Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139372e302f32342d3234203d3e20323638323631.roa
File:                     34352e3233362e3139372e302f32342d3234203d3e20323638323631.roa (raw, json)
Hash identifier:          n2hE1ZVY/SDKn8ACdrz2QAjlCDN2dySIRTTHiLBohmY=
Subject key identifier:   23:40:E4:6E:1E:3B:98:70:02:D9:0D:A6:8D:6E:1F:5A:78:24:C7:08
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       35B7DCC1447850206841EBB61BED24F7A3E866E1
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139372e302f32342d3234203d3e20323638323631.roa
Signing time:             Thu 06 Mar 2025 16:12:10 +0000
ROA not before:           Thu 06 Mar 2025 16:07:10 +0000
ROA not after:            Thu 05 Mar 2026 16:12:10 +0000
asID:                     268261
IP address blocks:        45.236.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 13:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b7:dc:c1:44:78:50:20:68:41:eb:b6:1b:ed:24:f7:a3:e8:66:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Mar  6 16:07:10 2025 GMT
            Not After : Mar  5 16:12:10 2026 GMT
        Subject: CN=2340E46E1E3B987002D90DA68D6E1F5A7824C708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:8d:b3:b9:73:d2:90:1f:46:08:d1:28:85:
                    db:a3:66:62:3f:d4:d7:9c:25:1a:d7:15:bb:f8:6d:
                    d2:a2:79:d6:a9:ff:46:a9:77:b1:68:33:d5:83:16:
                    2d:87:7f:f6:e7:81:67:83:20:0d:55:9b:f4:4e:ff:
                    4a:c8:ab:d0:1f:f6:34:84:a7:1c:30:c5:7d:01:94:
                    35:4c:e7:e8:73:e7:78:f8:5d:8e:58:4b:16:1d:74:
                    fc:b7:12:bf:8a:41:b1:5f:5c:70:5d:86:bc:34:bc:
                    c4:63:92:71:bf:73:6e:02:b6:ef:e6:a0:20:aa:97:
                    04:d3:06:3a:da:b5:46:4c:46:cd:78:50:19:5e:3b:
                    16:38:86:00:af:ef:55:d8:ff:2b:51:e3:69:56:10:
                    92:b7:fb:4d:28:91:85:ad:aa:98:79:50:d0:3f:2d:
                    e7:22:8d:e0:79:c1:65:69:ad:1c:f0:d6:85:1d:cd:
                    b0:1e:d9:76:60:f9:bf:b3:06:a5:f6:5e:bd:8d:b7:
                    a0:33:02:5b:14:b8:b6:94:8c:11:29:f6:3f:5a:ff:
                    f0:b6:6a:57:89:71:4d:90:4c:69:76:c4:83:c1:16:
                    dd:d9:1d:31:63:26:69:6f:fa:59:00:4e:50:09:05:
                    86:41:48:3f:87:8c:1a:41:b3:71:45:49:aa:2c:9e:
                    12:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:40:E4:6E:1E:3B:98:70:02:D9:0D:A6:8D:6E:1F:5A:78:24:C7:08
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/34352e3233362e3139372e302f32342d3234203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:57:d2:e6:ef:7d:59:97:2a:c9:19:a2:09:ae:9c:62:06:7b:
