Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa
File:                     34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa (raw, json)
Hash identifier:          2dNTrSwsZ9d7H4jKw9HBWIPfGyIPqt4dbtbz1jE2xs0=
Subject key identifier:   58:C6:6B:78:AC:24:ED:B0:D5:A0:F0:ED:DB:65:E7:69:5D:2E:8A:7D
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       76FB38DAFBD7CAA3D36963D4D70ACD3BF543D765
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa
Signing time:             Thu 06 Mar 2025 16:12:11 +0000
ROA not before:           Thu 06 Mar 2025 16:07:11 +0000
ROA not after:            Thu 05 Mar 2026 16:12:11 +0000
asID:                     268261
IP address blocks:        45.236.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 13:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fb:38:da:fb:d7:ca:a3:d3:69:63:d4:d7:0a:cd:3b:f5:43:d7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Mar  6 16:07:11 2025 GMT
            Not After : Mar  5 16:12:11 2026 GMT
        Subject: CN=58C66B78AC24EDB0D5A0F0EDDB65E7695D2E8A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:15:2a:d0:54:ec:51:85:02:74:59:3b:57:
                    fb:2b:f6:67:e8:ad:4d:c0:9d:31:f0:c1:83:3e:71:
                    6e:0d:b6:35:53:e4:1d:a0:1e:e7:b0:f3:0c:0a:cd:
                    13:cc:3a:4f:1b:96:3b:4e:49:18:00:22:2c:00:7a:
                    7f:fa:f6:0a:3a:d3:e5:8a:db:4f:2d:8b:3f:b5:5e:
                    a5:b2:ef:b0:6b:1c:14:52:bd:33:ec:d3:f3:24:c5:
                    13:97:14:fe:7e:9a:74:c4:29:de:a6:03:b8:08:4f:
                    18:06:5d:cf:aa:1f:b2:aa:be:92:84:88:9f:24:16:
                    af:be:6b:f9:ba:a9:f0:03:f8:b2:92:85:e9:72:ca:
                    f2:1c:99:04:9e:fd:68:2c:b6:27:6b:6f:17:9f:88:
                    71:ac:6a:d9:c3:34:27:2c:ce:06:2b:7b:69:8d:e4:
                    29:10:87:39:82:fa:fe:0b:49:02:7b:50:5f:47:b7:
                    7d:47:3a:8b:86:c5:4c:c3:93:a7:77:55:c4:b7:73:
                    df:0c:11:e6:d0:0a:5c:7e:67:37:28:ba:7a:64:07:
                    81:29:56:54:cc:2f:3b:9c:6a:61:1b:c0:39:e4:87:
                    94:8a:0d:62:60:8e:7c:09:27:b7:ca:88:6d:3a:26:
                    24:69:49:f8:78:e9:8b:d1:e5:4b:4d:8e:50:96:0e:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C6:6B:78:AC:24:ED:B0:D5:A0:F0:ED:DB:65:E7:69:5D:2E:8A:7D
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:f9:a5:52:47:6d:4e:fd:5e:ff:65:8a:cf:4e:ec:70:ee:
         2c:e1:23:f4:db:16:1b:8b:25:b6:4d:b2:fc:51:09:bc:63:0c:
         cb:89:97:57:51:e8:be:01:57:54:30:ff:3b:97:e9:76:31:a0:
         a4:fa:06:ac:cc:6f:e5:cd:86:ea:96:36:d6:55:40:ec:e4:2e:
         77:b8:ee:c1:bf:57:5b:2d:97:1b:f5:2a:48:25:70:ed:d4:14:
         eb:7d:c4:ab:b9:d7:ee:68:e8:fa:8c:b3:b5:fd:a2:1b:c1:17:
         cf:1f:a2:d8:a4:85:f6:89:a7:aa:cf:05:d6:27:37:48:a6:eb:
         e7:70:32:f0:e6:48:69:45:f8:15:8f:34:14:29:52:77:c1:81:
         b9:96:78:92:23:8a:c0:18:a9:c9:6d:a3:04:78:67:2a:c3:78:
         37:8f:78:54:17:1f:a8:4a:ef:cd:f9:9c:91:a2:8f:32:4c:37:
         9e:b2:17:e3:a9:0c:13:ee:56:9f:43:3b:62:4a:67:9b:3e:9d:
         3d:65:1a:a9:e8:7d:5b:d8:d7:db:8c:15:c1:40:7e:4e:d0:12:
         15:06:68:ab:af:8a:7a:a8:25:2b:42:94:01:6d:a4:b5:f2:3e:
         fb:11:8b:96:1c:a2:a4:6f:34:dd:9f:ee:e7:84:06:3d:a0:2d:
         76:1d:01:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:25 2025 by rpki-client on console.sobornost.net