Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa
File:                     34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa (raw, json)
Hash identifier:          BY4SD16BwCLGiQCdlfmYRFg3wdhGuI3NPnN3QyHza1M=
Subject key identifier:   9C:E3:8F:8B:9A:87:69:46:84:BF:33:50:5A:DD:60:22:1E:87:4A:F7
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       40752CB3B7D677BD86BE47EF9629CAD7D38DB03F
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa
Signing time:             Fri 07 Mar 2025 03:00:37 +0000
ROA not before:           Fri 07 Mar 2025 02:55:37 +0000
ROA not after:            Fri 06 Mar 2026 03:00:37 +0000
asID:                     269184
IP address blocks:        45.181.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:75:2c:b3:b7:d6:77:bd:86:be:47:ef:96:29:ca:d7:d3:8d:b0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Mar  7 02:55:37 2025 GMT
            Not After : Mar  6 03:00:37 2026 GMT
        Subject: CN=9CE38F8B9A87694684BF33505ADD60221E874AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:88:9f:84:a4:c6:a8:0f:1a:87:5d:37:53:
                    5c:35:4d:12:f0:2c:c2:c1:24:f5:97:78:cb:12:d0:
                    50:8a:8a:f8:28:8f:11:66:82:07:20:93:cf:cc:b2:
                    79:c7:c9:d7:b9:3c:7f:29:9c:bd:66:4d:80:fc:31:
                    86:a2:88:7f:39:38:7b:74:98:b8:c9:3c:02:4d:64:
                    b5:bc:ec:4f:c2:9b:c4:67:6f:75:f5:f2:0b:08:11:
                    5a:77:b8:f6:db:cf:b8:33:ea:1f:58:30:72:aa:22:
                    d2:6c:44:4f:ef:d4:f9:19:24:b3:f2:b8:2d:59:2c:
                    f7:f3:51:60:de:f4:34:33:0f:a6:05:56:39:be:df:
                    e7:87:da:2a:79:0d:27:b2:bd:b4:4d:6a:4b:b7:62:
                    81:88:85:94:7f:36:b9:74:ed:c6:0e:5d:9e:20:3b:
                    7c:22:e9:7d:9c:56:54:df:29:c3:ee:8e:ad:8e:12:
                    4d:1d:4a:9f:ed:98:45:71:1c:91:6d:7e:7d:95:09:
                    0b:e7:f5:af:99:65:89:07:f5:5b:8e:9f:f6:20:6f:
                    75:1b:28:aa:c3:24:84:aa:72:78:0d:75:89:d6:7d:
                    58:b3:82:b3:4e:f5:4b:77:07:a2:15:9d:51:83:58:
                    9f:8a:ed:04:35:26:22:c5:7d:f7:28:87:bb:03:0a:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E3:8F:8B:9A:87:69:46:84:BF:33:50:5A:DD:60:22:1E:87:4A:F7
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:60:e5:fe:22:85:9a:66:98:22:b7:f3:1a:7d:fe:42:1a:
         03:25:45:db:50:84:97:a2:ca:84:a6:08:ed:4c:e8:2a:aa:12:
         b5:6f:00:97:8d:f3:06:16:86:fc:53:2c:d2:0e:81:e8:74:3e:
         e6:01:45:25:c3:3a:f7:a5:77:af:00:14:d8:7e:5f:31:ea:73:
         5f:5c:51:31:5f:c8:4a:8a:90:89:a0:96:07:fd:bd:12:78:17:
         f6:d4:ab:cf:f5:91:6e:6f:78:b5:73:f6:4c:c8:84:81:9d:b1:
         7b:2d:a7:54:9f:21:c0:12:9e:9a:2a:20:c3:9a:cc:57:ae:d3:
         4c:56:cf:6e:92:ff:0c:d0:01:90:a5:ef:69:68:9d:2b:ea:cf:
         3d:2a:72:cb:d8:5b:ac:86:37:a1:95:22:1f:b8:a4:df:fd:d0:
         3d:ae:13:f0:b3:32:6b:37:e5:fb:46:16:0b:ee:c5:f7:91:98:
         6e:94:a5:5b:e6:5f:e4:60:ea:41:58:54:0c:13:41:90:36:73:
         65:94:34:ed:21:b3:1b:57:b5:e9:1e:d0:d8:a2:65:b3:5e:60:
         64:95:9e:77:9d:c4:5c:ad:8e:be:67:d0:72:07:c0:67:70:ce:
         ed:00:f1:6b:eb:5a:9d:20:4d:f7:d3:1f:e4:7d:b6:7c:27:d5:
         c6:d2:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:11 2025 by rpki-client on console.sobornost.net