Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa
File:                     34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa (raw, json)
Hash identifier:          vPCwI7osU5XVMd4zwaC+hIHow7PaLve2zweqHvxoEMY=
Subject key identifier:   1D:56:14:05:F4:D4:FF:0F:BE:CA:D0:23:1D:A3:15:70:A4:18:32:A1
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       51E3477DBFBB98A6076B30306343716D8A4B037E
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa
Signing time:             Fri 07 Mar 2025 03:00:37 +0000
ROA not before:           Fri 07 Mar 2025 02:55:37 +0000
ROA not after:            Fri 06 Mar 2026 03:00:37 +0000
asID:                     269184
IP address blocks:        45.181.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e3:47:7d:bf:bb:98:a6:07:6b:30:30:63:43:71:6d:8a:4b:03:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Mar  7 02:55:37 2025 GMT
            Not After : Mar  6 03:00:37 2026 GMT
        Subject: CN=1D561405F4D4FF0FBECAD0231DA31570A41832A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:4c:c0:75:6a:b3:a0:00:be:11:f9:a4:55:
                    48:b3:a4:d9:22:3e:03:95:c6:21:0e:5b:8e:e3:0c:
                    b2:91:58:99:23:c9:6f:2f:e4:f4:90:78:71:5e:d6:
                    eb:59:11:0e:63:7d:19:c7:c6:40:58:10:ea:65:be:
                    21:b6:99:d1:2d:a7:43:b7:85:44:6f:b3:e0:a7:06:
                    59:05:88:82:26:7b:01:dc:ba:b9:94:b5:0c:99:b0:
                    d6:42:2b:fc:dd:c9:f4:db:55:a3:08:7a:3c:c7:2e:
                    b2:df:a6:04:7a:cf:b2:21:31:cb:3c:c4:a0:4a:ff:
                    41:d7:c9:4f:cc:ce:f4:72:07:5d:71:da:bf:4a:f7:
                    ff:42:2a:c9:db:59:12:85:ff:26:dc:2c:5a:dd:62:
                    e1:a8:5a:a9:f7:b4:8e:b1:a6:02:de:95:bb:e2:ba:
                    03:2b:50:79:d6:28:c4:4a:ac:57:98:63:bc:14:c1:
                    53:d6:6d:23:6d:9a:cc:dd:ba:d9:a4:8b:d3:57:8e:
                    3c:74:20:bf:a5:a5:d8:b0:7d:83:2c:a2:77:bd:7a:
                    60:53:53:6a:cd:e4:d2:a5:47:b9:26:d7:49:d1:44:
                    77:8e:a0:c3:13:eb:99:a1:05:43:ad:a2:c4:05:23:
                    6a:b7:53:c4:b3:f9:c9:66:c7:eb:06:33:e8:cc:9f:
                    93:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:56:14:05:F4:D4:FF:0F:BE:CA:D0:23:1D:A3:15:70:A4:18:32:A1
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b9:85:04:6d:51:59:7a:57:15:c6:9e:7c:b4:85:73:66:63:
         41:61:f3:bc:5f:c7:77:da:01:b7:d8:dd:de:0e:a5:34:d8:aa:
         00:cc:8e:99:f9:93:0d:03:9c:78:ad:f7:c4:66:e5:41:25:5a:
         99:d0:41:1e:17:da:26:bf:fe:4d:be:99:45:39:d8:74:f0:8f:
         85:f2:0d:76:b9:a5:db:8b:9b:5d:e0:10:ed:73:12:33:a8:9c:
         32:a5:51:f8:40:46:44:fb:14:6f:48:9a:6e:c4:50:53:71:f6:
         f7:25:0a:e8:34:0f:ef:cc:3f:3b:38:5b:47:4a:3d:86:8c:78:
         0e:61:6a:5a:db:02:34:83:97:8c:27:a8:d9:9c:fc:80:fc:95:
         b1:04:80:df:ae:8a:82:e8:40:01:1a:32:71:47:08:5c:ef:78:
         19:04:0f:e7:62:a7:bf:71:8d:f1:fa:32:4d:e7:25:82:9d:72:
         da:38:46:0b:a3:17:81:8a:67:af:e5:4f:e6:5b:a0:a1:1b:fa:
         cd:e3:49:2e:3e:b6:89:8f:86:b1:e1:7a:9c:d2:1a:e9:4b:0e:
         35:eb:43:02:05:90:90:82:d2:50:ce:11:58:93:05:0d:21:48:
         5e:ef:db:3a:58:f1:7d:06:b9:bd:19:f3:d0:38:f6:f0:3f:3a:
         47:41:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:23 2025 by rpki-client on console.sobornost.net