Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa
File:                     34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa (raw, json)
Hash identifier:          OUjUwqRpP9E674rXXfVeyIP4XX4eBVBttWVH7gAzpxY=
Subject key identifier:   23:3E:DB:0E:6C:0B:22:72:5C:5E:56:FF:EA:DC:2B:3C:09:C8:8D:4F
Certificate issuer:       /CN=AF84903523F7C1089CC2308CEEC9C1B4F2624F76
Certificate serial:       1EDAEED6A2D2A32503CA959FB3821CBD4C1F206B
Authority key identifier: AF:84:90:35:23:F7:C1:08:9C:C2:30:8C:EE:C9:C1:B4:F2:62:4F:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa
Signing time:             Sun 23 Mar 2025 14:25:41 +0000
ROA not before:           Sun 23 Mar 2025 14:20:41 +0000
ROA not after:            Sun 22 Mar 2026 14:25:41 +0000
asID:                     269025
IP address blocks:        45.178.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.crl
                          rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:da:ee:d6:a2:d2:a3:25:03:ca:95:9f:b3:82:1c:bd:4c:1f:20:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF84903523F7C1089CC2308CEEC9C1B4F2624F76
        Validity
            Not Before: Mar 23 14:20:41 2025 GMT
            Not After : Mar 22 14:25:41 2026 GMT
        Subject: CN=233EDB0E6C0B22725C5E56FFEADC2B3C09C88D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:27:9f:f6:06:58:64:b7:8d:71:09:6f:83:46:
                    90:9e:93:67:18:aa:23:0f:b3:84:c5:77:b0:75:e5:
                    e6:57:06:ea:07:f5:17:e1:ae:ea:52:e4:4e:5e:78:
                    cf:71:b4:05:1a:1e:18:77:4e:32:37:34:dc:ed:bb:
                    5f:6e:cb:da:7e:02:0b:a5:db:a5:5d:38:bd:54:db:
                    fa:71:e0:1e:fa:0c:e0:e3:77:ed:ef:78:9b:66:ba:
                    7b:02:cf:56:dc:ca:0e:3b:4f:ce:1b:65:ba:f7:2c:
                    53:43:6d:7b:c3:1c:ea:94:a8:e0:78:ae:69:bd:0b:
                    5d:f6:1b:4e:90:1a:01:4a:fe:33:06:18:74:44:04:
                    f9:d3:c2:47:9d:d4:df:81:46:3b:96:dd:5e:ee:81:
                    e8:bc:8c:ac:a5:9e:01:d8:fb:cf:45:e8:70:d6:6d:
                    83:bd:68:3b:5b:bc:37:43:b6:b5:d8:a3:54:25:e3:
                    73:bc:6a:8c:3a:e2:4b:d0:66:e4:e3:68:25:33:f4:
                    fc:cb:ec:a5:a6:64:c1:49:22:ac:07:f1:d2:93:87:
                    41:cf:ac:25:4b:db:fa:bd:24:2c:e1:1e:f1:2c:84:
                    05:dd:77:81:a1:85:a7:a2:4d:b1:19:56:74:8d:16:
                    5c:02:01:ef:20:b4:f4:a4:1c:a3:8b:6c:4f:b2:92:
                    46:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3E:DB:0E:6C:0B:22:72:5C:5E:56:FF:EA:DC:2B:3C:09:C8:8D:4F
            X509v3 Authority Key Identifier:
                keyid:AF:84:90:35:23:F7:C1:08:9C:C2:30:8C:EE:C9:C1:B4:F2:62:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:8e:83:ae:28:51:b2:0c:03:0c:8d:83:5d:a9:98:f0:3a:00:
         6c:5b:1a:7e:08:8d:08:5c:27:fb:3d:1d:e2:9b:72:e8:d5:14:
         b2:48:a8:00:a2:31:66:b3:eb:c2:7a:de:e8:14:96:4f:2e:57:
         35:fb:7a:37:ca:ac:c8:3e:20:3d:3d:30:f4:64:92:9e:cb:36:
         8f:67:1a:08:5b:12:fc:c4:fb:8e:50:28:af:83:68:ea:f0:9e:
         af:6b:ef:8a:54:3c:20:99:f1:0d:d0:9e:d2:b7:21:39:c9:dd:
         ed:65:5a:98:95:aa:bb:73:5a:0f:43:f1:52:09:3a:c8:2f:7f:
         67:f3:12:7a:44:5c:d8:95:e3:32:ea:c0:19:b1:ea:64:1e:4c:
         a6:cf:cf:e5:bc:e2:ce:90:80:92:e4:ed:f7:e7:32:c7:42:56:
         90:66:34:93:d1:77:ec:56:01:f8:69:61:03:3a:1c:e5:7f:91:
         9c:c4:1f:a3:5d:42:df:c9:25:6d:84:76:b1:fa:d0:00:6c:31:
         3c:04:40:90:7c:71:23:b2:6c:8b:47:4e:90:1f:00:8b:58:cb:
         ad:8f:c7:35:cf:15:17:18:fc:89:00:d4:10:ea:1f:df:22:59:
         d7:e9:23:91:3c:90:a7:66:5d:2c:2c:65:67:15:a3:b5:b1:de:
         25:a8:96:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:43 2025 by rpki-client on console.sobornost.net