Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32322d3332203d3e20323639313934.roa
File:                     34352e3233382e3233362e302f32322d3332203d3e20323639313934.roa (raw, json)
Hash identifier:          wvgfoY9AETz9twOBRuB94S/gLya+Kwk8MDPlUDwjElA=
Subject key identifier:   FA:56:13:D6:3F:96:DC:FC:CE:00:DD:99:40:9E:B0:7E:DA:50:D7:7D
Certificate issuer:       /CN=960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112
Certificate serial:       26BE667DBC4430E8B81B2EC218B9639BFA991012
Authority key identifier: 96:0C:CA:2B:42:F8:9A:2A:9A:BD:CC:54:6D:E2:2E:BB:9B:DB:41:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32322d3332203d3e20323639313934.roa
Signing time:             Wed 09 Apr 2025 18:17:00 +0000
ROA not before:           Wed 09 Apr 2025 18:12:00 +0000
ROA not after:            Wed 08 Apr 2026 18:17:00 +0000
asID:                     269194
IP address blocks:        45.238.236.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl
                          rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 18:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:be:66:7d:bc:44:30:e8:b8:1b:2e:c2:18:b9:63:9b:fa:99:10:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112
        Validity
            Not Before: Apr  9 18:12:00 2025 GMT
            Not After : Apr  8 18:17:00 2026 GMT
        Subject: CN=FA5613D63F96DCFCCE00DD99409EB07EDA50D77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:54:95:60:e0:92:fb:63:e5:8e:57:2c:39:
                    74:9a:7d:e4:f8:22:b8:9e:97:4c:91:81:75:09:e1:
                    9a:ec:51:0a:18:81:c8:87:2c:76:c7:44:17:3b:93:
                    8c:4e:d0:a6:b3:d4:7f:e1:66:ee:74:16:ec:ea:c3:
                    64:a3:4a:0d:c3:e4:9b:40:b6:fc:ad:39:0c:35:76:
                    69:cc:f7:75:64:e2:54:56:4b:0a:e8:8a:e6:c1:52:
                    37:46:65:39:0e:6b:da:fe:86:bc:58:39:f7:94:20:
                    1c:4f:73:cc:3f:aa:8d:a3:11:b8:61:ea:ad:17:07:
                    df:03:d0:45:e4:ac:4c:bf:74:ae:21:cf:a4:88:64:
                    be:b4:df:db:ad:55:22:c0:7f:fd:e2:35:b4:54:0a:
                    7d:bd:33:b7:38:a3:ba:fb:ce:c4:7f:97:4a:02:67:
                    9e:51:a8:47:75:fb:f6:44:7e:90:b7:83:f6:85:66:
                    5a:52:27:1a:d5:b0:6b:d6:8a:bc:64:d6:12:2b:a5:
                    c3:d7:4b:37:9f:7a:87:e5:8d:21:f9:dd:e5:a8:cc:
                    82:1a:7f:76:ac:9e:f3:56:ce:32:a3:0c:f4:56:2b:
                    64:fe:dc:9a:45:b9:28:2c:26:57:c0:7c:8c:fe:c1:
                    0e:6b:7e:8a:9f:61:3b:10:d7:f6:f0:bf:a2:9b:2c:
                    4b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:56:13:D6:3F:96:DC:FC:CE:00:DD:99:40:9E:B0:7E:DA:50:D7:7D
            X509v3 Authority Key Identifier:
