Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa
File:                     34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa (raw, json)
Hash identifier:          PoDROXq7zNqNwPpg4bHVhkKOrPE3a92QWBQs0sLrW1g=
Subject key identifier:   E7:1A:AC:E4:1C:7C:F6:57:3D:28:D8:04:8C:D0:41:43:B4:EC:36:1A
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       717CDF153E28422996A956B044B85A616FC8F72A
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa
Signing time:             Fri 07 Mar 2025 03:00:36 +0000
ROA not before:           Fri 07 Mar 2025 02:55:36 +0000
ROA not after:            Fri 06 Mar 2026 03:00:36 +0000
asID:                     269184
IP address blocks:        45.181.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7c:df:15:3e:28:42:29:96:a9:56:b0:44:b8:5a:61:6f:c8:f7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Mar  7 02:55:36 2025 GMT
            Not After : Mar  6 03:00:36 2026 GMT
        Subject: CN=E71AACE41C7CF6573D28D8048CD04143B4EC361A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:b3:8c:3e:91:bf:b5:0c:ad:72:74:a3:ae:
                    0d:95:16:73:f3:7c:94:36:a2:0c:51:02:1d:d3:f0:
                    98:77:f1:c6:6c:90:dd:ba:ee:43:cd:9b:46:36:47:
                    3a:34:a1:92:64:77:a1:5b:a8:63:ea:6d:f3:26:57:
                    d1:53:ec:7f:84:39:9c:a0:af:93:f3:f6:2e:66:1d:
                    29:1e:85:35:ab:48:2f:9a:8f:82:4e:7a:38:f5:77:
                    f4:93:69:8c:f7:d5:67:44:f6:4f:ef:c6:24:21:d1:
                    d4:bb:0d:e8:1f:5a:59:ff:61:fa:86:11:a9:6a:93:
                    28:ba:4d:85:2e:82:73:10:4e:6c:74:24:d1:26:29:
                    eb:28:6e:30:1b:cb:36:9c:ae:dd:e9:ed:3f:a6:4f:
                    58:e9:52:4b:7a:df:69:70:6d:62:68:d1:8a:ad:29:
                    d9:c0:80:54:de:17:92:4a:8c:fa:0a:21:16:90:d3:
                    7f:f5:c0:9d:15:99:24:b6:c1:ec:5d:83:cf:13:fa:
                    d0:92:79:91:c1:52:fc:a4:41:84:69:18:21:64:c1:
                    d7:48:e0:d7:ca:ed:14:ba:32:32:31:c4:32:a0:9f:
                    cc:ab:e5:ef:6c:7a:76:76:5d:c9:da:df:8f:1b:1f:
                    ae:5a:98:e8:92:09:88:2a:73:fe:45:35:ae:62:15:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1A:AC:E4:1C:7C:F6:57:3D:28:D8:04:8C:D0:41:43:B4:EC:36:1A
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:7a:18:db:93:24:5d:41:8b:00:91:1f:8d:76:7e:1b:0a:f6:
         19:c3:5d:92:a9:b8:ce:11:6d:95:83:75:f7:d6:30:af:f5:55:
         6a:87:a8:6e:33:ac:3f:b3:2d:3f:c7:c1:91:fd:82:20:4b:50:
         ae:e7:e6:4b:21:47:ea:05:d9:5c:d0:d5:19:f6:79:d8:e6:ae:
         6b:da:12:76:3a:47:1c:4d:c4:24:fe:33:c3:c8:da:ea:d8:a0:
         ac:72:85:bd:39:d4:fa:4c:6d:49:c9:2d:6e:94:57:54:29:6b:
         a0:fc:22:5b:59:a8:fe:1e:61:09:2d:04:6d:24:80:bd:e7:65:
         6e:58:ee:04:0e:a8:4d:3c:fe:71:fd:ed:2b:5f:6e:1c:be:a7:
         14:fd:d4:03:24:08:ba:9d:a2:7b:5c:cc:d4:d5:f0:d4:97:02:
         25:46:a3:32:da:f4:b7:fe:05:25:42:43:5d:e2:09:4f:51:0e:
         80:4b:a9:ab:12:1a:45:4f:42:1a:e2:e4:e4:5b:f6:77:b9:14:
         6b:a1:43:1c:95:a3:07:04:b9:f5:5c:05:33:f8:79:c1:7b:36:
         6b:b0:ec:18:8c:0e:29:01:04:0c:3d:fe:ec:79:bb:68:8c:71:
         4b:61:7a:32:85:32:9c:ec:4f:ec:1e:9a:13:c3:9e:e9:6b:63:
         7f:33:c8:de
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcXzfFT4oQimWqVawRLhaYW/I9yowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE5Q0I5OUQ5OEMxMUY3QUYxQTQwNUI1RDA1MDc1MDZF
NkY4MDhBNzAeFw0yNTAzMDcwMjU1MzZaFw0yNjAzMDYwMzAwMzZaMDMxMTAvBgNV
BAMTKEU3MUFBQ0U0MUM3Q0Y2NTczRDI4RDgwNDhDRDA0MTQzQjRFQzM2MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRLOMPpG/tQytcnSjrg2VFnPz
fJQ2ogxRAh3T8Jh38cZskN267kPNm0Y2Rzo0oZJkd6FbqGPqbfMmV9FT7H+EOZyg
r5Pz9i5mHSkehTWrSC+aj4JOejj1d/STaYz31WdE9k/vxiQh0dS7DegfWln/YfqG
Ealqkyi6TYUugnMQTmx0JNEmKesobjAbyzacrt3p7T+mT1jpUkt632lwbWJo0Yqt
KdnAgFTeF5JKjPoKIRaQ03/1wJ0VmSS2wexdg88T+tCSeZHBUvykQYRpGCFkwddI
4NfK7RS6MjIxxDKgn8yr5e9senZ2Xcna348bH65amOiSCYgqc/5FNa5iFTgFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5xqs5Bx89lc9KNgEjNBBQ7TsNhowHwYDVR0j
BBgwFoAUKpy5nZjBH3rxpAW10FB1Bub4CKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0ZZSmkxMlVaZ2pRaUV1dFF3V0s3dUgzWVBIbjkxRng2S3B4MmNBWGRH
ZjQvMS8yQTlDQjk5RDk4QzExRjdBRjFBNDA1QjVEMDUwNzUwNkU2RjgwOEE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBOUNCOTlEOThDMTFGN0FG
MUE0MDVCNUQwNTA3NTA2RTZGODA4QTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dGWUppMTJVWmdqUWlFdXRRd1dLN3VIM1lQSG45MUZ4NktweDJjQVhkR2Y0LzEv
MzQzNTJlMzEzODMxMmUzMTMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttYQwDQYJKoZIhvcNAQELBQADggEBAIZ6GNuT
JF1BiwCRH412fhsK9hnDXZKpuM4RbZWDdffWMK/1VWqHqG4zrD+zLT/HwZH9giBL
UK7n5kshR+oF2VzQ1Rn2edjmrmvaEnY6RxxNxCT+M8PI2urYoKxyhb051PpMbUnJ
LW6UV1Qpa6D8IltZqP4eYQktBG0kgL3nZW5Y7gQOqE08/nH97Stfbhy+pxT91AMk
CLqdontczNTV8NSXAiVGozLa9Lf+BSVCQ13iCU9RDoBLqasSGkVPQhri5ORb9ne5
FGuhQxyVowcEufVcBTP4ecF7Nmuw7BiMDikBBAw9/ux5u2iMcUthejKFMpzsT+we
mhPDnulrY38zyN4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:11 2025 by rpki-client on console.sobornost.net