         e7:c1:f1:ad:3a:48:32:ee:94:c3:d6:76:80:66:41:63:a2:73:
         e6:04:b9:2c:48:13:a9:22:e0:83:15:e4:01:1d:ef:f8:e5:74:
         07:3d:96:8e:a8:45:ae:9a:56:91:af:ff:dd:ae:d6:6e:3f:39:
         fa:be:4a:ae:81:90:ae:5d:c0:9e:cc:17:91:ca:72:50:27:08:
         bd:af:a3:a1:b4:ee:60:c6:cc:82:80:59:e5:1a:f0:2f:15:b9:
         79:32:a2:1b:5c:e1:17:ad:a9:fb:5a:f7:a5:33:23:18:b5:e1:
         1f:34:c2:ea:79:e7:88:53:b8:5d:be:3d:d7:2d:33:03:77:e2:
         1b:ef:cd:f2:bb:30:1f:6e:84:08:91:49:56:48:ad:27:c3:00:
         1f:99:3e:6d:8c:9a:79:e5:7f:b4:78:5e:15:31:ec:93:d1:90:
         77:62:3b:4a:69:be:e5:81:60:ce:9c:2a:c3:24:31:10:9c:61:
         54:9f:f7:8f:36:0b:eb:9e:dc:0f:c0:eb:df:54:c3:d7:9d:59:
         18:da:92:61:07:95:a2:18:d2:2e:f0:5d:c3:44:5b:d2:6e:e5:
         c6:1e:ec:cb:a1:e4:c2:f6:d5:0a:bc:8f:93:f4:09:97:e2:8f:
         46:c0:51:63
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNbfcwUR4UCBoQeu2G+0k96PoZuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhFQTFCNDJGMTY2MUEwRUIwM0IyNDVENDcyMDVFNTIy
MEE1MUI2NTAeFw0yNTAzMDYxNjA3MTBaFw0yNjAzMDUxNjEyMTBaMDMxMTAvBgNV
BAMTKDIzNDBFNDZFMUUzQjk4NzAwMkQ5MERBNjhENkUxRjVBNzgyNEM3MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxaI2zuXPSkB9GCNEohdujZmI/
1NecJRrXFbv4bdKiedap/0apd7FoM9WDFi2Hf/bngWeDIA1Vm/RO/0rIq9Af9jSE
pxwwxX0BlDVM5+hz53j4XY5YSxYddPy3Er+KQbFfXHBdhrw0vMRjknG/c24Ctu/m
oCCqlwTTBjratUZMRs14UBleOxY4hgCv71XY/ytR42lWEJK3+00okYWtqph5UNA/
LecijeB5wWVprRzw1oUdzbAe2XZg+b+zBqX2Xr2Nt6AzAlsUuLaUjBEp9j9a//C2
aleJcU2QTGl2xIPBFt3ZHTFjJmlv+lkATlAJBYZBSD+HjBpBs3FFSaosnhJxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUI0Dkbh47mHAC2Q2mjW4fWngkxwgwHwYDVR0j
BBgwFoAUSOobQvFmGg6wOyRdRyBeUiClG2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFc1WHRucXJRckxTVmtUQzFObVZNTFVxUm9YU1VHbm4yTEJYNm5yNzU3
V2cvMS80OEVBMUI0MkYxNjYxQTBFQjAzQjI0NUQ0NzIwNUU1MjIwQTUxQjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4RUExQjQyRjE2NjFBMEVC
MDNCMjQ1RDQ3MjA1RTUyMjBBNTFCNjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hXNVh0bnFyUXJMU1ZrVEMxTm1WTUxVcVJvWFNVR25uMkxCWDZucjc1N1dnLzEv
MzQzNTJlMzIzMzM2MmUzMTM5MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7MUwDQYJKoZIhvcNAQELBQADggEBAKtX0ubv
fVmXKskZogmunGIGe+fB8a06SDLulMPWdoBmQWOic+YEuSxIE6ki4IMV5AEd7/jl
dAc9lo6oRa6aVpGv/92u1m4/Ofq+Sq6BkK5dwJ7MF5HKclAnCL2vo6G07mDGzIKA
WeUa8C8VuXkyohtc4Retqfta96UzIxi14R80wup554hTuF2+PdctMwN34hvvzfK7
MB9uhAiRSVZIrSfDAB+ZPm2Mmnnlf7R4XhUx7JPRkHdiO0ppvuWBYM6cKsMkMRCc
YVSf9482C+ue3A/A699Uw9edWRjakmEHlaIY0i7wXcNEW9Ju5cYe7Muh5ML21Qq8
j5P0CZfij0bAUWM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:26 2025 by rpki-client on console.sobornost.net