                keyid:96:0C:CA:2B:42:F8:9A:2A:9A:BD:CC:54:6D:E2:2E:BB:9B:DB:41:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32322d3332203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:43:d4:3c:30:4e:e3:a7:3b:3a:fb:89:91:71:58:39:3e:76:
         13:0b:f9:22:f4:8b:23:8d:70:6a:9e:12:98:c3:ca:99:93:86:
         89:3e:46:e3:44:32:31:31:1d:26:f2:2a:f9:f5:71:b5:0a:8d:
         e1:0f:ca:e1:2c:1d:2e:28:e5:b6:fb:86:23:70:c2:e2:5a:ba:
         f5:4e:d5:5b:fb:88:58:48:3f:44:2f:00:0c:b6:82:64:37:3a:
         76:1b:c1:06:9f:49:59:26:c7:ff:a2:1d:95:e5:49:0e:d9:44:
         6d:4c:6d:99:97:8e:2a:59:d5:19:16:96:01:e9:91:69:43:e7:
         e5:d0:69:7f:c4:45:75:2f:77:59:83:b4:f6:00:2e:81:9d:4e:
         f1:3a:10:1b:ae:53:c5:d6:f3:f4:74:7b:8e:07:42:34:ad:42:
         40:01:bd:9d:ab:8d:da:ea:89:bb:35:65:07:2c:f0:bf:72:12:
         d9:13:21:4c:8f:5a:0e:e6:ea:b2:bd:da:fa:fe:6b:2d:54:6f:
         88:d8:3f:6f:84:ed:17:32:e2:e9:63:15:44:07:13:a7:39:ff:
         5b:36:0f:5c:0d:f3:5e:6b:0e:2e:68:8a:bc:6f:66:43:91:c1:
         ce:79:b5:ef:69:6c:2f:8c:ef:d8:21:16:f3:8e:86:a6:c9:8f:
         ad:f7:81:9c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJr5mfbxEMOi4Gy7CGLljm/qZEBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYwQ0NBMkI0MkY4OUEyQTlBQkRDQzU0NkRFMjJFQkI5
QkRCNDExMjAeFw0yNTA0MDkxODEyMDBaFw0yNjA0MDgxODE3MDBaMDMxMTAvBgNV
BAMTKEZBNTYxM0Q2M0Y5NkRDRkNDRTAwREQ5OTQwOUVCMDdFREE1MEQ3N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgRFSVYOCS+2PljlcsOXSafeT4
Iriel0yRgXUJ4ZrsUQoYgciHLHbHRBc7k4xO0Kaz1H/hZu50Fuzqw2SjSg3D5JtA
tvytOQw1dmnM93Vk4lRWSwroiubBUjdGZTkOa9r+hrxYOfeUIBxPc8w/qo2jEbhh
6q0XB98D0EXkrEy/dK4hz6SIZL6039utVSLAf/3iNbRUCn29M7c4o7r7zsR/l0oC
Z55RqEd1+/ZEfpC3g/aFZlpSJxrVsGvWirxk1hIrpcPXSzefeofljSH53eWozIIa
f3asnvNWzjKjDPRWK2T+3JpFuSgsJlfAfIz+wQ5rfoqfYTsQ1/bwv6KbLEsxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+lYT1j+W3PzOAN2ZQJ6wftpQ130wHwYDVR0j
BBgwFoAUlgzKK0L4miqavcxUbeIuu5vbQRIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC85NjBDQ0EyQjQyRjg5QTJBOUFCRENDNTQ2REUyMkVCQjlCREI0MTEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MENDQTJCNDJGODlBMkE5
QUJEQ0M1NDZERTIyRUJCOUJEQjQxMTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzQzNTJlMzIzMzM4MmUzMjMzMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzMTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7uwwDQYJKoZIhvcNAQELBQADggEBABJD1Dww
TuOnOzr7iZFxWDk+dhML+SL0iyONcGqeEpjDypmThok+RuNEMjExHSbyKvn1cbUK
jeEPyuEsHS4o5bb7hiNwwuJauvVO1Vv7iFhIP0QvAAy2gmQ3OnYbwQafSVkmx/+i
HZXlSQ7ZRG1MbZmXjipZ1RkWlgHpkWlD5+XQaX/ERXUvd1mDtPYALoGdTvE6EBuu
U8XW8/R0e44HQjStQkABvZ2rjdrqibs1ZQcs8L9yEtkTIUyPWg7m6rK92vr+ay1U
b4jYP2+E7Rcy4uljFUQHE6c5/1s2D1wN815rDi5oirxvZkORwc55te9pbC+M79gh
FvOOhqbJj633gZw=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:47 2025 by rpki-client on console.sobornost.net