Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa
File:                     34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa (raw, json)
Hash identifier:          lOCKM/sQAwSd7fbV32ekt353a4Mylb2zpS9lMCOS1fU=
Subject key identifier:   1A:B2:43:32:82:01:B5:18:AE:83:C4:D1:B4:1D:E3:BF:D8:6A:60:43
Certificate issuer:       /CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
Certificate serial:       739AA14376119D16819F3241CA0CB1B24A3132C2
Authority key identifier: BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa
Signing time:             Thu 06 Mar 2025 03:45:37 +0000
ROA not before:           Thu 06 Mar 2025 03:40:37 +0000
ROA not after:            Thu 05 Mar 2026 03:45:37 +0000
asID:                     269382
IP address blocks:        45.184.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl
                          rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 10:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9a:a1:43:76:11:9d:16:81:9f:32:41:ca:0c:b1:b2:4a:31:32:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
        Validity
            Not Before: Mar  6 03:40:37 2025 GMT
            Not After : Mar  5 03:45:37 2026 GMT
        Subject: CN=1AB243328201B518AE83C4D1B41DE3BFD86A6043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:bb:75:65:3a:3c:60:09:b2:8c:60:8f:02:
                    d2:f9:7c:f7:ce:f3:82:f3:7d:f0:ab:94:32:23:6f:
                    26:df:cf:12:7b:c7:68:2e:77:98:9d:27:d0:76:6e:
                    9f:a3:ad:eb:53:56:c7:e8:86:4c:1b:28:89:df:f6:
                    1c:b0:d6:fc:6d:f6:7d:35:e0:aa:d9:6d:6b:b1:d0:
                    e9:7c:c2:90:b0:c7:a8:fd:3b:25:70:76:69:92:c7:
                    6c:84:e2:e4:c1:4d:28:82:33:6d:d6:c2:5c:f9:fc:
                    e6:5d:20:8b:13:51:c5:76:f4:e5:f1:1c:28:cf:a7:
                    7e:a9:8e:ec:fc:5a:90:ef:bb:68:74:62:b1:52:a5:
                    c8:54:a4:ce:e5:a2:8d:b0:b1:8d:64:00:85:51:b7:
                    a5:0a:8a:1a:5e:5a:db:1e:6d:44:df:ae:1e:88:ab:
                    2a:bf:a0:5a:59:4c:88:54:15:28:88:61:e0:3f:d9:
                    df:42:35:5f:73:b7:15:03:48:27:47:b1:79:7a:2b:
                    50:49:b4:6c:3f:73:fd:40:7d:a0:f8:cb:41:88:37:
                    71:59:d5:41:e7:e2:12:fb:c2:3c:7d:8a:97:04:91:
                    4b:54:01:0c:86:7a:bf:8b:1e:07:2f:ad:3f:02:1b:
                    6e:97:fd:fd:0d:5d:cc:bb:e0:77:5e:60:14:03:32:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B2:43:32:82:01:B5:18:AE:83:C4:D1:B4:1D:E3:BF:D8:6A:60:43
            X509v3 Authority Key Identifier:
                keyid:BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:f4:81:d8:88:a1:33:7b:80:9e:ff:3c:dd:79:c6:45:1e:1e:
