Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa
File:                     34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa (raw, json)
Hash identifier:          hEdsYPpEYPD/H7JxaI1qlIgBP5CxC1rxiVbomFZxPTA=
Subject key identifier:   C3:F6:5F:E3:7F:47:3C:F4:C1:6A:E8:2D:9A:FA:F4:3A:6D:6F:CC:A6
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       6B2949FA52EF64AC3247D27CA2E4FC293C6070C3
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa
Signing time:             Fri 07 Mar 2025 03:00:36 +0000
ROA not before:           Fri 07 Mar 2025 02:55:36 +0000
ROA not after:            Fri 06 Mar 2026 03:00:36 +0000
asID:                     269184
IP address blocks:        45.181.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:29:49:fa:52:ef:64:ac:32:47:d2:7c:a2:e4:fc:29:3c:60:70:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Mar  7 02:55:36 2025 GMT
            Not After : Mar  6 03:00:36 2026 GMT
        Subject: CN=C3F65FE37F473CF4C16AE82D9AFAF43A6D6FCCA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:81:32:82:eb:9b:d7:7b:e1:63:c0:85:ae:29:
                    4c:85:f2:3e:a2:d4:aa:7e:97:51:aa:ad:e3:64:b3:
                    9f:16:f5:e1:5c:03:d4:74:24:8e:03:e3:26:e7:62:
                    2e:77:d6:7c:b4:ba:53:0c:7c:b0:bb:2e:72:ea:64:
                    5f:cb:2d:e9:e2:f1:a7:a2:bc:90:0e:a2:b7:01:80:
                    32:53:44:6f:b6:dd:02:2f:5d:e0:a1:e2:78:c0:6a:
                    0e:2e:1e:39:35:c1:b6:28:9c:f1:58:03:0b:63:6b:
                    35:3e:f2:0e:2a:55:27:b4:c2:40:e8:cd:23:2e:f5:
                    a8:ad:eb:52:29:3f:73:bf:19:c4:cd:6d:17:e8:f3:
                    99:54:3c:88:5c:6e:89:5d:d5:d9:9b:16:b9:c4:21:
                    c4:48:74:5b:92:10:19:87:c7:7c:99:67:13:87:71:
                    92:5f:f7:9b:f3:10:98:da:93:b0:1b:3c:f8:01:00:
                    f2:de:12:58:90:d4:d1:ee:4c:59:4b:cd:15:52:a4:
                    c5:9f:d4:77:57:bb:09:ab:aa:3d:12:9a:2b:b5:5a:
                    d9:20:87:b2:af:eb:e2:5f:1b:04:82:67:33:6a:a6:
                    cd:84:79:9d:e8:77:c9:3f:77:55:c2:6c:1e:6f:58:
                    21:75:9f:51:ea:93:59:5e:8b:9c:70:83:63:d2:84:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F6:5F:E3:7F:47:3C:F4:C1:6A:E8:2D:9A:FA:F4:3A:6D:6F:CC:A6
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:9c:a6:ea:77:ca:8f:cf:f7:bd:fa:90:4d:87:55:48:a7:7c:
         7a:35:5a:b0:f2:48:2c:10:1a:08:4c:7c:dd:4a:cd:f7:10:ff:
         56:56:82:b9:6d:47:3e:3b:39:f4:00:88:ec:61:47:09:96:10:
