Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa
File:                     34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa (raw, json)
Hash identifier:          hzW3oYLJXc0QCiRQGY+uO/dR3kPBzys6yueEe1m7pog=
Subject key identifier:   54:DE:9A:52:BE:B2:CF:9C:84:D4:97:8F:8D:B9:3D:50:E4:4F:44:01
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       1411758AE17DD62B802FD714A096C37EDA78E234
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa
Signing time:             Thu 03 Apr 2025 18:00:21 +0000
ROA not before:           Thu 03 Apr 2025 17:55:21 +0000
ROA not after:            Thu 02 Apr 2026 18:00:21 +0000
asID:                     269423
IP address blocks:        45.186.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:11:75:8a:e1:7d:d6:2b:80:2f:d7:14:a0:96:c3:7e:da:78:e2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: Apr  3 17:55:21 2025 GMT
            Not After : Apr  2 18:00:21 2026 GMT
        Subject: CN=54DE9A52BEB2CF9C84D4978F8DB93D50E44F4401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:6d:3a:a7:77:c1:9d:4e:42:88:f4:fc:ee:
                    20:0e:0d:69:9b:c4:7e:32:9a:e2:7e:02:be:ca:9f:
                    3a:26:34:39:3c:3c:3a:0a:1c:5f:7e:48:04:dc:9f:
                    ee:38:83:88:3d:fd:5c:db:32:9a:e3:c4:54:80:2b:
                    5b:f3:04:56:fb:80:c6:0b:81:d1:45:74:db:e3:d4:
                    20:bf:20:5e:41:93:10:6d:2e:46:ea:9a:fc:2d:d9:
                    74:b9:0a:c6:f8:9f:b1:47:91:13:65:08:21:12:6e:
                    34:45:52:56:ba:38:51:db:bf:fa:2c:1b:d9:56:8f:
                    6f:90:09:7e:6d:28:38:70:b3:35:a1:f2:37:2a:f6:
                    a8:fa:1a:05:0e:d4:42:26:80:89:f1:06:a9:77:73:
                    2f:20:1c:b8:a8:37:7c:51:1e:71:25:18:d1:4e:e4:
                    2d:2a:52:53:df:c6:75:a4:af:09:35:f2:d3:09:ab:
                    ed:28:a9:8c:9a:ad:29:0d:44:bb:fd:b5:0b:f3:b9:
                    57:6e:36:98:8b:7d:45:55:66:f8:c4:d4:ac:3a:44:
                    0f:13:37:47:32:cd:bf:27:6d:db:68:1b:21:62:a0:
                    d2:51:0d:4b:1c:b9:16:b0:df:30:51:ea:ca:51:78:
                    64:09:3e:94:0b:fd:e3:6f:35:bc:af:f7:30:36:ea:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DE:9A:52:BE:B2:CF:9C:84:D4:97:8F:8D:B9:3D:50:E4:4F:44:01
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132302e302f32332d3233203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:ad:43:4a:11:da:f4:fb:81:3d:f9:0c:16:af:aa:a4:12:11:
         fc:fe:ec:50:d6:7f:e4:43:f6:4c:69:ba:6b:e1:d6:62:e7:a7:
         53:9d:9e:5d:eb:2b:7e:a9:a7:6b:68:1b:22:d0:79:75:85:e2:
         b9:f1:48:cf:11:78:a2:50:e3:00:8c:e0:95:f8:af:d7:d7:ba:
         9a:4d:49:7e:d6:bd:69:92:b4:af:05:f5:e3:31:fc:fb:41:b7:
         93:3f:c8:bd:6a:1a:ca:81:f0:99:e2:ba:bb:95:f0:59:2b:be:
         10:ea:7d:e7:58:37:a4:0c:3b:d8:6a:47:66:62:10:7f:24:f6:
         78:29:41:c2:aa:07:2b:5a:97:49:20:8c:9c:79:3a:29:86:54:
         97:b3:82:f0:b8:69:24:c7:2a:ba:a5:5b:f1:8d:a3:58:3b:0d:
         8d:70:dd:3a:c4:71:95:26:18:c4:99:eb:6e:40:c4:b8:51:9f:
         db:f1:55:e4:bf:2e:e7:c9:44:dd:74:6d:0c:e2:9e:f3:29:7a:
         b4:48:af:b9:ff:8a:76:5c:a1:39:88:06:91:41:80:7b:83:85:
         ba:90:45:af:5f:e2:39:94:0f:ac:18:2c:c2:39:74:c9:53:e0:
         cd:59:c7:d5:3f:6b:3d:e8:6a:a1:f7:59:e3:78:80:22:e3:e7:
         01:a8:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:32 2025 by rpki-client on console.sobornost.net