Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/34352e3138302e39322e302f32322d3332203d3e20323639313637.roa
File:                     34352e3138302e39322e302f32322d3332203d3e20323639313637.roa (raw, json)
Hash identifier:          jWWKYUHwzVOPZ4sWr1IcmFBH+qZlUsYWrh1EDGhYXsQ=
Subject key identifier:   D5:AB:59:1E:6A:30:46:CB:DF:57:15:75:56:12:DF:18:D1:7A:49:A3
Certificate issuer:       /CN=DA9315F122902DBF06A55537C7FDDC0362C259E1
Certificate serial:       5E0D3EEFA6F521F22B46D67DE53306932CCABDDB
Authority key identifier: DA:93:15:F1:22:90:2D:BF:06:A5:55:37:C7:FD:DC:03:62:C2:59:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/34352e3138302e39322e302f32322d3332203d3e20323639313637.roa
Signing time:             Sat 07 Dec 2024 15:37:55 +0000
ROA not before:           Sat 07 Dec 2024 15:32:55 +0000
ROA not after:            Sat 06 Dec 2025 15:37:55 +0000
asID:                     269167
IP address blocks:        45.180.92.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.crl
                          rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 08:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0d:3e:ef:a6:f5:21:f2:2b:46:d6:7d:e5:33:06:93:2c:ca:bd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9315F122902DBF06A55537C7FDDC0362C259E1
        Validity
            Not Before: Dec  7 15:32:55 2024 GMT
            Not After : Dec  6 15:37:55 2025 GMT
        Subject: CN=D5AB591E6A3046CBDF5715755612DF18D17A49A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:3c:b3:cc:7c:ae:3c:eb:66:61:84:d0:36:
                    bb:78:6d:10:07:10:c2:9c:60:0a:14:06:cc:8e:30:
                    c4:01:c1:96:0d:eb:3b:78:f0:32:8c:f5:ec:50:6b:
                    50:ed:e1:cd:49:b2:cf:39:bf:da:7f:9d:54:f5:a3:
                    0f:32:b5:1a:84:53:fe:98:7e:f7:2a:b2:8a:b6:ee:
                    3c:ab:f9:af:ed:87:50:b0:2b:d3:8e:0e:f9:27:fa:
                    79:7b:ca:8e:0b:e3:61:2b:3c:d8:8e:36:2d:3f:f4:
                    cc:d3:90:ae:8b:87:eb:41:f3:1e:e7:30:73:e4:bf:
                    4a:78:ec:99:7e:fe:ab:1c:13:7f:86:a8:82:10:cc:
                    f1:43:f8:55:dc:4e:c1:b5:79:15:9b:1d:47:52:18:
                    3d:3d:ce:56:98:14:45:e4:86:78:e3:2e:db:e7:75:
                    00:9d:13:a2:77:16:26:16:6b:5f:07:0e:70:ed:c5:
                    b4:33:5a:34:80:14:3c:af:45:9f:05:5f:b6:74:8d:
                    91:ff:5a:44:91:cc:d8:31:b4:3a:92:9a:56:07:f7:
                    30:e8:ab:c8:d9:af:36:33:c2:81:97:41:40:fb:73:
                    a1:8d:2d:56:db:34:3a:20:a3:84:be:ef:c2:0b:a0:
                    f4:a4:0d:a6:1a:b7:59:fe:1d:ed:ba:74:66:3c:78:
                    58:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AB:59:1E:6A:30:46:CB:DF:57:15:75:56:12:DF:18:D1:7A:49:A3
            X509v3 Authority Key Identifier:
                keyid:DA:93:15:F1:22:90:2D:BF:06:A5:55:37:C7:FD:DC:03:62:C2:59:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/34352e3138302e39322e302f32322d3332203d3e20323639313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:29:ba:1b:c7:6b:1e:1f:92:ed:47:1e:cf:f8:cf:19:18:
         97:aa:7d:02:d6:d0:71:09:7f:43:de:32:04:7f:f8:28:75:a9:
         a6:b8:64:59:50:b0:50:95:fa:c3:af:68:e9:7a:18:b0:81:1a:
         4e:92:e9:24:a6:38:8d:12:bc:c2:39:a1:f0:ab:35:5b:f3:d0:
         5d:1a:6f:f1:88:cc:eb:ff:d6:9a:4c:bf:ab:a3:ad:ff:55:7c:
         6a:2b:93:ce:fd:a4:ef:e9:53:9d:cd:f2:b0:ce:1e:4e:d0:4f:
         d1:d4:86:b9:1a:1d:2e:67:2b:36:48:ec:a4:9b:8e:80:41:b2:
         9c:f6:f9:10:cf:b2:25:8b:68:0b:6d:ad:0e:4f:cf:c1:48:3b:
         6b:19:96:bb:4d:b6:ae:28:39:fc:5d:cd:66:fa:be:47:6a:82:
         43:38:f6:74:96:2b:31:80:b7:3e:9e:73:79:86:c4:bb:c7:ff:
         41:b4:9a:75:17:46:ee:bd:73:36:d7:03:c0:1b:91:00:bd:b9:
         d9:36:88:75:2d:99:ae:a2:5e:12:3e:41:0d:48:bc:ad:ba:a8:
         64:3c:00:29:35:dc:de:f3:36:cc:0a:9f:a3:8a:7c:86:b7:67:
         fa:5b:33:43:51:a0:4e:c1:f1:14:0d:fd:14:6e:48:e4:88:9a:
         33:65:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:07 2025 by rpki-client on console.sobornost.net