Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa
File:                     34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa (raw, json)
Hash identifier:          hhWP0ZOFP9QkXD1TLCXf2DK00yVyWv88kwhVjqWeg9Y=
Subject key identifier:   C9:08:91:D4:FA:77:A7:C9:9D:A2:4F:8C:56:E6:BC:FD:74:ED:CD:17
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       3865F7E7A5B95953DB09354B152A3932181BDACB
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa
Signing time:             Fri 07 Mar 2025 03:00:37 +0000
ROA not before:           Fri 07 Mar 2025 02:55:37 +0000
ROA not after:            Fri 06 Mar 2026 03:00:37 +0000
asID:                     269184
IP address blocks:        45.181.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:65:f7:e7:a5:b9:59:53:db:09:35:4b:15:2a:39:32:18:1b:da:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Mar  7 02:55:37 2025 GMT
            Not After : Mar  6 03:00:37 2026 GMT
        Subject: CN=C90891D4FA77A7C99DA24F8C56E6BCFD74EDCD17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:5b:3d:74:d1:6d:06:7b:68:d2:a0:07:53:
                    b4:44:2e:73:ed:c7:39:85:69:59:83:24:f4:c5:27:
                    fd:16:c2:e4:72:2c:3c:7f:de:f0:fa:63:6b:18:20:
                    11:9b:30:ce:e2:a9:72:37:f7:b0:ae:d8:67:1d:33:
                    8a:e5:0f:17:7d:b9:32:8b:3a:05:b2:cb:c5:b8:99:
                    83:e7:67:e9:db:88:3c:b0:db:01:f2:c7:23:be:88:
                    f0:20:1d:0e:53:2d:cf:1d:9d:d7:7e:d0:c9:99:71:
                    b5:23:2b:03:df:66:2d:3b:2b:7e:26:3c:2f:43:72:
                    3d:6a:41:0b:7f:b0:24:7f:0b:57:04:44:70:0b:75:
                    17:89:ed:9d:9f:01:a7:da:a4:0b:a9:64:d2:80:15:
                    a6:bd:97:8d:36:e3:8a:f8:98:3b:81:df:a5:ab:c5:
                    b2:7c:7e:fe:0f:14:fb:2a:ae:fe:06:a8:fc:e6:50:
                    34:1e:8e:d4:d1:04:3e:13:c8:cf:d9:fb:6b:5c:ac:
                    2c:e5:0e:14:63:00:a3:cf:99:2d:08:59:44:51:af:
                    2b:ce:72:f8:3a:e1:e4:5b:b2:be:eb:91:f7:2e:76:
                    af:71:00:38:72:dd:d8:de:09:10:ed:fb:cc:07:57:
                    5d:d7:65:cd:a8:7d:18:5a:fd:28:9b:39:48:52:51:
                    f0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:08:91:D4:FA:77:A7:C9:9D:A2:4F:8C:56:E6:BC:FD:74:ED:CD:17
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f7:9c:ea:cc:47:df:0f:6b:54:f4:b7:c4:21:48:d0:63:0d:
         62:46:46:5c:2b:05:17:cb:c4:7f:ac:d4:d7:eb:32:28:b9:6a:
         e9:c2:53:da:46:1e:9a:72:91:93:dc:fc:ab:2a:9d:fc:a7:4d:
         dc:a4:08:96:10:6c:79:0a:bb:5f:b4:52:44:85:4e:82:62:71:
         a0:f3:09:cb:90:8b:b4:2a:46:d8:3f:0d:27:5b:f6:43:d4:97:
         46:0c:b6:82:35:d7:49:47:b5:75:5e:4f:fb:f9:61:90:3a:f9:
         46:8d:26:7d:4a:32:21:c3:d3:15:19:75:35:45:37:81:8e:32:
         f7:44:0d:55:22:87:f8:02:cf:72:d7:cc:78:5d:4d:40:fe:4e:
         d3:8b:1b:99:b9:44:33:d4:10:09:31:ed:c2:30:c5:ab:e1:33:
         18:44:2a:db:c1:9c:94:30:0d:3b:fc:79:fc:0c:13:c3:be:24:
         fe:ba:62:a2:64:67:d9:84:0c:7c:c8:7a:84:63:c8:72:4a:4a:
         72:5b:c4:06:fa:41:2e:84:89:5a:ab:86:88:37:a2:d6:42:00:
         78:de:2b:d6:64:79:91:d8:9a:ac:c7:28:39:df:00:46:23:47:
         04:a5:6c:69:f0:9d:e0:89:b0:72:01:f6:ef:b5:d9:ec:5a:97:
         82:d5:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:11 2025 by rpki-client on console.sobornost.net