Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32342d3234203d3e20323637303637.roa
File:                     34352e3232382e38342e302f32342d3234203d3e20323637303637.roa (raw, json)
Hash identifier:          hc8xzSJQG1iFCSykx6HzJLdwDgVTK4Eabl2TA3m0OyA=
Subject key identifier:   76:7E:2B:E0:94:8F:5D:24:D4:14:7C:2D:A8:4C:FE:D7:B2:A5:EA:EF
Certificate issuer:       /CN=A15F127A9B708BCCD34894F30740028808430DF2
Certificate serial:       6258FD3E31B125E7F63CFED1BFC6E8A0B046F5DD
Authority key identifier: A1:5F:12:7A:9B:70:8B:CC:D3:48:94:F3:07:40:02:88:08:43:0D:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15F127A9B708BCCD34894F30740028808430DF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32342d3234203d3e20323637303637.roa
Signing time:             Thu 30 Jan 2025 18:35:01 +0000
ROA not before:           Thu 30 Jan 2025 18:30:01 +0000
ROA not after:            Thu 29 Jan 2026 18:35:01 +0000
asID:                     267067
IP address blocks:        45.228.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.crl
                          rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15F127A9B708BCCD34894F30740028808430DF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:58:fd:3e:31:b1:25:e7:f6:3c:fe:d1:bf:c6:e8:a0:b0:46:f5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A15F127A9B708BCCD34894F30740028808430DF2
        Validity
            Not Before: Jan 30 18:30:01 2025 GMT
            Not After : Jan 29 18:35:01 2026 GMT
        Subject: CN=767E2BE0948F5D24D4147C2DA84CFED7B2A5EAEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:50:4d:da:1a:76:9f:c8:e6:6f:dc:db:95:
                    2d:18:b7:65:a5:7c:27:9c:85:21:fc:15:2a:9a:26:
                    0d:ec:f0:77:e2:96:08:f9:8e:49:25:af:e6:ae:44:
                    c4:0d:7a:8d:50:fc:dd:91:a7:10:d1:67:80:b1:e4:
                    1a:9d:8c:f9:f0:0c:7b:82:1d:cd:22:01:bd:0f:8e:
                    1d:4c:48:40:20:df:87:44:ec:d3:9b:94:85:71:15:
                    6a:99:86:fe:8b:f6:70:42:09:00:98:c7:cb:8c:f7:
                    4b:07:5e:ec:04:b8:2e:78:2f:bc:02:d3:de:ab:8f:
                    9a:a5:13:a8:1a:99:40:ad:bf:40:ec:49:8d:55:92:
                    94:d4:ba:58:d6:0d:89:e2:4f:c4:6d:5f:85:3d:1b:
                    13:bc:10:d6:52:8b:0d:74:9f:7c:b8:45:c4:83:95:
                    11:dc:e0:24:8a:d1:6a:89:47:42:14:0b:2f:76:50:
                    cc:b4:a9:58:84:2e:1e:c1:14:df:93:f5:fb:02:10:
                    40:5e:c0:01:d1:38:0e:5c:fa:59:90:11:f8:ba:2c:
                    c3:56:ac:41:10:da:06:a5:48:62:7f:9e:62:46:9e:
                    71:07:bc:3a:6d:fa:f0:86:5a:58:35:16:39:9e:14:
                    48:f8:ca:37:78:1d:a7:19:ee:bc:42:af:73:1a:73:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7E:2B:E0:94:8F:5D:24:D4:14:7C:2D:A8:4C:FE:D7:B2:A5:EA:EF
            X509v3 Authority Key Identifier:
                keyid:A1:5F:12:7A:9B:70:8B:CC:D3:48:94:F3:07:40:02:88:08:43:0D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15F127A9B708BCCD34894F30740028808430DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32342d3234203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:1d:8b:e2:9b:ee:d2:b5:88:c0:3e:97:48:d3:14:83:85:c1:
         e1:91:25:8e:9d:a9:8b:50:9a:6c:a9:26:9a:11:c2:61:cf:db:
         94:38:69:13:1e:c5:56:fd:fd:53:e4:e5:c3:26:4e:2a:39:9c:
         85:a3:4a:a8:35:04:61:46:f0:8d:d4:a4:2a:cd:fa:d7:65:d7:
         24:4c:b9:b7:78:9a:e4:b9:bd:fa:4b:69:0f:be:9f:a1:0a:be:
         39:e9:60:44:56:c8:57:0c:b6:49:6a:01:d1:46:e9:54:1a:c7:
         39:02:63:1d:b2:31:e9:94:2a:dc:eb:63:b4:d8:4a:c0:7b:43:
         f1:92:38:41:4d:f9:22:b3:d0:98:11:80:e1:56:1a:e0:48:40:
         c8:b4:a3:c8:09:21:20:1a:fa:33:8b:19:05:3a:05:12:ac:18:
         41:53:40:ac:42:09:c6:23:6c:28:91:21:ad:4d:d7:4d:1e:4f:
         33:72:4b:54:d7:07:60:9f:ab:aa:01:3b:2b:3a:38:0d:29:81:
         bc:e9:2a:5b:8b:b8:71:4e:78:c5:f3:7d:36:be:97:1d:61:e3:
         63:e1:e0:be:d9:09:8e:d9:cd:d0:6e:1d:c5:74:e0:33:28:fa:
         76:7e:7e:e7:7b:c9:15:3f:19:da:72:51:be:d8:34:c7:42:91:
         40:8b:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:48 2025 by rpki-client on console.sobornost.net