Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa
File:                     34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa (raw, json)
Hash identifier:          Xz2m8plqdlDjvjxmsIv9D4BNLud3baqK19H+T5GtHi4=
Subject key identifier:   74:69:0D:B6:9F:6F:E5:35:85:5B:46:85:5A:56:E6:F3:E9:F8:44:97
Certificate issuer:       /CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
Certificate serial:       3F30F0002084ECAA05F3B3E35393BFD76A4419A2
Authority key identifier: D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa
Signing time:             Wed 23 Apr 2025 23:40:46 +0000
ROA not before:           Wed 23 Apr 2025 23:35:46 +0000
ROA not after:            Wed 22 Apr 2026 23:40:46 +0000
asID:                     267961
IP address blocks:        45.165.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 17:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:30:f0:00:20:84:ec:aa:05:f3:b3:e3:53:93:bf:d7:6a:44:19:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
        Validity
            Not Before: Apr 23 23:35:46 2025 GMT
            Not After : Apr 22 23:40:46 2026 GMT
        Subject: CN=74690DB69F6FE535855B46855A56E6F3E9F84497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:4d:1b:3c:e1:60:c2:51:12:46:24:c8:02:
                    7c:9c:ea:e6:6a:65:ee:e5:fc:b7:da:c6:b2:04:77:
                    b9:b9:d8:ed:45:16:ef:71:d9:d9:fa:45:5b:dc:10:
                    de:f3:1b:af:ae:32:93:90:ec:b8:03:7f:91:69:0a:
                    01:62:d1:7c:7d:49:31:0e:cb:92:ec:b2:6d:9a:65:
                    a1:73:44:9a:a7:2b:ec:42:ab:c0:cf:50:99:39:b3:
                    6e:9d:70:a1:35:4a:1c:69:29:b0:be:66:33:83:66:
                    06:0b:56:bc:aa:de:fe:8c:61:b1:c7:71:9b:5d:82:
                    b3:fd:fc:fe:15:2b:c0:67:a5:f7:43:de:89:20:04:
                    ed:c1:e4:0b:cd:9d:33:68:71:3f:ef:45:d1:6c:d0:
                    62:0f:1c:10:eb:21:f8:7b:0b:74:fe:ac:2f:ab:3e:
                    8c:d1:d9:2d:13:1f:51:da:72:e4:62:48:9b:58:7d:
                    68:ed:4c:0d:2a:63:25:cd:74:59:f8:e5:25:ec:40:
                    17:a6:fe:ea:d5:a5:a0:bd:26:93:50:a3:67:36:5a:
                    6e:41:5d:91:27:39:aa:fb:f6:37:61:3a:34:8a:04:
                    0e:d3:c1:7b:92:76:04:0f:b7:79:ff:e8:af:ae:56:
                    ff:1e:06:89:95:2b:a3:45:95:d0:5d:ab:29:9a:b7:
                    03:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:69:0D:B6:9F:6F:E5:35:85:5B:46:85:5A:56:E6:F3:E9:F8:44:97
            X509v3 Authority Key Identifier:
                keyid:D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:cd:28:b4:1b:59:c5:f9:e4:6c:cf:1f:41:aa:63:c3:ef:4b:
         d2:3e:97:14:7c:83:d9:10:33:5c:1f:b0:bf:65:5c:88:88:b7:
         10:b3:f7:ca:1b:51:d7:0c:12:83:34:96:ef:52:a3:9b:68:60:
         29:5f:11:37:6d:2a:03:c6:35:03:8c:45:cb:2f:a5:7c:c0:4a:
         59:97:94:39:57:09:30:e8:66:07:bf:74:86:ab:c9:33:7c:0f:
         1a:92:ec:2b:41:8d:40:cb:2a:35:ff:e6:67:87:e9:6a:68:ed:
         7b:a8:20:d1:77:47:b3:9c:f1:4a:b6:b4:a4:d3:e0:86:16:e8:
         38:2e:37:74:1f:8f:3d:85:d7:bd:3d:77:cc:50:91:2c:4b:7e:
         bb:d9:7e:46:44:a6:20:d0:ba:97:02:36:27:11:95:d1:2b:6e:
         f5:a9:12:ed:07:fb:00:76:43:41:cf:e1:f9:a1:41:21:da:f5:
         73:1d:f9:2d:f7:2a:62:3c:0d:f1:b7:72:0d:d9:ca:a3:a2:95:
         7b:c2:fb:0a:f2:a6:38:98:06:56:99:dc:a0:42:06:b7:90:f3:
         21:df:55:78:c2:f6:c4:bc:a8:b5:2d:57:b4:56:3d:f8:c8:75:
         eb:51:26:33:61:96:28:c9:17:e4:50:90:95:c7:5d:3d:0f:84:
         f8:12:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:57 2025 by rpki-client on console.sobornost.net