Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/34352e3138392e31362e302f32322d3234203d3e20323639353438.roa
File:                     34352e3138392e31362e302f32322d3234203d3e20323639353438.roa (raw, json)
Hash identifier:          n/rMtBP737zNLnlIAoOHRNN3Is7k45XAw4MTeKHgsd0=
Subject key identifier:   A4:0E:73:D4:10:3F:F0:29:8C:84:A4:BB:FB:6D:A3:6B:8E:0A:56:67
Certificate issuer:       /CN=F467F4F197CE6B4A22E157A50E42BA83A46CF57D
Certificate serial:       40F7EF36317563A9DA4F3EDF5C293762DE850215
Authority key identifier: F4:67:F4:F1:97:CE:6B:4A:22:E1:57:A5:0E:42:BA:83:A4:6C:F5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/34352e3138392e31362e302f32322d3234203d3e20323639353438.roa
Signing time:             Thu 03 Apr 2025 14:58:25 +0000
ROA not before:           Thu 03 Apr 2025 14:53:25 +0000
ROA not after:            Thu 02 Apr 2026 14:58:25 +0000
asID:                     269548
IP address blocks:        45.189.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.crl
                          rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f7:ef:36:31:75:63:a9:da:4f:3e:df:5c:29:37:62:de:85:02:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F467F4F197CE6B4A22E157A50E42BA83A46CF57D
        Validity
            Not Before: Apr  3 14:53:25 2025 GMT
            Not After : Apr  2 14:58:25 2026 GMT
        Subject: CN=A40E73D4103FF0298C84A4BBFB6DA36B8E0A5667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:61:de:e1:cd:bb:82:a0:01:9d:1b:dd:37:75:
                    f0:2d:2e:f1:5c:22:45:1b:27:15:2f:1b:17:0c:ce:
                    cf:b1:65:3e:8d:96:f2:87:53:ed:30:1f:e9:af:7b:
                    53:0c:60:f1:22:d1:3b:e5:26:de:96:c4:ae:fe:71:
                    a3:8b:68:64:bd:df:96:30:fd:55:0b:35:fd:f3:b7:
                    37:e6:7d:68:07:2b:dc:23:c3:e4:e8:de:e3:cf:7c:
                    a4:be:5e:da:04:97:e1:28:1a:81:8d:99:ee:39:95:
                    f7:0c:b8:24:b1:1e:68:53:a3:64:ec:f9:91:60:24:
                    2b:71:f4:d1:c9:1e:77:33:4f:31:20:6d:00:0d:b9:
                    02:6e:d9:08:60:79:39:e7:5f:a3:9a:77:1c:04:4d:
                    4b:92:1b:b1:18:e2:5b:81:c5:f9:eb:6a:9b:ea:3c:
                    16:1b:7b:3f:f9:df:91:43:45:44:8d:a6:65:d9:89:
                    5b:82:f5:90:d3:5f:58:0d:0b:47:b1:24:f7:43:2d:
                    74:79:97:8f:e6:83:e8:88:7d:7f:35:af:f5:8e:81:
                    4a:74:da:9a:fb:ee:03:e8:94:02:a4:c2:ef:d5:f4:
                    96:64:28:d8:50:c2:96:1e:21:db:60:09:97:ef:7d:
                    1c:4d:39:fb:02:ef:1f:84:90:c8:5f:c7:13:bd:80:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0E:73:D4:10:3F:F0:29:8C:84:A4:BB:FB:6D:A3:6B:8E:0A:56:67
            X509v3 Authority Key Identifier:
                keyid:F4:67:F4:F1:97:CE:6B:4A:22:E1:57:A5:0E:42:BA:83:A4:6C:F5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/34352e3138392e31362e302f32322d3234203d3e20323639353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:ba:8d:9c:2c:57:51:21:b2:db:91:c8:7a:b2:c6:3a:71:b9:
         99:a1:26:82:8f:b5:62:51:37:4d:a2:9b:d9:f6:c2:7b:99:aa:
         7b:9e:58:21:24:87:57:21:c7:ce:a3:84:99:2d:b6:fc:5a:73:
         76:7f:03:ef:bd:44:6c:ab:83:96:39:88:d0:51:2f:17:ff:56:
         9d:9d:d0:7f:ff:17:01:af:a3:c7:b8:e5:a7:80:e1:ef:e1:91:
         88:e7:2e:25:84:5b:8a:37:ed:10:ab:94:85:e4:de:13:fe:00:
         89:01:3c:5b:33:65:ed:71:e9:b9:aa:4e:2b:cf:8e:9d:21:53:
         ec:37:f0:cf:1b:41:a6:5f:de:e8:a6:de:1f:2f:aa:14:e2:5a:
         f8:45:e9:6b:cf:b3:13:3e:3c:28:69:81:47:d2:b3:86:c9:47:
         e5:9c:1e:6b:c2:3e:ea:5c:6f:33:80:57:15:34:d7:e8:0f:c5:
         d0:92:58:f7:1f:54:8d:af:9f:56:21:f6:90:74:c2:ab:32:50:
         0d:aa:1a:a1:d6:87:66:b0:97:53:10:1c:6f:e5:34:58:c4:17:
         2b:28:2d:df:c8:a7:32:7b:4b:22:9d:e2:88:bc:ca:ae:86:82:
         9d:2f:5f:37:81:f5:1f:b9:e6:55:84:2e:19:8f:2f:63:8c:60:
         1d:15:22:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:18 2025 by rpki-client on console.sobornost.net