Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/34352e3233302e3136362e302f32332d3233203d3e20323637323031.roa
File:                     34352e3233302e3136362e302f32332d3233203d3e20323637323031.roa (raw, json)
Hash identifier:          3uYzshTLOXvYZhSKwzCr90WK6a7Jy3XKTpMmDK/wqDc=
Subject key identifier:   D2:7D:7E:C2:34:55:B0:88:6D:10:13:1C:C2:7E:6B:51:DB:92:16:DA
Certificate issuer:       /CN=C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B
Certificate serial:       5A0EE8C034BE4054181D395AB30AC1F86C02927F
Authority key identifier: C0:60:8D:D6:D5:C5:A1:5C:1E:13:FA:1F:34:55:F2:A5:59:DD:4C:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/34352e3233302e3136362e302f32332d3233203d3e20323637323031.roa
Signing time:             Thu 24 Apr 2025 13:47:21 +0000
ROA not before:           Thu 24 Apr 2025 13:42:21 +0000
ROA not after:            Thu 23 Apr 2026 13:47:21 +0000
asID:                     267201
IP address blocks:        45.230.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B.crl
                          rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0e:e8:c0:34:be:40:54:18:1d:39:5a:b3:0a:c1:f8:6c:02:92:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B
        Validity
            Not Before: Apr 24 13:42:21 2025 GMT
            Not After : Apr 23 13:47:21 2026 GMT
        Subject: CN=D27D7EC23455B0886D10131CC27E6B51DB9216DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:c7:6e:59:7d:d0:20:54:29:30:96:66:0b:
                    da:82:d0:9e:26:8b:73:6e:7f:6b:c1:b3:25:9a:5c:
                    4d:ec:d8:5b:17:92:88:da:7c:ee:eb:0c:83:1d:7d:
                    a1:c5:06:2c:96:bd:0f:05:e3:1c:7b:e1:b9:88:c6:
                    4c:2c:c6:c4:40:d6:f5:4b:c7:93:75:53:98:9e:54:
                    82:d9:e0:98:26:bf:c0:1a:26:9d:ce:1a:dd:5c:18:
                    f0:2c:35:f0:66:33:3e:5b:ad:b2:ae:b0:f3:d2:1a:
                    3d:3a:c8:df:fc:0b:89:3b:b0:f0:d2:92:e5:7b:5e:
                    6d:04:a8:40:17:06:09:2f:8a:6a:3a:a3:67:41:40:
                    2f:33:06:96:35:61:04:89:b6:e8:db:de:d3:bc:d9:
                    ea:7a:6b:9d:77:f2:3c:c5:d0:96:18:3c:b1:83:b7:
                    ae:4c:a4:ac:b2:18:cb:d4:c8:e2:36:32:af:e1:4f:
                    ad:91:67:a2:79:96:5e:88:6a:0b:57:de:79:1a:2a:
                    2c:8f:ca:fa:08:7f:af:af:49:40:01:bc:ef:64:6a:
                    fe:e0:ea:c3:92:37:42:23:1d:3b:5c:ae:47:0b:f5:
                    8c:a6:36:bd:90:90:b5:af:33:19:12:6b:4f:ac:d7:
                    ba:aa:90:bf:75:e4:2c:75:d7:d0:83:e7:1b:68:db:
                    7a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7D:7E:C2:34:55:B0:88:6D:10:13:1C:C2:7E:6B:51:DB:92:16:DA
            X509v3 Authority Key Identifier:
                keyid:C0:60:8D:D6:D5:C5:A1:5C:1E:13:FA:1F:34:55:F2:A5:59:DD:4C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/34352e3233302e3136362e302f32332d3233203d3e20323637323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:d7:81:77:46:6c:67:c9:67:79:46:f2:28:0b:98:e3:4d:eb:
         13:43:c9:8f:58:12:2b:16:fb:8c:57:ea:a5:09:72:77:7b:93:
         d9:e9:64:fe:a4:35:8d:7d:c4:a4:c5:a5:0d:6d:ef:4c:dc:1b:
         d6:60:a2:71:8f:9e:94:b3:8b:35:53:7a:be:f9:80:e0:0e:b8:
         f1:78:2b:4e:a6:f4:b7:e5:d3:4a:e5:42:4f:8f:4e:b1:79:2e:
         7e:0b:dd:e4:25:3e:9d:b1:3e:21:cd:db:0c:a3:87:eb:2a:83:
         ea:d0:bb:6b:bd:e5:e1:75:43:69:79:01:69:ec:f4:b5:21:e4:
         a5:5f:f0:ce:83:40:55:58:e5:3b:81:a8:31:8f:7b:a3:7c:69:
         55:e6:ba:62:5d:f0:be:7e:da:77:c9:15:1e:34:ab:13:79:6a:
         d0:6d:db:83:49:f0:32:ba:4f:66:c7:e1:6c:aa:3e:70:78:7e:
         98:62:e0:73:d6:e0:13:54:b9:d1:98:8b:f2:c7:fa:27:e3:80:
         6d:f1:16:98:a5:9b:55:42:24:ed:50:c8:a9:7c:d4:ca:03:c3:
         6c:9c:8c:30:71:ad:85:02:14:c1:db:7e:99:3f:83:59:b8:f9:
         c8:1e:c3:35:65:78:b5:e0:45:e0:b1:de:24:06:56:b9:ea:d6:
         cd:c3:2a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:09 2025 by rpki-client on console.sobornost.net