Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa
File:                     34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa (raw, json)
Hash identifier:          8Zu4Fx4l/CoeEiMX9U9SduCnyCLntLnZx/dEMe4qkEk=
Subject key identifier:   60:20:21:69:67:BB:C5:B4:C1:05:27:9F:BD:38:03:00:2F:6D:C4:A0
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       62FC94BF2F82DDA71152823A54F2EF7CD4A8D522
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa
Signing time:             Thu 03 Apr 2025 18:00:21 +0000
ROA not before:           Thu 03 Apr 2025 17:55:21 +0000
ROA not after:            Thu 02 Apr 2026 18:00:21 +0000
asID:                     269423
IP address blocks:        45.186.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fc:94:bf:2f:82:dd:a7:11:52:82:3a:54:f2:ef:7c:d4:a8:d5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: Apr  3 17:55:21 2025 GMT
            Not After : Apr  2 18:00:21 2026 GMT
        Subject: CN=6020216967BBC5B4C105279FBD3803002F6DC4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:c1:b4:71:32:e8:79:49:94:28:54:6f:e0:
                    c0:92:c2:8b:82:93:8a:c1:34:9d:27:c1:18:48:63:
                    3e:af:5e:bd:3c:42:73:09:c7:aa:c5:5a:16:50:88:
                    cf:c4:2c:bf:46:51:93:74:1e:93:12:03:bf:2b:08:
                    81:55:88:d5:74:74:3b:d9:62:d3:88:9b:77:8c:00:
                    83:a9:84:f9:fd:c6:90:f8:74:fc:ce:56:9e:c0:a7:
                    7e:61:fd:0f:50:c6:72:38:dd:1c:ee:74:7a:25:65:
                    14:53:c3:eb:37:50:a6:06:55:7a:ae:3a:41:2d:5d:
                    73:80:5e:09:b8:d5:cc:5e:4a:ac:90:89:c9:8d:61:
                    8a:69:76:03:1c:64:d9:b1:86:53:21:9c:80:bd:2b:
                    83:67:4d:7d:96:01:04:d8:52:e0:6a:ef:a8:e5:bd:
                    ca:6c:13:72:18:3b:27:f1:1d:e7:3a:95:a2:a4:7b:
                    02:ef:a7:0d:17:e0:d3:d0:91:a2:0b:b6:da:c6:b3:
                    e3:a7:4c:ea:6b:ce:b4:8f:04:45:bb:89:cf:ef:4b:
                    dc:f5:3f:4b:f3:3f:14:46:97:e1:24:50:45:39:bc:
                    b5:b8:40:bb:4d:a6:e6:aa:ea:7f:35:f1:33:85:ea:
                    21:53:97:6a:f7:f7:cf:f5:d7:cc:9a:50:30:d9:a3:
                    8a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:20:21:69:67:BB:C5:B4:C1:05:27:9F:BD:38:03:00:2F:6D:C4:A0
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132332e302f32342d3234203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:6d:e4:1d:db:4b:0f:22:a1:da:17:c9:e4:de:48:6b:65:3c:
         91:80:59:79:32:d1:58:bb:55:60:30:48:41:ed:23:74:da:fc:
