Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/34352e372e35322e302f32322d3234203d3e20323733333435.roa
File:                     34352e372e35322e302f32322d3234203d3e20323733333435.roa (raw, json)
Hash identifier:          OrU9L/cqwynZ5tKF+uog4VhLEmqJDQHjIfb6Xd9HMfg=
Subject key identifier:   57:5D:8F:47:BB:25:CC:1D:1D:0F:F0:78:8F:D4:CA:1F:BC:2E:E3:1A
Certificate issuer:       /CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
Certificate serial:       4194EB1B5DA02E934860AB2F75FE154C8F819B15
Authority key identifier: A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/34352e372e35322e302f32322d3234203d3e20323733333435.roa
Signing time:             Thu 06 Mar 2025 18:23:47 +0000
ROA not before:           Thu 06 Mar 2025 18:18:47 +0000
ROA not after:            Thu 05 Mar 2026 18:23:47 +0000
asID:                     273345
IP address blocks:        45.7.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl
                          rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:94:eb:1b:5d:a0:2e:93:48:60:ab:2f:75:fe:15:4c:8f:81:9b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
        Validity
            Not Before: Mar  6 18:18:47 2025 GMT
            Not After : Mar  5 18:23:47 2026 GMT
        Subject: CN=575D8F47BB25CC1D1D0FF0788FD4CA1FBC2EE31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:50:40:f6:56:1d:5b:36:3a:08:fc:6e:91:
                    af:53:8e:24:cd:25:76:10:d6:86:13:48:c2:24:e8:
                    8c:6b:06:26:97:b4:e4:c1:67:cb:ef:cd:78:76:6b:
                    d9:a5:d3:c1:0c:c6:4d:7a:a0:dd:19:66:88:38:e0:
                    0c:65:cb:82:6b:05:51:07:98:9d:81:2e:5e:9c:a1:
                    25:9b:35:6a:26:ba:92:7f:5c:05:41:24:4c:ff:11:
                    6a:73:b8:1b:50:3b:1f:b5:51:b2:dc:9f:a3:34:ad:
                    dc:d7:5f:8e:a6:da:aa:c0:4f:d6:5d:49:f3:7b:b1:
                    75:46:50:84:c5:89:1f:2d:01:32:02:1f:bd:4a:31:
                    b7:a3:d2:87:bf:97:b2:9a:02:2a:53:f2:4e:f1:1e:
                    8c:db:46:c6:3b:4f:a5:33:b4:c9:07:d8:cd:9c:bc:
                    36:bd:7c:49:09:d0:81:d1:7a:2b:44:f3:9c:61:5e:
                    a7:d4:b0:ed:8a:7c:fa:66:b0:6d:da:d8:3b:91:10:
                    e5:75:7a:0c:16:a5:10:64:ae:86:a9:52:5b:6f:13:
                    38:89:54:bb:2a:d5:7d:4d:77:75:12:39:0e:ba:1d:
                    b5:56:a8:8a:77:57:e1:c2:6f:40:b4:e4:3d:33:2b:
                    b7:f4:b4:0b:7e:29:f4:2c:4c:d6:fa:2d:f3:38:1a:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5D:8F:47:BB:25:CC:1D:1D:0F:F0:78:8F:D4:CA:1F:BC:2E:E3:1A
            X509v3 Authority Key Identifier:
                keyid:A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/34352e372e35322e302f32322d3234203d3e20323733333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:e6:8e:f9:d2:04:7d:bc:39:1d:2d:cc:2a:28:f8:5b:58:16:
         11:7a:26:77:9a:cc:34:35:1b:b2:40:a4:e3:95:74:4d:0f:4e:
         5f:73:8b:21:e4:9d:d4:a3:10:74:60:19:b3:ff:fb:54:02:66:
         4b:f6:36:5d:61:c4:39:88:97:ad:c4:08:19:61:2d:9c:56:51:
         60:ab:80:b5:04:dc:89:2e:17:97:b5:6e:96:61:63:44:a2:f4:
         8e:8f:c6:f2:d6:59:f9:3d:ca:e2:be:3e:e7:43:d9:1f:13:ee:
         ef:f4:56:fe:bd:21:92:e8:42:59:5e:5a:4c:73:7e:14:35:4c:
         22:5d:41:4b:3f:b3:51:da:f4:ae:09:dc:e7:e7:89:1e:90:39:
         1c:af:bb:b9:3e:67:9a:a3:9d:69:42:0e:30:a7:25:39:b0:67:
         44:b2:ca:ef:a1:a6:a9:43:fe:5a:c8:ae:d0:59:22:38:af:2d:
         cf:82:db:e6:a9:16:ca:bf:f3:2d:61:eb:d8:e3:59:a5:e7:c8:
         1e:05:8b:2b:2d:ab:c9:04:73:bc:28:e5:83:d1:35:81:8c:26:
         6f:52:48:07:64:ac:52:c5:ad:49:c6:c3:9e:c0:4a:85:46:42:
         82:6c:20:15:7b:7d:3b:e8:ce:47:c3:04:c1:db:43:b3:1b:6e:
         f6:d1:fa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:45 2025 by rpki-client on console.sobornost.net