Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa
File:                     34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa (raw, json)
Hash identifier:          VRrHkw6sYCSWwhslEsvUaLWzQfqgquRf2bLYmUjigVk=
Subject key identifier:   1E:AC:39:5A:A8:25:96:8B:1D:61:45:AE:13:BA:B6:95:B6:B6:4D:29
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       696DCB79CEB69BDBCAD671B40981E3E534C67ADA
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa
Signing time:             Thu 03 Apr 2025 18:00:21 +0000
ROA not before:           Thu 03 Apr 2025 17:55:21 +0000
ROA not after:            Thu 02 Apr 2026 18:00:21 +0000
asID:                     269423
IP address blocks:        45.186.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6d:cb:79:ce:b6:9b:db:ca:d6:71:b4:09:81:e3:e5:34:c6:7a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: Apr  3 17:55:21 2025 GMT
            Not After : Apr  2 18:00:21 2026 GMT
        Subject: CN=1EAC395AA825968B1D6145AE13BAB695B6B64D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8d:6d:bb:8f:eb:2c:4a:7d:7b:48:a4:82:63:
                    16:9c:44:4e:99:dd:50:43:8d:64:47:a6:d6:ec:88:
                    b1:f8:ad:94:72:c9:c9:1f:de:7e:57:0d:e7:f4:31:
                    07:88:81:b5:f3:2a:80:39:bb:3d:29:18:2e:f7:99:
                    b3:b8:7d:1e:74:d4:40:11:b9:dc:5c:ff:4c:40:52:
                    5e:25:b3:e1:dc:ff:7d:6a:58:92:5e:c4:fe:04:39:
                    9a:6a:0f:65:bc:26:d1:8d:40:b2:0a:03:d1:7a:3c:
                    0e:4e:e3:ae:81:37:8c:0e:7b:20:fe:1f:16:72:34:
                    a5:5f:42:13:a7:30:a2:bf:09:0f:29:e7:91:0f:ed:
                    49:42:f8:88:6e:74:ce:95:8a:77:c5:12:f0:e1:c0:
                    aa:1f:2c:11:6c:86:48:c3:d9:2a:7e:19:4e:92:6c:
                    e2:6d:1c:f5:0c:00:e9:8c:3c:ca:62:4d:c0:b8:2d:
                    58:43:bf:9d:22:d9:8c:76:93:96:9d:1b:a8:ff:4d:
                    8c:19:79:68:90:8d:9e:d7:d5:d2:b0:7a:fa:2f:99:
                    f4:44:35:9d:bf:07:38:66:67:67:64:09:3e:f6:8c:
                    73:2b:8f:e4:b2:ae:d2:19:aa:0f:c6:ad:e4:b4:40:
                    2a:2a:ea:46:7e:4b:85:2a:8f:e8:0d:e5:c7:8c:61:
                    17:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AC:39:5A:A8:25:96:8B:1D:61:45:AE:13:BA:B6:95:B6:B6:4D:29
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:98:68:0d:f9:bf:40:fe:33:3f:87:78:96:8f:e9:a8:f1:39:
         0a:5b:2c:3b:a5:51:6b:9e:0b:0f:1d:cb:5a:93:68:b6:0d:fc:
         f2:55:ce:69:e2:91:0a:29:0d:0d:fc:b0:3c:7e:02:bf:6e:86:
         8f:d2:b9:c5:75:b1:db:a9:c2:7b:3b:47:29:61:c6:df:ee:6c:
         cf:db:48:6f:e7:d6:b8:aa:e6:c9:1e:5f:f2:7f:43:39:00:95:
         c7:90:de:31:ec:cf:e6:a6:35:2f:54:20:85:ac:8b:69:b7:28:
         cf:fb:bc:1b:65:21:8c:c9:68:64:e9:92:98:79:25:dd:5b:fd:
         a2:c0:ce:3d:6e:20:71:d9:2c:82:4d:79:9c:f0:13:22:fd:ed:
         27:89:c0:94:85:ad:3f:12:cd:83:bf:b1:c7:53:2c:0f:dc:ed:
         46:d9:1d:40:e8:03:6b:4b:d8:00:eb:f6:e4:88:a0:77:a7:5f:
         2a:79:45:2a:44:1b:ac:f7:00:d6:4b:57:8d:94:0e:a1:b8:58:
         f8:b8:26:2b:07:c4:de:9a:7b:15:96:30:2d:70:17:40:04:4f:
         83:df:9b:4d:c4:01:a9:c6:49:7c:1f:0c:e9:be:75:13:df:ce:
         c2:30:7b:96:58:17:7c:72:27:84:b5:23:75:6c:95:47:a7:88:
         1f:d8:e3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:48 2025 by rpki-client on console.sobornost.net