         ed:81:97:75:93:06:c3:00:da:b7:8d:23:da:32:7b:a6:92:62:
         fa:08:6c:61:ce:3a:16:c8:bd:6a:37:d4:02:47:a1:5d:ec:9b:
         9b:cd:3f:79:0e:43:39:53:2f:c5:d4:23:63:76:6b:40:9a:89:
         38:79:b1:b1:83:e6:17:84:4d:1c:19:3d:cd:81:26:2e:7d:51:
         2a:f7:d1:d7:6b:00:f2:9f:e0:2b:d6:d3:8a:42:a2:13:a0:42:
         a9:bb:66:07:0b:83:17:fe:08:8d:2e:57:f4:e5:b5:f0:32:d1:
         04:71:e9:1e:d4:79:a6:8d:24:94:7c:0f:cb:d6:ee:25:33:8d:
         a0:74:0e:aa:e7:4c:e2:e0:19:9c:fa:ef:a6:62:34:b5:42:a9:
         c0:2d:8a:f1:bc:77:6d:03:ad:62:32:80:83:6a:dd:e5:60:42:
         78:40:9c:51:d1:3b:66:db:1f:ef:fc:30:83:b5:57:ef:5a:e2:
         55:41:91:17:c4:ba:3b:c4:b4:e8:ae:b2:7c:1e:f7:d7:aa:d8:
         d6:08:e7:a2:bc:c3:6b:3a:8c:38:a6:82:6c:ab:a6:4b:58:b4:
         a8:e8:41:0f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYvyUvy+C3acRUoI6VPLvfNSo1SIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBFMjQ1RDJDQUQwOUQzRTY1OUY1NTIwOTNDN0ZGQ0JF
MUQyNURDMDAeFw0yNTA0MDMxNzU1MjFaFw0yNjA0MDIxODAwMjFaMDMxMTAvBgNV
BAMTKDYwMjAyMTY5NjdCQkM1QjRDMTA1Mjc5RkJEMzgwMzAwMkY2REM0QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJE8G0cTLoeUmUKFRv4MCSwouC
k4rBNJ0nwRhIYz6vXr08QnMJx6rFWhZQiM/ELL9GUZN0HpMSA78rCIFViNV0dDvZ
YtOIm3eMAIOphPn9xpD4dPzOVp7Ap35h/Q9QxnI43RzudHolZRRTw+s3UKYGVXqu
OkEtXXOAXgm41cxeSqyQicmNYYppdgMcZNmxhlMhnIC9K4NnTX2WAQTYUuBq76jl
vcpsE3IYOyfxHec6laKkewLvpw0X4NPQkaILttrGs+OnTOprzrSPBEW7ic/vS9z1
P0vzPxRGl+EkUEU5vLW4QLtNpuaq6n818TOF6iFTl2r398/118yaUDDZo4opAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYCAhaWe7xbTBBSefvTgDAC9txKAwHwYDVR0j
BBgwFoAU8OJF0srQnT5ln1Ugk8f/y+HSXcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHhMSnVBb3FweW5iM1oxTFNiZ3Jmelpad2ZZU3lLb2tQZnMzTDZCenN6
QWovMC9GMEUyNDVEMkNBRDA5RDNFNjU5RjU1MjA5M0M3RkZDQkUxRDI1REMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwRTI0NUQyQ0FEMDlEM0U2
NTlGNTUyMDkzQzdGRkNCRTFEMjVEQzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h4TEp1QW9xcHluYjNaMUxTYmdyZnpaWndmWVN5S29rUGZzM0w2QnpzekFqLzAv
MzQzNTJlMzEzODM2MmUzMTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtunswDQYJKoZIhvcNAQELBQADggEBAA5t5B3b
Sw8iodoXyeTeSGtlPJGAWXky0Vi7VWAwSEHtI3Ta/O2Bl3WTBsMA2reNI9oye6aS
YvoIbGHOOhbIvWo31AJHoV3sm5vNP3kOQzlTL8XUI2N2a0CaiTh5sbGD5heETRwZ
Pc2BJi59USr30ddrAPKf4CvW04pCohOgQqm7ZgcLgxf+CI0uV/TltfAy0QRx6R7U
eaaNJJR8D8vW7iUzjaB0DqrnTOLgGZz676ZiNLVCqcAtivG8d20DrWIygINq3eVg
QnhAnFHRO2bbH+/8MIO1V+9a4lVBkRfEujvEtOiusnwe99eq2NYI56K8w2s6jDim
gmyrpktYtKjoQQ8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:48 2025 by rpki-client on console.sobornost.net