Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231352e302f32342d3234203d3e20323639313131.roa
File:                     34352e3137382e3231352e302f32342d3234203d3e20323639313131.roa (raw, json)
Hash identifier:          gpFjnQSOJv2TRAo7QsVulZQ2zqLzAhAvnZoSG421YlI=
Subject key identifier:   D8:7C:01:37:00:B8:BA:E5:0B:E7:28:DF:83:C3:4C:C8:0C:53:0C:B1
Certificate issuer:       /CN=6B5D42D93E58C00245A6501E9C01C833BB782217
Certificate serial:       2BB81295F383FA7E968455EA22D6E78904AF1625
Authority key identifier: 6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231352e302f32342d3234203d3e20323639313131.roa
Signing time:             Wed 05 Mar 2025 23:49:31 +0000
ROA not before:           Wed 05 Mar 2025 23:44:31 +0000
ROA not after:            Wed 04 Mar 2026 23:49:31 +0000
asID:                     269111
IP address blocks:        45.178.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl
                          rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 22:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b8:12:95:f3:83:fa:7e:96:84:55:ea:22:d6:e7:89:04:af:16:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5D42D93E58C00245A6501E9C01C833BB782217
        Validity
            Not Before: Mar  5 23:44:31 2025 GMT
            Not After : Mar  4 23:49:31 2026 GMT
        Subject: CN=D87C013700B8BAE50BE728DF83C34CC80C530CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:13:c3:65:db:8e:bf:e6:8e:b3:d5:be:0d:
                    c1:78:a8:d2:08:fc:22:39:1e:20:79:74:af:bc:04:
                    ed:85:42:85:3f:27:24:bd:75:00:a6:9b:bf:c8:7e:
                    02:34:c7:c9:99:6a:e2:b1:6d:e7:a9:54:d7:a8:c5:
                    6e:49:df:dd:29:1e:88:cf:d4:45:2b:c1:0a:56:1a:
                    18:76:ac:be:74:0b:30:b7:31:25:f2:4b:ec:b6:fc:
                    27:e4:99:c9:98:46:cd:1f:d4:b6:de:8f:b4:1a:70:
                    3f:46:02:33:40:70:9d:bb:8c:eb:c5:49:60:45:63:
                    70:56:05:90:0c:eb:05:ef:7d:4e:47:36:f5:32:d9:
                    0b:60:99:e1:8c:76:20:e2:fd:7e:c2:ae:75:09:ac:
                    6b:93:c8:92:05:5b:11:a3:0a:9e:7f:b4:47:0b:2d:
                    34:41:8e:6e:5e:42:b4:58:60:a6:da:89:77:8f:95:
                    f7:6f:77:3e:93:f1:e2:b4:b1:aa:c8:3e:a0:19:00:
                    1b:39:1f:f3:77:87:0d:e4:50:52:b8:82:05:39:97:
                    d6:fa:05:25:23:fe:7b:8b:b0:b6:b0:25:9f:24:85:
                    99:11:84:25:ab:03:21:53:1b:7c:8e:a1:30:8c:4e:
                    fa:81:9a:27:97:77:3c:3c:38:21:bc:4d:2d:cb:cd:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7C:01:37:00:B8:BA:E5:0B:E7:28:DF:83:C3:4C:C8:0C:53:0C:B1
            X509v3 Authority Key Identifier:
