Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa
File:                     34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa (raw, json)
Hash identifier:          PqhuJKMxhknh/zSUWtlU58E7lJnTuQM0XRIQnd5fkWs=
Subject key identifier:   F8:00:D4:45:1A:9E:8E:04:6F:DA:C0:A5:12:03:FD:C9:E0:74:FC:CA
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       77927B6949A525AC08E76AB334ECEF3306950481
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     268137
IP address blocks:        45.169.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:92:7b:69:49:a5:25:ac:08:e7:6a:b3:34:ec:ef:33:06:95:04:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=F800D4451A9E8E046FDAC0A51203FDC9E074FCCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:59:9d:1c:ea:b7:8f:54:d8:a1:13:26:8b:
                    1c:39:74:3b:7e:c2:7d:50:cc:5a:7e:4a:e3:f8:91:
                    b3:f4:bd:fe:08:90:cd:c2:fc:55:4e:ce:0d:04:70:
                    cb:40:5d:ab:fb:fd:c2:54:9b:11:16:b1:ba:47:44:
                    fe:0c:0c:79:b7:89:17:7e:93:68:1e:6e:f9:ca:d3:
                    a0:b0:95:90:ae:51:e1:7c:b2:00:85:36:21:44:5b:
                    ae:cb:36:09:d7:44:2b:fd:b2:61:83:fb:37:d6:34:
                    ff:bd:dd:ef:e4:96:4e:56:fe:75:cb:c7:c3:e9:2a:
                    c2:24:0b:6b:b0:4f:39:fe:02:85:57:9b:73:ab:07:
                    64:a1:96:ff:eb:1e:90:1a:6e:77:29:57:c6:64:05:
                    0d:ea:50:77:47:74:89:6f:12:42:9e:dc:45:23:82:
                    02:02:f1:ce:98:db:b9:5d:4c:2b:3d:0a:2b:96:04:
                    7e:aa:be:fe:f7:c0:93:93:4c:06:ea:67:11:c5:9a:
                    90:eb:cd:71:4b:e4:01:3c:cd:9f:6f:34:ec:cb:21:
                    8f:23:fb:06:d0:d6:e1:70:a0:3f:c5:4c:b5:52:63:
                    d3:bc:a7:0d:6d:14:53:65:d2:e9:68:8c:92:2a:b6:
                    4a:3d:56:ca:4c:23:17:8b:f5:4c:e3:99:57:1f:3b:
                    9c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:00:D4:45:1A:9E:8E:04:6F:DA:C0:A5:12:03:FD:C9:E0:74:FC:CA
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:dd:86:20:cd:29:ff:4c:ff:36:3e:29:9a:58:59:30:c1:
         f0:cd:a3:68:9e:9b:09:d2:84:7a:23:19:2e:f8:0b:50:d2:c4:
         fa:ad:15:e6:4d:d4:c6:76:f4:51:ea:da:25:28:8e:f5:2d:b9:
         49:a0:de:72:d4:6a:19:75:9e:0c:d1:7d:76:ee:ca:5a:eb:30:
         00:b8:a2:3c:ea:c5:54:64:ab:b8:cc:88:fd:f0:f3:c1:35:8c:
         6f:84:5a:3e:69:e1:85:a5:23:6c:53:ed:59:48:53:55:a3:68:
         2e:57:4a:56:c9:df:d6:aa:1e:71:0f:99:64:65:87:52:d1:7d:
         11:b9:c5:6b:b1:cb:ed:3f:61:9d:fc:1d:b6:ef:20:70:df:f8:
         f8:85:29:d0:e7:19:78:31:74:af:34:39:04:48:21:41:91:c3:
         74:19:36:cc:58:d9:89:3b:ea:26:7e:5c:61:75:af:b9:1a:d8:
         d9:27:ea:87:d6:01:ca:61:c2:a9:ae:0a:73:1c:57:08:78:2f:
         d2:3a:69:53:6f:c3:1d:dc:6b:72:5c:9c:a1:c2:b1:78:2a:a4:
         4b:22:6f:d2:f6:78:87:14:60:3f:06:04:82:84:84:47:3d:ff:
         37:c7:96:aa:57:07:e8:8c:41:04:ee:ed:9d:90:3d:b8:d0:74:
         8e:27:6b:24
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUd5J7aUmlJawI52qzNOzvMwaVBIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkw
QTE1RjM0MTAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMDMxMTAvBgNV
BAMTKEY4MDBENDQ1MUE5RThFMDQ2RkRBQzBBNTEyMDNGREM5RTA3NEZDQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzlmdHOq3j1TYoRMmixw5dDt+
wn1QzFp+SuP4kbP0vf4IkM3C/FVOzg0EcMtAXav7/cJUmxEWsbpHRP4MDHm3iRd+
k2gebvnK06CwlZCuUeF8sgCFNiFEW67LNgnXRCv9smGD+zfWNP+93e/klk5W/nXL
x8PpKsIkC2uwTzn+AoVXm3OrB2Shlv/rHpAabncpV8ZkBQ3qUHdHdIlvEkKe3EUj
ggIC8c6Y27ldTCs9CiuWBH6qvv73wJOTTAbqZxHFmpDrzXFL5AE8zZ9vNOzLIY8j
+wbQ1uFwoD/FTLVSY9O8pw1tFFNl0ulojJIqtko9VspMIxeL9UzjmVcfO5xvAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU+ADURRqejgRv2sClEgP9yeB0/MowHwYDVR0j
BBgwFoAUPcaQwN6AExsiO+5w1/b/mQoV80EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KdVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgy
LzEvM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkwQTE1RjM0MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zREM2OTBDMERFODAxMzFCMjIz
QkVFNzBEN0Y2RkY5OTBBMTVGMzQxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
dVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgyLzEvMzQz
NTJlMzEzNjM5MmUzMjMwMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2Mzgz
MTMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAEtqcgwDQYJKoZIhvcNAQELBQADggEBABFL3YYgzSn/
TP82PimaWFkwwfDNo2iemwnShHojGS74C1DSxPqtFeZN1MZ29FHq2iUojvUtuUmg
3nLUahl1ngzRfXbuylrrMAC4ojzqxVRkq7jMiP3w88E1jG+EWj5p4YWlI2xT7VlI
U1WjaC5XSlbJ39aqHnEPmWRlh1LRfRG5xWuxy+0/YZ38HbbvIHDf+PiFKdDnGXgx
dK80OQRIIUGRw3QZNsxY2Yk76iZ+XGF1r7ka2Nkn6ofWAcphwqmuCnMcVwh4L9I6
aVNvwx3ca3JcnKHCsXgqpEsib9L2eIcUYD8GBIKEhEc9/zfHlqpXB+iMQQTu7Z2Q
PbjQdI4nayQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:49 2025 by rpki-client on console.sobornost.net