         a3:0d:21:06:5b:86:68:e8:c2:6d:55:d3:ae:c9:b8:be:2b:5d:
         89:4b:cf:04:2b:76:f7:93:71:26:18:7e:99:aa:83:1e:dd:3b:
         d0:13:16:2c:35:3e:a1:19:71:87:1c:3f:64:5e:bb:2c:b5:c8:
         4b:b5:15:8b:28:6e:ae:1b:2f:f0:66:3c:a2:8c:97:93:93:97:
         81:1a:dd:6f:67:1a:cd:90:06:c2:f3:f1:71:60:e7:1e:8f:76:
         69:34:fa:f2:95:61:d5:7e:fd:53:ff:60:29:3e:df:0a:a6:39:
         bb:fe:d6:26:8d:54:d7:26:c5:8f:df:99:fc:64:ed:f2:79:a4:
         84:f9:a1:27:48:7e:fb:74:14:d5:d2:1c:f4:4f:e5:eb:1d:8e:
         1f:ee:13:47:a5:e0:7a:63:24:69:c6:2f:27:7e:f6:37:cb:dd:
         6e:66:1b:c1:bc:56:47:94:77:19:eb:bf:e7:a3:3f:64:1b:fe:
         26:aa:80:63:a4:cb:22:d4:25:c6:7a:0f:d7:1b:7b:c8:d7:80:
         7f:ce:b2:b1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaylJ+lLvZKwyR9J8ouT8KTxgcMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE5Q0I5OUQ5OEMxMUY3QUYxQTQwNUI1RDA1MDc1MDZF
NkY4MDhBNzAeFw0yNTAzMDcwMjU1MzZaFw0yNjAzMDYwMzAwMzZaMDMxMTAvBgNV
BAMTKEMzRjY1RkUzN0Y0NzNDRjRDMTZBRTgyRDlBRkFGNDNBNkQ2RkNDQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4gTKC65vXe+FjwIWuKUyF8j6i
1Kp+l1GqreNks58W9eFcA9R0JI4D4ybnYi531ny0ulMMfLC7LnLqZF/LLeni8aei
vJAOorcBgDJTRG+23QIvXeCh4njAag4uHjk1wbYonPFYAwtjazU+8g4qVSe0wkDo
zSMu9ait61IpP3O/GcTNbRfo85lUPIhcbold1dmbFrnEIcRIdFuSEBmHx3yZZxOH
cZJf95vzEJjak7AbPPgBAPLeEliQ1NHuTFlLzRVSpMWf1HdXuwmrqj0Smiu1Wtkg
h7Kv6+JfGwSCZzNqps2EeZ3od8k/d1XCbB5vWCF1n1Hqk1lei5xwg2PShG+1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw/Zf439HPPTBaugtmvr0Om1vzKYwHwYDVR0j
BBgwFoAUKpy5nZjBH3rxpAW10FB1Bub4CKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0ZZSmkxMlVaZ2pRaUV1dFF3V0s3dUgzWVBIbjkxRng2S3B4MmNBWGRH
ZjQvMS8yQTlDQjk5RDk4QzExRjdBRjFBNDA1QjVEMDUwNzUwNkU2RjgwOEE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBOUNCOTlEOThDMTFGN0FG
MUE0MDVCNUQwNTA3NTA2RTZGODA4QTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dGWUppMTJVWmdqUWlFdXRRd1dLN3VIM1lQSG45MUZ4NktweDJjQVhkR2Y0LzEv
MzQzNTJlMzEzODMxMmUzMTMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAttYcwDQYJKoZIhvcNAQELBQADggEBAK+cpup3
yo/P9736kE2HVUinfHo1WrDySCwQGghMfN1KzfcQ/1ZWgrltRz47OfQAiOxhRwmW
EKMNIQZbhmjowm1V067JuL4rXYlLzwQrdveTcSYYfpmqgx7dO9ATFiw1PqEZcYcc
P2Reuyy1yEu1FYsobq4bL/BmPKKMl5OTl4Ea3W9nGs2QBsLz8XFg5x6Pdmk0+vKV
YdV+/VP/YCk+3wqmObv+1iaNVNcmxY/fmfxk7fJ5pIT5oSdIfvt0FNXSHPRP5esd
jh/uE0el4HpjJGnGLyd+9jfL3W5mG8G8VkeUdxnrv+ejP2Qb/iaqgGOkyyLUJcZ6
D9cbe8jXgH/OsrE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:23 2025 by rpki-client on console.sobornost.net