Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          +wWEHwIXiKbMKXFxswXueNVgWPCHsSXTi6FIE2g63eo=
Subject key identifier:   4A:49:E7:7D:50:F6:A8:C6:04:D3:81:68:C4:B0:4F:F2:46:E6:D5:38
Certificate issuer:       /CN=8DA0474053F934313743C68AD25CD499279BFBF9
Certificate serial:       3BBB7554372E6399BB8F5395A0AAEBB37DB9A27B
Authority key identifier: 8D:A0:47:40:53:F9:34:31:37:43:C6:8A:D2:5C:D4:99:27:9B:FB:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA0474053F934313743C68AD25CD499279BFBF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa
Signing time:             Wed 23 Apr 2025 19:51:35 +0000
ROA not before:           Wed 23 Apr 2025 19:46:35 +0000
ROA not after:            Wed 22 Apr 2026 19:51:35 +0000
asID:                     267035
IP address blocks:        45.227.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.crl
                          rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA0474053F934313743C68AD25CD499279BFBF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:bb:75:54:37:2e:63:99:bb:8f:53:95:a0:aa:eb:b3:7d:b9:a2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA0474053F934313743C68AD25CD499279BFBF9
        Validity
            Not Before: Apr 23 19:46:35 2025 GMT
            Not After : Apr 22 19:51:35 2026 GMT
        Subject: CN=4A49E77D50F6A8C604D38168C4B04FF246E6D538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:54:1d:59:34:ef:73:ab:07:97:9d:ad:d3:
                    d2:6b:6e:73:d0:96:6d:84:3e:62:48:75:13:af:8a:
                    f1:0c:99:8d:50:be:89:96:bc:ef:5c:7a:e2:55:f6:
                    0e:ee:90:0d:42:c7:89:d5:4b:6c:e3:54:7d:9c:6c:
                    0a:25:5c:5a:bf:42:95:ad:4d:6c:52:64:2c:06:a3:
                    fc:b6:ab:e5:a4:b3:bf:b6:17:86:2c:ef:99:2c:c1:
                    47:f1:6a:1e:c3:a8:21:6b:ea:7e:a9:cf:5a:c6:59:
                    7c:e2:b1:cf:9b:bf:cf:db:fd:31:71:f1:28:26:c1:
                    4d:3f:0f:a9:99:d2:8e:ec:4c:3c:d6:22:6e:40:e3:
                    41:bc:bf:56:f5:d2:f5:bd:c4:b5:67:a7:e2:87:1d:
                    1a:f3:25:cb:fe:4b:af:be:8f:43:4c:47:e9:3c:50:
                    bd:cd:5e:1d:90:d4:ef:1a:4e:92:90:c1:c2:4e:fc:
                    97:90:9c:4e:1f:d1:3e:ce:39:8a:ad:55:07:92:b5:
                    53:7b:77:a0:3b:c6:74:2f:dd:3d:67:0e:5d:6c:ef:
                    3e:96:a8:0c:5f:54:d3:ad:cf:46:a3:e9:db:30:20:
                    17:54:7a:84:17:ed:25:b7:6c:3e:b1:cc:97:24:9c:
                    70:3c:95:1b:d0:ee:28:84:b2:78:7e:60:bd:36:d1:
                    ee:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:49:E7:7D:50:F6:A8:C6:04:D3:81:68:C4:B0:4F:F2:46:E6:D5:38
            X509v3 Authority Key Identifier:
                keyid:8D:A0:47:40:53:F9:34:31:37:43:C6:8A:D2:5C:D4:99:27:9B:FB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA0474053F934313743C68AD25CD499279BFBF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:f4:5e:cc:10:93:03:b7:48:4b:bf:98:dc:5d:6b:57:1c:27:
         cc:61:5e:c3:b5:b8:1e:ff:d9:69:1f:03:5c:07:67:b0:71:fe:
         71:47:27:8f:22:41:d7:6c:8f:21:24:d2:04:ed:54:ed:98:20:
         1f:e2:7e:7a:0a:11:f0:e8:08:77:00:20:2d:f3:28:03:ff:d3:
         11:e0:7c:55:5a:5b:07:d8:80:ff:49:65:6a:23:0b:11:a0:3b:
         b1:68:87:a9:4a:8b:12:93:75:0b:32:0c:f1:d1:cb:36:2f:44:
         a7:af:6b:74:13:a5:6d:3e:c7:e1:da:4b:2d:ad:3c:3d:a7:46:
         5e:ab:26:5b:21:bb:ab:9e:3d:49:4a:e6:dc:fd:b0:e7:65:b9:
         bb:58:38:d7:61:48:28:cc:78:60:3b:53:76:8a:73:53:0f:6b:
         cf:60:f7:01:2d:7a:28:14:05:5e:42:6f:d6:ed:03:87:51:51:
         1e:d1:ec:80:b3:07:4c:fe:6e:79:3c:60:90:81:fe:d9:dd:30:
         70:1a:cd:1b:8d:8b:b5:f9:2a:d5:15:6e:6e:5f:2f:b5:05:d6:
         0a:6c:5f:1f:2f:2f:5b:01:e3:e4:11:43:7c:bf:58:bf:68:bd:
         bc:60:50:ec:3c:10:9c:b7:96:cc:f4:eb:49:ba:dd:4d:b6:e3:
         d2:2e:dd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:31 2025 by rpki-client on console.sobornost.net