Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa
File:                     34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa (raw, json)
Hash identifier:          Rvm1w1armD++tAGP5GPkw65sDPRSkUrlDk6lNd5Fyxg=
Subject key identifier:   F3:CD:C3:16:83:6E:15:D0:3B:E8:C1:7E:EA:96:C6:0F:43:B2:DC:10
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       58D62A7FFC817EC0328F16598BD7FDB84226F4F2
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa
Signing time:             Thu 06 Mar 2025 16:12:10 +0000
ROA not before:           Thu 06 Mar 2025 16:07:10 +0000
ROA not after:            Thu 05 Mar 2026 16:12:10 +0000
asID:                     268261
IP address blocks:        45.236.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 13:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d6:2a:7f:fc:81:7e:c0:32:8f:16:59:8b:d7:fd:b8:42:26:f4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Mar  6 16:07:10 2025 GMT
            Not After : Mar  5 16:12:10 2026 GMT
        Subject: CN=F3CDC316836E15D03BE8C17EEA96C60F43B2DC10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:55:f1:8a:30:32:a7:ea:13:4c:f4:0c:bf:
                    4e:bb:87:1c:f4:ae:07:78:49:a5:7a:3d:77:eb:5f:
                    68:f5:fe:5b:68:62:05:ab:b7:cf:eb:65:05:39:bc:
                    15:6a:44:3b:49:6e:26:aa:f1:5a:37:8d:73:19:9c:
                    13:57:3a:b9:5d:ec:77:22:f5:c9:5d:58:09:a2:d9:
                    ed:7b:1c:25:00:fd:81:af:60:83:73:aa:bd:10:a3:
                    57:15:7a:bc:66:08:c7:a0:32:57:f2:42:d2:6b:cf:
                    43:67:2e:8c:ba:7b:7f:e9:b4:b9:69:f6:55:12:b5:
                    d4:01:2c:0f:9c:49:32:4c:4c:b9:7c:0d:3a:b8:2a:
                    3e:a8:64:ac:67:eb:0e:74:6a:a3:37:d0:56:0c:4a:
                    7d:bf:07:ca:b8:86:cc:c2:70:02:46:e7:d0:f1:1a:
                    45:be:5e:db:20:a6:cf:0b:91:ee:08:bc:37:23:6a:
                    f9:54:dc:4e:57:5e:13:4f:6a:2e:f0:9b:85:81:20:
                    3b:0c:57:c0:02:75:7d:46:97:13:93:9e:00:ce:7a:
                    31:28:70:51:24:eb:d7:ec:59:cc:c0:63:a7:64:80:
                    62:fa:7e:e1:f7:51:5b:69:ab:35:96:f6:4c:83:7d:
                    ad:85:c1:3d:eb:68:32:44:08:1b:5b:ca:24:6c:38:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CD:C3:16:83:6E:15:D0:3B:E8:C1:7E:EA:96:C6:0F:43:B2:DC:10
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:c9:e5:e6:a9:0f:eb:0c:30:e1:95:06:6e:ee:33:35:f4:4e:
         f4:8f:4c:b3:9b:f7:d9:99:4c:59:3f:a7:5f:2b:8d:3a:7a:6d:
         c0:a5:2c:60:19:4a:33:0e:95:01:68:0f:b5:e1:e4:61:d5:4a:
         bd:b8:b9:d1:16:53:25:b0:66:cd:9d:9d:e9:e3:29:cc:fc:48:
         59:ae:e2:31:9e:72:65:41:98:e0:3c:e1:fd:69:1f:11:8a:87:
         17:a8:da:ae:27:35:34:13:28:21:cc:43:9b:fc:c5:d7:f9:d4:
         11:18:10:b7:7a:85:c2:23:12:9b:a0:31:40:13:3c:a3:42:58:
         11:da:6a:b1:f4:21:ca:ab:29:1e:45:11:39:5f:c5:67:3d:7d:
         da:b9:9b:7e:ff:ab:53:eb:8d:9c:49:b8:4f:d2:cc:cc:54:d7:
         82:db:46:d0:f1:ee:3e:ef:0a:dc:a2:3c:3b:a9:66:69:a0:50:
         b9:32:e8:3f:2f:3a:31:7c:02:6a:c8:86:b1:2d:43:c0:73:ea:
         f5:72:6d:eb:84:74:01:2e:9b:14:39:59:58:1f:4a:51:99:85:
         4b:79:e8:bb:52:9c:30:f1:4d:74:ca:e9:a5:a5:99:3f:39:73:
         e9:e8:66:f0:a0:ae:dc:04:eb:e1:80:39:3c:37:e5:e1:a3:19:
         72:ca:ca:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:26 2025 by rpki-client on console.sobornost.net