Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/34352e3136372e35302e302f32342d3234203d3e20323637393935.roa
File:                     34352e3136372e35302e302f32342d3234203d3e20323637393935.roa (raw, json)
Hash identifier:          xQH6NhD0Vl157CGy1qeo5VoYUvlf3yInwJrgKOGY1hc=
Subject key identifier:   B7:05:84:33:03:9B:EC:5E:D8:1D:33:61:0A:18:76:DB:64:10:8B:CC
Certificate issuer:       /CN=697580E8392CC653843C7008AA3115A37A09736A
Certificate serial:       3E67D1CA8855869FF911A2F4861D6FE6D17F12D7
Authority key identifier: 69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/34352e3136372e35302e302f32342d3234203d3e20323637393935.roa
Signing time:             Thu 06 Mar 2025 21:19:29 +0000
ROA not before:           Thu 06 Mar 2025 21:14:29 +0000
ROA not after:            Thu 05 Mar 2026 21:19:29 +0000
asID:                     267995
IP address blocks:        45.167.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl
                          rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:67:d1:ca:88:55:86:9f:f9:11:a2:f4:86:1d:6f:e6:d1:7f:12:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697580E8392CC653843C7008AA3115A37A09736A
        Validity
            Not Before: Mar  6 21:14:29 2025 GMT
            Not After : Mar  5 21:19:29 2026 GMT
        Subject: CN=B7058433039BEC5ED81D33610A1876DB64108BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2c:1c:01:9d:2a:f1:05:ff:ac:61:a8:7b:a5:
                    76:21:8a:61:77:57:28:86:f9:e3:31:bb:3e:7c:a4:
                    db:ae:fb:5e:ab:7a:06:64:a5:b5:fc:f1:1e:b7:76:
                    24:ca:bc:5b:98:a4:d7:df:a3:ad:42:cc:cd:f8:b7:
                    e9:3c:50:c7:cb:65:2e:26:c2:6d:78:a0:b9:be:94:
                    e2:65:ba:bc:fa:16:36:c8:e1:d5:af:0e:ff:42:8b:
                    09:0b:a9:2e:5e:a4:30:c3:d7:36:92:d5:c2:3a:3c:
                    ec:86:55:0c:53:0b:01:5a:bb:2a:80:a7:a1:8d:54:
                    6d:d4:ff:e6:d5:ca:9c:e1:51:a9:23:10:5d:d9:d7:
                    ab:3e:85:89:75:55:54:d5:f1:62:aa:c1:75:a3:5c:
                    2e:25:eb:82:8e:5c:43:46:7a:a2:61:83:35:74:36:
                    ac:a4:26:5e:f9:0c:22:36:c7:22:61:fd:1d:1c:81:
                    54:1f:c0:77:78:05:4a:64:ff:84:44:90:44:32:a2:
                    88:53:49:3b:03:6a:27:76:0f:5c:6d:7b:8f:32:e0:
                    c0:77:20:d3:49:12:f1:d5:92:f8:c2:fa:22:fb:82:
                    d4:00:bd:d8:4c:df:3b:3f:74:63:ba:e8:ec:04:1a:
                    ec:48:ef:ed:1a:38:7a:7a:0b:6a:7c:77:19:27:d3:
                    77:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:05:84:33:03:9B:EC:5E:D8:1D:33:61:0A:18:76:DB:64:10:8B:CC
            X509v3 Authority Key Identifier:
                keyid:69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/34352e3136372e35302e302f32342d3234203d3e20323637393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:43:28:6c:c9:5c:e8:17:46:fa:40:f0:b8:0d:6c:a5:b1:f1:
         77:2c:36:07:43:c8:70:0a:eb:be:ab:f2:96:61:9d:80:f0:a2:
         44:09:36:c2:68:22:32:f6:4f:77:a1:f5:a1:46:07:60:cf:3f:
         73:53:0d:83:fc:38:fd:bf:c2:d7:34:9e:a7:db:73:36:3d:71:
         73:71:4d:50:30:22:3d:45:c2:1a:5e:27:b4:4b:7b:21:30:fb:
         45:5d:81:35:f4:ae:88:de:48:b3:38:e9:fa:a4:68:fb:70:14:
         96:43:af:fb:ee:f1:4c:79:f4:56:df:4a:c4:5b:d3:8e:39:4c:
         32:9a:c9:9d:a2:cb:61:19:90:19:25:9f:b3:d6:16:39:0a:03:
         43:70:da:13:ed:48:f1:84:6b:44:11:8e:39:e8:fe:e5:88:e7:
         4d:6d:28:0f:61:7b:7a:d7:37:df:2f:c3:84:83:e8:a4:52:a0:
         18:1b:23:b6:09:7c:df:8d:89:50:c0:f1:4b:75:16:7f:05:41:
         7e:bb:16:c1:84:fd:22:38:1a:85:df:41:cf:be:3d:51:b1:7a:
         e2:78:bf:be:19:3c:8e:a5:92:f0:17:18:d3:37:68:4a:9b:5f:
         80:52:f8:b8:d6:2c:2f:ef:d8:67:02:c9:e4:96:2c:8e:37:0f:
         19:cd:69:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:03 2025 by rpki-client on console.sobornost.net