                keyid:6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231352e302f32342d3234203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:4a:ce:0c:7a:a0:de:d6:23:3f:ff:8f:94:ea:e1:db:2c:0e:
         25:32:19:fe:b8:bb:f0:4a:88:78:01:13:15:7d:24:e2:98:59:
         73:55:09:0c:d8:ce:f5:52:70:ee:f5:cc:45:ca:31:11:3c:bc:
         c4:82:f3:08:59:b5:4f:63:79:9a:a0:c7:72:c0:72:cd:79:0f:
         9d:e0:2c:11:28:61:1f:bd:80:e5:52:e0:c7:25:30:2b:51:18:
         da:d7:ed:64:45:32:94:85:b9:16:c0:0d:05:9f:05:32:e6:b0:
         7a:1b:14:8a:93:4b:cd:35:e4:d1:64:17:00:99:6c:62:bf:56:
         4c:18:dc:67:a1:d8:7d:dc:40:67:e3:49:0d:a2:d1:3b:04:ea:
         0c:3b:05:33:4a:11:54:99:c3:21:36:53:c7:c5:32:c3:d7:db:
         3e:35:ab:b3:72:1b:92:59:24:aa:06:cf:6a:88:99:8c:84:cb:
         72:81:48:ae:9f:61:60:db:c8:eb:0d:22:ce:8d:27:d4:9a:f3:
         ba:6d:c8:de:69:b7:c5:aa:cb:0e:f2:8f:25:0d:9a:a4:48:50:
         ad:47:f5:1c:ed:a2:8c:50:28:99:03:c3:6f:a8:02:89:93:e2:
         50:29:31:ed:4e:41:6b:5d:4e:14:ff:21:d8:f8:47:1d:0e:f8:
         d2:5e:66:4d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUK7gSlfOD+n6WhFXqItbniQSvFiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1RDQyRDkzRTU4QzAwMjQ1QTY1MDFFOUMwMUM4MzNC
Qjc4MjIxNzAeFw0yNTAzMDUyMzQ0MzFaFw0yNjAzMDQyMzQ5MzFaMDMxMTAvBgNV
BAMTKEQ4N0MwMTM3MDBCOEJBRTUwQkU3MjhERjgzQzM0Q0M4MEM1MzBDQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kRPDZduOv+aOs9W+DcF4qNII
/CI5HiB5dK+8BO2FQoU/JyS9dQCmm7/IfgI0x8mZauKxbeepVNeoxW5J390pHojP
1EUrwQpWGhh2rL50CzC3MSXyS+y2/CfkmcmYRs0f1Lbej7QacD9GAjNAcJ27jOvF
SWBFY3BWBZAM6wXvfU5HNvUy2QtgmeGMdiDi/X7CrnUJrGuTyJIFWxGjCp5/tEcL
LTRBjm5eQrRYYKbaiXePlfdvdz6T8eK0sarIPqAZABs5H/N3hw3kUFK4ggU5l9b6
BSUj/nuLsLawJZ8khZkRhCWrAyFTG3yOoTCMTvqBmieXdzw8OCG8TS3LzXwxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2HwBNwC4uuUL5yjfg8NMyAxTDLEwHwYDVR0j
BBgwFoAUa11C2T5YwAJFplAenAHIM7t4IhcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjZLdU43NjhlTTNrb3Q0SndESEFDOUhWNGNhd0hXY1l5bUNmbkp2ZFlX
b3AvMi82QjVENDJEOTNFNThDMDAyNDVBNjUwMUU5QzAxQzgzM0JCNzgyMjE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCNUQ0MkQ5M0U1OEMwMDI0
NUE2NTAxRTlDMDFDODMzQkI3ODIyMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y2S3VONzY4ZU0za290NEp3REhBQzlIVjRjYXdIV2NZeW1DZm5KdmRZV29wLzIv
MzQzNTJlMzEzNzM4MmUzMjMxMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtstcwDQYJKoZIhvcNAQELBQADggEBAIpKzgx6
oN7WIz//j5Tq4dssDiUyGf64u/BKiHgBExV9JOKYWXNVCQzYzvVScO71zEXKMRE8
vMSC8whZtU9jeZqgx3LAcs15D53gLBEoYR+9gOVS4MclMCtRGNrX7WRFMpSFuRbA
DQWfBTLmsHobFIqTS8015NFkFwCZbGK/VkwY3Geh2H3cQGfjSQ2i0TsE6gw7BTNK
EVSZwyE2U8fFMsPX2z41q7NyG5JZJKoGz2qImYyEy3KBSK6fYWDbyOsNIs6NJ9Sa
87ptyN5pt8Wqyw7yjyUNmqRIUK1H9RztooxQKJkDw2+oAomT4lApMe1OQWtdThT/
Idj4Rx0O+NJeZk0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:45 2025 by rpki-client on console.sobornost.net