Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e36342e302f32332d3233203d3e20323638363539.roa
File:                     34352e3136352e36342e302f32332d3233203d3e20323638363539.roa (raw, json)
Hash identifier:          EEDpL7biVVtZqgRpdldvIIahK3P49YBZeNC6PwVrwfU=
Subject key identifier:   5D:F2:43:7E:43:89:69:F8:4C:4E:DD:F4:38:20:80:15:F5:2A:03:DD
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       4584A778660724BE1CE6E866C8FDF7E614344B46
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e36342e302f32332d3233203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:21 +0000
ROA not before:           Tue 01 Apr 2025 13:49:21 +0000
ROA not after:            Tue 31 Mar 2026 13:54:21 +0000
asID:                     268659
IP address blocks:        45.165.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:84:a7:78:66:07:24:be:1c:e6:e8:66:c8:fd:f7:e6:14:34:4b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:21 2025 GMT
            Not After : Mar 31 13:54:21 2026 GMT
        Subject: CN=5DF2437E438969F84C4EDDF438208015F52A03DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:45:c6:0c:7a:5a:9c:05:c3:24:7f:9d:f8:
                    44:7b:6e:4b:40:3f:0b:02:c1:d0:fb:33:8a:b6:ab:
                    df:0d:28:b3:c7:35:98:40:16:f1:ee:08:81:7c:f0:
                    48:78:61:c3:a5:2e:c4:9f:a2:ae:c5:0a:e2:a3:7f:
                    55:19:07:0c:b7:27:c3:ee:3b:18:51:8f:3e:fd:6f:
                    c3:9d:0e:40:be:76:43:c4:45:fa:0a:99:a1:bc:8a:
                    08:3a:24:5e:d3:ed:0c:1a:d1:07:2e:7b:1c:90:fe:
                    4a:10:68:71:9f:a3:1c:aa:51:e8:1a:49:30:2b:62:
                    9b:c1:5a:a0:28:78:16:21:b6:a3:06:b2:f2:ea:57:
                    e8:43:97:1f:0f:d6:4c:e9:5a:0b:7e:f4:1d:d3:96:
                    0e:c7:48:d7:0c:7c:9f:7e:cc:b9:e5:a6:81:3c:4a:
                    93:e9:49:43:12:18:c2:12:c5:e2:d6:85:26:85:17:
                    b5:80:e4:ac:08:72:bb:1f:dd:2d:e4:4b:85:9a:1d:
                    b8:35:00:3c:88:e4:65:32:b1:9b:4a:3e:d0:5e:5e:
                    41:10:43:7a:94:43:7e:29:95:15:5f:56:5d:9e:fb:
                    4f:7f:e6:da:22:2e:16:d9:5b:13:58:d4:9d:28:f2:
                    c2:bb:42:40:02:98:23:19:65:cf:19:fc:80:86:db:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F2:43:7E:43:89:69:F8:4C:4E:DD:F4:38:20:80:15:F5:2A:03:DD
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e36342e302f32332d3233203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:d9:5c:78:00:e1:e5:5c:e4:7a:ba:0f:a8:ca:bf:17:c0:01:
         59:9e:26:f8:09:24:10:9f:e3:88:1a:7a:9a:ab:3a:15:e1:fb:
         60:cc:d4:d3:41:a0:13:f3:2f:4e:dd:92:90:c7:78:c5:c7:6e:
         33:45:73:90:3c:8f:b6:07:f0:b7:ff:22:82:3c:0e:65:e1:83:
         56:c1:f3:72:de:2c:93:93:ed:2b:ba:54:d0:93:7f:45:f7:04:
         8b:3a:f7:a4:de:8f:b3:3a:fc:26:ff:4b:e9:e3:96:2c:8a:8a:
         c6:47:ed:5a:c6:d2:84:13:af:96:b5:40:c0:3a:b4:e8:e0:c0:
         59:ce:89:bd:26:60:ab:85:24:c8:e9:36:c0:e7:2f:0b:e2:93:
         f4:3d:e4:88:38:f2:d3:c2:bd:70:d5:19:26:10:11:bf:d4:80:
         bf:33:76:04:ad:ac:26:cf:6b:5e:5d:76:63:a5:9c:92:1e:1e:
         e5:a4:99:90:0e:c4:33:4e:19:c8:8c:77:4c:b4:6a:6c:2b:0c:
         22:ce:2b:d6:72:2c:6f:b0:1b:fa:5b:35:69:7d:7f:ac:5c:5a:
         de:15:2f:af:b5:f6:d2:85:eb:31:df:a5:11:61:06:4d:97:4d:
         cf:ec:de:f0:8c:04:e2:93:8d:52:fe:de:03:d4:1c:cd:de:7b:
         26:ca:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:40 2025 by rpki-client on console.sobornost.net