Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/34352e3138312e3131322e302f32322d3234203d3e20323639313831.roa
File:                     34352e3138312e3131322e302f32322d3234203d3e20323639313831.roa (raw, json)
Hash identifier:          5cTe/r7IooW1P31zdsmcHlinxnkNAFe2rsZjLal0A/M=
Subject key identifier:   6C:DC:48:40:16:3F:81:9D:A3:0D:89:F3:67:E3:C8:07:87:81:82:2B
Certificate issuer:       /CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
Certificate serial:       3553C3EE6E1A583BCB95E5B66F964431BF53150D
Authority key identifier: 58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/34352e3138312e3131322e302f32322d3234203d3e20323639313831.roa
Signing time:             Thu 06 Mar 2025 08:52:17 +0000
ROA not before:           Thu 06 Mar 2025 08:47:17 +0000
ROA not after:            Thu 05 Mar 2026 08:52:17 +0000
asID:                     269181
IP address blocks:        45.181.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl
                          rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 05:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:53:c3:ee:6e:1a:58:3b:cb:95:e5:b6:6f:96:44:31:bf:53:15:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
        Validity
            Not Before: Mar  6 08:47:17 2025 GMT
            Not After : Mar  5 08:52:17 2026 GMT
        Subject: CN=6CDC4840163F819DA30D89F367E3C8078781822B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:bb:e4:f5:d5:83:4f:8c:8e:52:ef:e1:41:
                    ed:89:cc:6a:0d:90:9d:7c:88:eb:57:25:58:20:b3:
                    a8:e8:e2:cb:51:26:73:c2:b8:e9:ce:d7:15:ab:2f:
                    ba:a9:07:bf:2b:df:88:58:ec:a7:76:e3:e2:04:79:
                    4d:92:d3:4d:87:7e:bf:b4:be:b6:88:e4:c1:78:33:
                    c6:ed:bd:b7:10:6d:0a:a0:46:9e:90:bc:c6:f7:87:
                    2f:a5:4c:a4:21:bb:ab:fa:58:80:b7:45:dd:5b:ce:
                    58:67:24:6c:ec:1a:bb:60:dd:f9:c0:7a:68:f1:76:
                    03:da:21:dc:50:30:f6:22:39:57:50:df:39:d2:ae:
                    3b:2d:59:60:8c:16:ce:2c:00:31:07:8e:1d:02:ea:
                    43:b1:82:41:ca:63:79:7c:ca:80:61:5c:d2:0e:09:
                    9b:02:41:1e:55:df:78:c3:8a:43:e4:e8:47:5e:5c:
                    b8:ff:18:f4:4d:bf:d6:c6:b8:c2:eb:86:b5:d6:84:
                    13:46:52:28:96:a4:8d:ab:e1:45:46:30:6f:77:ca:
                    59:ff:16:07:85:43:7a:81:6a:56:bf:92:e7:72:d2:
                    a0:56:43:e6:39:e9:3a:2d:70:ef:64:cc:eb:9c:83:
                    1d:5c:da:a9:bf:ec:0b:7d:25:72:5f:14:56:9d:25:
                    0b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DC:48:40:16:3F:81:9D:A3:0D:89:F3:67:E3:C8:07:87:81:82:2B
            X509v3 Authority Key Identifier:
                keyid:58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/34352e3138312e3131322e302f32322d3234203d3e20323639313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:f4:c3:e1:40:12:ec:ce:cf:14:e9:b5:83:b5:f1:41:26:ac:
         32:ac:c0:86:30:3d:ca:41:91:bf:90:47:74:28:5c:a9:cc:dc:
         f0:4b:2c:29:99:d5:8d:51:1e:f2:a7:7f:47:25:3a:ba:47:03:
         3c:32:65:e9:94:2a:2e:9d:52:16:44:f1:78:f4:a3:7d:92:0e:
         1e:16:00:b2:6d:09:22:b4:86:de:1d:97:54:5a:b2:82:18:72:
         ee:06:e3:c1:c1:3f:95:8d:93:35:1c:5d:a8:04:6a:3a:85:00:
         bc:52:69:9b:e8:f3:32:80:7a:ed:57:9b:f8:a3:12:cf:01:f5:
         ff:8a:49:28:d8:ef:f2:2a:95:71:b6:4e:2f:0f:ef:30:8f:4d:
         d3:ee:f4:17:9a:b8:09:03:68:7f:22:20:98:bc:f5:dd:c6:6c:
         0b:03:38:56:44:19:96:08:61:15:aa:9d:99:46:13:c7:93:3a:
         d8:20:fd:1e:29:65:fb:9d:67:27:36:41:ab:71:cb:03:95:11:
         12:fd:76:fe:78:76:a6:13:f9:db:5e:4a:86:0d:cf:a4:41:d6:
         4b:8b:81:dc:ff:1d:a8:25:f7:8b:10:86:df:46:c9:14:4e:83:
         9d:88:43:c0:a4:c1:43:ba:7e:f0:a3:86:90:82:c2:1e:83:01:
         6e:78:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:15 2025 by rpki-client on console.sobornost.net