Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e322e302f32342d3234203d3e20323637353536.roa
File:                     34352e37302e322e302f32342d3234203d3e20323637353536.roa (raw, json)
Hash identifier:          YDCbdod1edqSj0XkHpf4Z/I9u6TPa/ygWhU47/MsGOE=
Subject key identifier:   82:0F:F8:21:C6:DF:A5:87:60:67:3E:1E:F4:96:AA:AF:7E:02:64:E8
Certificate issuer:       /CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
Certificate serial:       3799B6BB0A7635FE74BDDA982567506519CC9A0A
Authority key identifier: 23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e322e302f32342d3234203d3e20323637353536.roa
Signing time:             Tue 01 Apr 2025 12:50:40 +0000
ROA not before:           Tue 01 Apr 2025 12:45:40 +0000
ROA not after:            Tue 31 Mar 2026 12:50:40 +0000
asID:                     267556
IP address blocks:        45.70.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:99:b6:bb:0a:76:35:fe:74:bd:da:98:25:67:50:65:19:cc:9a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
        Validity
            Not Before: Apr  1 12:45:40 2025 GMT
            Not After : Mar 31 12:50:40 2026 GMT
        Subject: CN=820FF821C6DFA58760673E1EF496AAAF7E0264E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1d:37:64:63:b8:5b:cf:cc:96:cd:55:21:24:
                    44:18:e0:23:a2:05:84:93:d3:3b:3b:c3:8d:34:ea:
                    b5:21:e7:ca:8a:dd:cd:15:f1:7e:a1:8a:c6:1d:43:
                    32:37:87:9a:09:94:18:0d:b5:28:a2:b3:57:be:06:
                    8a:64:f8:8d:51:fb:0c:17:19:94:64:78:3b:bf:17:
                    ca:81:03:d3:86:59:c6:a2:ee:9d:68:d6:97:7d:ff:
                    d6:6c:40:47:dc:b3:2d:8a:b1:61:2d:7b:ed:5d:bb:
                    b4:e8:3c:e9:c9:25:ba:03:71:31:3f:10:d4:07:f4:
                    8b:2e:89:bb:29:22:5e:14:ac:77:e3:38:38:cb:b0:
                    82:66:c4:db:c9:e7:cd:9a:db:7e:f9:18:9b:f9:63:
                    e5:f7:28:77:7d:bc:54:58:dd:c4:1d:a7:5a:86:a8:
                    00:69:c9:37:1e:c8:d9:24:3c:d4:7c:c3:1a:0c:f8:
                    f9:af:ed:e1:66:cf:87:52:75:0a:44:ff:0d:22:3f:
                    8f:ba:98:8e:b0:28:15:c7:ae:3d:20:82:d9:49:39:
                    53:a8:ae:52:19:21:c1:ca:29:b2:2e:cb:5d:f5:f0:
                    2a:35:d9:a6:35:bb:b9:18:93:70:95:b2:f6:22:f3:
                    e5:12:74:5a:b0:25:0d:36:fe:20:44:7e:d5:55:67:
                    b6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0F:F8:21:C6:DF:A5:87:60:67:3E:1E:F4:96:AA:AF:7E:02:64:E8
            X509v3 Authority Key Identifier:
                keyid:23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e322e302f32342d3234203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e1:a5:2e:66:54:de:ae:c9:fe:5a:bc:8a:6e:e6:a4:a3:3c:
         48:68:7c:eb:ef:bf:87:21:66:f2:48:31:0a:1b:75:41:8e:98:
         50:66:42:2e:31:4f:12:bd:8f:87:d9:d1:1d:92:9c:7e:c1:75:
         16:6d:1d:cb:58:fa:96:0e:95:af:93:99:fb:45:09:25:5a:80:
         f5:2b:a9:e9:c6:9d:1c:14:65:6f:c4:72:28:09:72:a9:2c:58:
         d5:e1:1c:8b:e6:a7:8c:f6:ff:18:38:59:0b:52:49:6d:fe:37:
         dd:f5:cd:13:84:4b:81:e7:0e:d4:ea:95:f2:bb:d4:e5:c0:cd:
         91:ff:f7:23:ec:1d:48:a0:9c:b4:a8:93:6e:1d:7c:05:88:a1:
         c5:a5:c3:77:fe:de:57:bb:2e:b5:fd:b6:e5:aa:e9:d3:1e:e5:
         d9:26:66:b5:07:9a:e6:6e:6b:de:f6:2f:a9:af:01:37:af:2a:
         c9:76:25:d3:e6:17:81:b4:df:5c:bb:61:93:06:47:bd:ea:3b:
         4a:45:c1:3d:66:19:f2:b0:6a:6c:0e:fa:50:72:1e:27:88:ee:
         ad:60:0b:a9:9e:e7:74:96:25:b1:0d:e6:35:16:32:fd:90:c4:
         ef:98:57:27:fe:c2:e8:b0:bf:4e:84:c8:3e:fd:f0:d6:30:9c:
         69:ac:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:40 2025 by rpki-client on console.sobornost.net