Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31372e302f32342d3234203d3e20323639323534.roa
File:                     34352e3138332e31372e302f32342d3234203d3e20323639323534.roa (raw, json)
Hash identifier:          P0B4MqjdcCfg0Y94tAN1P7nbZ+LrsFB5efRQWvrbk10=
Subject key identifier:   0C:0E:F5:37:8B:4E:CD:8D:50:43:DF:A5:F4:94:0D:C1:C9:7D:77:FC
Certificate issuer:       /CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
Certificate serial:       546D87F954AF3EEABA5679C009C5CC5D07466DE6
Authority key identifier: 04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31372e302f32342d3234203d3e20323639323534.roa
Signing time:             Mon 10 Mar 2025 13:49:46 +0000
ROA not before:           Mon 10 Mar 2025 13:44:46 +0000
ROA not after:            Mon 09 Mar 2026 13:49:46 +0000
asID:                     269254
IP address blocks:        45.183.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl
                          rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6d:87:f9:54:af:3e:ea:ba:56:79:c0:09:c5:cc:5d:07:46:6d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
        Validity
            Not Before: Mar 10 13:44:46 2025 GMT
            Not After : Mar  9 13:49:46 2026 GMT
        Subject: CN=0C0EF5378B4ECD8D5043DFA5F4940DC1C97D77FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:f8:dd:1b:77:0a:5f:9b:42:20:f2:79:2d:
                    8d:0d:6c:7d:01:4d:95:f2:d6:ab:1e:2e:26:55:98:
                    08:1d:cd:8e:16:7a:d6:dd:74:0e:a1:72:42:a8:ac:
                    84:0e:01:ef:e7:ab:77:21:67:1a:50:d9:a4:68:68:
                    3b:bd:84:f8:07:d0:a0:7f:61:b6:9a:57:32:ef:52:
                    b2:3b:f5:6e:29:36:6a:da:8d:b1:d6:04:24:c6:51:
                    46:f4:44:e6:99:66:de:51:7b:da:46:e9:b1:3e:29:
                    f5:33:d6:fd:a1:1c:96:34:29:14:2e:10:38:18:86:
                    75:d4:ab:9e:bc:00:25:77:b3:37:7d:2b:27:71:ab:
                    b5:d8:11:57:92:b9:86:06:a7:4a:5b:7b:38:b1:58:
                    60:d2:6d:e7:72:9d:69:52:9d:e6:7b:02:35:40:1b:
                    6a:93:34:ed:cd:6f:b4:03:b2:d6:fb:42:89:8a:d9:
                    50:fd:1f:e4:13:3d:40:ba:fa:11:70:c4:d1:d5:b3:
                    a9:e5:c2:b8:04:f9:58:d0:e4:9a:fa:d8:7f:83:ce:
                    33:51:22:2d:cb:99:bd:7e:37:da:1a:25:08:5f:df:
                    d0:8b:55:ff:2d:d4:ca:25:27:e5:30:12:e3:22:8f:
                    16:d6:88:07:06:be:88:46:d6:5b:be:bc:f4:23:3d:
                    15:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0E:F5:37:8B:4E:CD:8D:50:43:DF:A5:F4:94:0D:C1:C9:7D:77:FC
            X509v3 Authority Key Identifier:
                keyid:04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31372e302f32342d3234203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:03:07:f2:06:9c:4a:ee:12:5d:14:1e:8a:c1:c7:20:2f:da:
