Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/34352e3138352e3130332e302f32342d3234203d3e20323639333638.roa
File:                     34352e3138352e3130332e302f32342d3234203d3e20323639333638.roa (raw, json)
Hash identifier:          gDCbatDAQJOpr5gFEKSnjLKmmNSFfgeumZltLXgeKIg=
Subject key identifier:   A1:B6:4F:5E:A3:18:6B:E4:A1:2D:61:AF:39:DE:F1:36:D6:CF:E5:BE
Certificate issuer:       /CN=B5385603A8039C6D836EB9CA1A1442282F0D4F7B
Certificate serial:       0D06A2E2157C43A0FBEBD2F107E1F6AF156F4D0B
Authority key identifier: B5:38:56:03:A8:03:9C:6D:83:6E:B9:CA:1A:14:42:28:2F:0D:4F:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/34352e3138352e3130332e302f32342d3234203d3e20323639333638.roa
Signing time:             Tue 01 Apr 2025 16:43:42 +0000
ROA not before:           Tue 01 Apr 2025 16:38:42 +0000
ROA not after:            Tue 31 Mar 2026 16:43:42 +0000
asID:                     269368
IP address blocks:        45.185.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.crl
                          rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:06:a2:e2:15:7c:43:a0:fb:eb:d2:f1:07:e1:f6:af:15:6f:4d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5385603A8039C6D836EB9CA1A1442282F0D4F7B
        Validity
            Not Before: Apr  1 16:38:42 2025 GMT
            Not After : Mar 31 16:43:42 2026 GMT
        Subject: CN=A1B64F5EA3186BE4A12D61AF39DEF136D6CFE5BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:05:ed:ba:eb:5f:6a:07:77:d0:bd:8a:f0:62:
                    54:63:ad:be:e2:48:b7:ae:65:48:9a:c8:2e:a1:6b:
                    f3:26:00:e0:aa:ac:02:54:06:f4:1c:e3:92:4f:6f:
                    ae:ba:ae:1f:09:2e:d2:98:06:0a:80:69:81:f6:b7:
                    4c:14:aa:8b:96:92:40:e6:0a:59:c0:b4:80:37:e6:
                    5b:ff:f2:13:d6:30:2e:fb:c7:a1:28:d0:6c:3d:81:
                    fc:b7:24:70:59:7c:42:3b:a5:e3:fe:71:bd:17:04:
                    70:68:b8:85:ff:04:ee:86:53:9c:e9:55:e2:1b:47:
                    02:14:8b:62:6a:a1:65:1e:d1:a2:f0:b8:7f:38:05:
                    c8:22:a6:75:7d:5c:e8:61:65:7e:22:d1:2e:49:d3:
                    dc:b5:c4:c6:f4:62:0b:69:12:fc:e5:cf:bb:d4:f6:
                    1f:b7:87:64:e9:39:67:e3:38:2b:23:40:16:af:83:
                    ed:2f:52:97:99:c4:3b:49:17:cb:13:e0:bd:51:08:
                    bf:33:38:55:d9:7e:51:64:14:11:5d:37:9a:ee:ec:
                    2b:d2:f6:6f:16:2b:21:d5:65:af:4b:26:49:ff:d2:
                    c8:ea:92:36:1f:1d:b0:88:a9:d6:ca:e0:60:28:9a:
                    45:22:26:73:e3:94:28:65:38:f7:82:0f:59:67:e4:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:4F:5E:A3:18:6B:E4:A1:2D:61:AF:39:DE:F1:36:D6:CF:E5:BE
            X509v3 Authority Key Identifier:
                keyid:B5:38:56:03:A8:03:9C:6D:83:6E:B9:CA:1A:14:42:28:2F:0D:4F:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/34352e3138352e3130332e302f32342d3234203d3e20323639333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:fc:5b:dd:d9:c7:23:e1:b2:3b:3d:9f:a3:23:44:b6:41:ee:
         2c:70:7d:6c:52:ab:06:b8:52:7d:3f:a3:50:fb:1d:71:a5:c6:
         ff:50:6c:e3:3a:62:90:84:05:6c:f6:56:b8:f4:62:36:22:61:
         aa:42:97:fc:9f:d8:f0:87:94:8f:2b:9a:1f:6c:53:25:e2:28:
         4f:88:22:2b:0d:1b:f8:71:46:65:94:0b:25:7b:80:35:a3:51:
         37:1f:cc:78:ca:96:f7:78:fd:7f:ee:c9:04:4a:72:c2:1b:14:
         ec:57:57:8e:7b:24:e5:5e:5b:b0:2f:61:3b:43:0f:96:32:2a:
         53:44:ac:b1:77:42:b1:3d:67:c6:a2:d0:d4:c8:54:07:c0:03:
         d7:ea:f4:c6:6c:fc:8a:0b:c2:9a:91:6c:34:ab:e7:0d:bb:36:
         a8:a4:29:64:81:e8:7a:92:83:6c:41:b6:61:1e:81:b7:f7:a1:
         1a:e6:13:53:41:c9:26:d8:c8:59:07:45:2d:17:29:68:fc:46:
         c1:11:54:e1:44:a9:25:66:05:80:7e:dc:69:00:06:27:69:c1:
         af:d3:e6:91:05:aa:2f:b5:95:2c:41:06:10:f9:4a:9b:70:6a:
         1f:82:4c:26:d8:87:85:8b:98:b2:16:6b:02:4c:e0:fd:ec:68:
         f7:e8:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:04 2025 by rpki-client on console.sobornost.net