AE5A91AFD3992AC828829031
        Validity
            Not Before: Apr  7 18:05:08 2025 GMT
            Not After : Apr  6 18:10:08 2026 GMT
        Subject: CN=9CC8800D536373345CB1AAC43D1EDABD14321100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:5b:c3:a8:f3:b7:b1:1c:97:75:bb:28:c4:
                    68:51:49:02:46:ea:4b:64:17:55:3f:55:a4:5b:9e:
                    e8:ec:df:f4:fc:a0:9f:7e:81:f7:48:76:69:c3:22:
                    b9:0b:ca:de:82:0e:4a:f5:1e:24:32:69:8b:2c:9b:
                    5d:42:45:62:87:4f:5a:d1:52:9c:b5:9a:7d:2b:1b:
                    ac:b5:9b:fc:03:51:5b:76:a3:2b:e4:36:a1:28:ae:
                    b0:5d:22:c2:cc:cc:de:dc:3b:14:99:cc:21:ff:69:
                    75:40:04:fe:44:ea:d4:38:3f:68:1a:bc:b5:7d:7f:
                    e3:b5:b2:f6:17:a3:e0:9a:be:05:fd:7f:a0:7b:c2:
                    a7:34:5c:48:91:ec:9b:28:37:46:e0:5f:28:ee:04:
                    c1:fd:d8:52:08:fa:c1:f6:78:e7:7e:90:c4:9d:bb:
                    34:26:6b:27:b1:d2:54:1e:b1:8b:6c:d3:44:8a:02:
                    3e:79:3e:5c:7c:20:a1:17:5d:d3:3a:3c:5d:61:71:
                    75:59:7f:33:ac:79:41:44:18:69:58:80:5c:c3:5a:
                    f5:92:3c:b9:81:59:11:11:b0:11:25:c4:69:2f:82:
                    bd:e3:09:9e:5e:ec:79:4f:63:f4:f6:c8:8b:e7:ab:
                    c9:d0:45:b3:34:84:c2:c6:6c:92:db:da:ca:77:93:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C8:80:0D:53:63:73:34:5C:B1:AA:C4:3D:1E:DA:BD:14:32:11:00
            X509v3 Authority Key Identifier:
                keyid:F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/34352e372e3132382e302f32322d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:95:3c:9a:24:59:d1:0a:19:82:f2:c5:6a:da:18:b9:7d:
         de:31:bd:ed:be:42:5a:06:db:20:e8:0f:0b:e6:6f:f0:b4:30:
         ab:a7:d2:0e:46:27:df:75:dc:4f:54:a5:1c:04:87:a0:70:48:
         71:c4:09:a6:d3:3f:39:13:30:39:dc:ac:3f:30:02:05:9d:e3:
         71:cc:57:8f:79:34:cb:18:36:2d:f8:fb:5b:73:87:a1:fc:07:
         cc:52:04:14:15:73:9f:41:7c:8f:95:dc:ee:df:9f:0c:50:d2:
         64:63:52:7b:94:bc:0e:8b:0e:d9:31:fe:ca:5f:9f:6f:1b:eb:
         f2:02:eb:70:89:3e:c3:4c:01:70:d5:03:67:70:2f:5c:7a:18:
         64:11:f9:d0:da:f4:78:af:e1:67:b7:16:0b:3f:8b:d9:a7:a6:
         60:52:16:2a:be:54:48:e2:cb:6c:39:c9:42:2e:bd:63:3d:d4:
         11:25:a6:c1:2f:17:a1:25:af:f3:6f:be:c5:04:dd:cf:29:09:
         82:ff:c9:72:76:39:db:94:9f:c8:b7:a1:da:5f:c9:1a:ba:07:
         2f:e1:fd:40:ba:e2:5e:78:4e:9e:dd:d8:c5:53:75:d2:d2:6e:
         98:f9:d5:f1:e4:6f:55:b4:63:c9:fa:75:69:5f:63:dc:4b:d9:
         d7:d5:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:15 2025 by rpki-client on console.sobornost.net