         83:f7:7e:9c:8d:86:62:49:01:e1:2b:8e:a7:aa:1d:c8:d3:b2:
         ba:bf:7e:72:71:e4:aa:98:11:91:94:70:a2:ee:da:a7:76:3b:
         02:3b:96:ef:91:f1:87:c1:f6:e7:8b:fb:e8:2d:24:77:30:e5:
         99:97:50:fc:93:ab:c7:30:e1:65:e4:12:7b:ce:88:00:c7:96:
         5c:f5:fa:9d:41:27:d7:ed:d7:14:39:c5:51:f7:8e:15:ff:d3:
         6b:e9:9d:97:81:85:1c:8c:d6:38:cf:be:3a:b8:31:fb:e6:5d:
         12:fa:ef:04:7f:3e:c9:71:c9:03:02:90:e0:f8:82:fd:2d:b6:
         65:ad:dc:42:38:75:ea:9a:9b:a1:18:09:24:27:51:a0:34:1e:
         71:cb:af:51:38:ba:ed:58:fd:12:e5:41:ee:ff:80:f0:16:9e:
         5e:5d:68:52:45:ce:e8:26:06:fd:de:15:fb:48:25:5c:6b:fb:
         28:33:dc:73:3c:13:d7:1d:ff:e8:e9:43:f0:b7:81:5a:bd:74:
         cb:19:b3:90:4b:d3:88:46:76:ea:1e:8b:65:b3:a5:4a:18:0d:
         f1:54:aa:c9:fe:f6:39:fc:0d:ab:43:0f:86:53:e4:80:6c:65:
         20:63:89:e3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc5qhQ3YRnRaBnzJBygyxskoxMsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVFOUIxNTZFMEY1ODdDOUJBMDczOTI4NkY3OUE5RkI4
NUM4MEJDMzAeFw0yNTAzMDYwMzQwMzdaFw0yNjAzMDUwMzQ1MzdaMDMxMTAvBgNV
BAMTKDFBQjI0MzMyODIwMUI1MThBRTgzQzREMUI0MURFM0JGRDg2QTYwNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/Lt1ZTo8YAmyjGCPAtL5fPfO
84LzffCrlDIjbybfzxJ7x2gud5idJ9B2bp+jretTVsfohkwbKInf9hyw1vxt9n01
4KrZbWux0Ol8wpCwx6j9OyVwdmmSx2yE4uTBTSiCM23Wwlz5/OZdIIsTUcV29OXx
HCjPp36pjuz8WpDvu2h0YrFSpchUpM7loo2wsY1kAIVRt6UKihpeWtsebUTfrh6I
qyq/oFpZTIhUFSiIYeA/2d9CNV9ztxUDSCdHsXl6K1BJtGw/c/1AfaD4y0GIN3FZ
1UHn4hL7wjx9ipcEkUtUAQyGer+LHgcvrT8CG26X/f0NXcy74HdeYBQDMi8LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGrJDMoIBtRiug8TRtB3jv9hqYEMwHwYDVR0j
BBgwFoAUvumxVuD1h8m6Bzkob3mp+4XIC8MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnpBYVZLS2ZQQzNGeldGTFZ2U29DRUVXS01Tek1NOEZLMXdHeWNGd25M
TG8vMS9CRUU5QjE1NkUwRjU4N0M5QkEwNzM5Mjg2Rjc5QTlGQjg1QzgwQkMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFRTlCMTU2RTBGNTg3QzlC
QTA3MzkyODZGNzlBOUZCODVDODBCQzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z6QWFWS0tmUEMzRnpXRkxWdlNvQ0VFV0tNU3pNTThGSzF3R3ljRnduTExvLzEv
MzQzNTJlMzEzODM0MmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItuIgwDQYJKoZIhvcNAQELBQADggEBABb0gdiI
oTN7gJ7/PN15xkUeHoP3fpyNhmJJAeErjqeqHcjTsrq/fnJx5KqYEZGUcKLu2qd2
OwI7lu+R8YfB9ueL++gtJHcw5ZmXUPyTq8cw4WXkEnvOiADHllz1+p1BJ9ft1xQ5
xVH3jhX/02vpnZeBhRyM1jjPvjq4MfvmXRL67wR/PslxyQMCkOD4gv0ttmWt3EI4
deqam6EYCSQnUaA0HnHLr1E4uu1Y/RLlQe7/gPAWnl5daFJFzugmBv3eFftIJVxr
+ygz3HM8E9cd/+jpQ/C3gVq9dMsZs5BL04hGduoei2WzpUoYDfFUqsn+9jn8DatD
D4ZT5IBsZSBjieM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:11 2025 by rpki-client on console.sobornost.net