         e9:19:61:98:7e:0a:43:b9:99:d2:c0:2b:a0:f7:a0:38:f8:12:
         ee:bc:8b:60:84:9b:d3:82:37:6e:f0:81:82:6d:96:b0:88:03:
         2a:14:37:63:46:b4:57:92:4d:50:c3:65:59:72:e4:fb:3a:b1:
         1f:1f:c8:15:75:f5:c2:ad:d1:f9:b4:3c:be:c7:05:e2:55:58:
         f2:03:38:ed:cd:e4:fe:07:a7:0d:0a:b0:89:5e:82:10:5d:b5:
         e2:ab:0d:3a:b6:bb:5b:bc:15:ae:30:2c:59:12:3c:e6:24:74:
         63:9c:95:1f:de:e9:9d:06:0e:c6:e3:cc:a5:6f:25:68:41:dd:
         a1:07:57:23:ba:fb:cd:a7:2f:3f:00:2c:5a:91:c8:f1:11:d4:
         a0:98:a6:71:a8:63:88:e0:a2:28:25:a9:f7:3d:56:2f:f0:ce:
         67:53:be:27:e3:c2:25:b7:42:d1:67:10:3c:55:5d:90:92:a2:
         c4:68:44:49:35:1d:d2:cd:e0:cc:cb:4c:4a:80:4c:1c:34:3f:
         18:da:e6:96:24:d0:a2:98:4f:3e:d5:f8:cb:9b:0c:27:f7:d2:
         09:e3:c7:99:3a:67:6a:3a:7e:71:79:c1:e4:32:75:ef:1b:c7:
         65:ed:ab:4d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVG2H+VSvPuq6VnnACcXMXQdGbeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDRDkwNURBODA1M0QxNjY2QjIwQjJFNjg2NkZBRkRG
QUFEMTBGRTAeFw0yNTAzMTAxMzQ0NDZaFw0yNjAzMDkxMzQ5NDZaMDMxMTAvBgNV
BAMTKDBDMEVGNTM3OEI0RUNEOEQ1MDQzREZBNUY0OTQwREMxQzk3RDc3RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+vjdG3cKX5tCIPJ5LY0NbH0B
TZXy1qseLiZVmAgdzY4WetbddA6hckKorIQOAe/nq3chZxpQ2aRoaDu9hPgH0KB/
YbaaVzLvUrI79W4pNmrajbHWBCTGUUb0ROaZZt5Re9pG6bE+KfUz1v2hHJY0KRQu
EDgYhnXUq568ACV3szd9Kydxq7XYEVeSuYYGp0pbezixWGDSbedynWlSneZ7AjVA
G2qTNO3Nb7QDstb7QomK2VD9H+QTPUC6+hFwxNHVs6nlwrgE+VjQ5Jr62H+DzjNR
Ii3Lmb1+N9oaJQhf39CLVf8t1MolJ+UwEuMijxbWiAcGvohG1lu+vPQjPRUNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDA71N4tOzY1QQ9+l9JQNwcl9d/wwHwYDVR0j
BBgwFoAUBM2QXagFPRZmsgsuaGb6/fqtEP4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFVjdTFTQ3o2M3pEaUVuaFg1REcydXF3QkZoYzF2cnRVREx6RGR2d1Ji
ZEMvMC8wNENEOTA1REE4MDUzRDE2NjZCMjBCMkU2ODY2RkFGREZBQUQxMEZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0Q0Q5MDVEQTgwNTNEMTY2
NkIyMEIyRTY4NjZGQUZERkFBRDEwRkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hVY3UxU0N6NjN6RGlFbmhYNURHMnVxd0JGaGMxdnJ0VURMekRkdndSYmRDLzAv
MzQzNTJlMzEzODMzMmUzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzIzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbcRMA0GCSqGSIb3DQEBCwUAA4IBAQC4AwfyBpxK
7hJdFB6KwccgL9rpGWGYfgpDuZnSwCug96A4+BLuvItghJvTgjdu8IGCbZawiAMq
FDdjRrRXkk1Qw2VZcuT7OrEfH8gVdfXCrdH5tDy+xwXiVVjyAzjtzeT+B6cNCrCJ
XoIQXbXiqw06trtbvBWuMCxZEjzmJHRjnJUf3umdBg7G48ylbyVoQd2hB1cjuvvN
py8/ACxakcjxEdSgmKZxqGOI4KIoJan3PVYv8M5nU74n48Ilt0LRZxA8VV2QkqLE
aERJNR3SzeDMy0xKgEwcND8Y2uaWJNCimE8+1fjLmwwn99IJ48eZOmdqOn5xecHk
MnXvG8dl7atN
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:30 2025 by rpki-client on console.sobornost.net