Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          DXy0rYxxt7MRqxMFQccm8RavR3mI5ZmVaMn967hwlDI=
Subject key identifier:   D6:0E:05:A9:71:08:59:1D:1E:57:65:75:A5:CE:62:CE:F4:6D:99:26
Certificate issuer:       /CN=8DA0474053F934313743C68AD25CD499279BFBF9
Certificate serial:       3AFD7C58F3BAE934F5F5BD97CFBDA36C41B6A955
Authority key identifier: 8D:A0:47:40:53:F9:34:31:37:43:C6:8A:D2:5C:D4:99:27:9B:FB:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA0474053F934313743C68AD25CD499279BFBF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa
Signing time:             Wed 23 Apr 2025 19:51:36 +0000
ROA not before:           Wed 23 Apr 2025 19:46:36 +0000
ROA not after:            Wed 22 Apr 2026 19:51:36 +0000
asID:                     267035
IP address blocks:        45.227.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.crl
                          rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA0474053F934313743C68AD25CD499279BFBF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fd:7c:58:f3:ba:e9:34:f5:f5:bd:97:cf:bd:a3:6c:41:b6:a9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA0474053F934313743C68AD25CD499279BFBF9
        Validity
            Not Before: Apr 23 19:46:36 2025 GMT
            Not After : Apr 22 19:51:36 2026 GMT
        Subject: CN=D60E05A97108591D1E576575A5CE62CEF46D9926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:1f:a7:19:1c:40:8f:bf:00:8f:ec:3c:a0:
                    cb:9d:dd:5b:34:ec:61:9c:6d:c3:e8:57:53:b6:74:
                    c9:47:50:3a:0b:31:35:09:bb:f1:33:1b:2b:9f:e5:
                    a9:17:66:b9:ef:69:4d:3c:3c:79:a4:bf:4a:30:62:
                    f2:cc:9a:32:5f:74:0d:e9:86:da:75:37:7d:72:71:
                    13:14:21:3a:2b:dd:4e:e9:55:a1:40:4f:bc:7b:2a:
                    fd:67:20:c5:a8:e8:08:e9:e2:2d:a3:25:a0:a3:f6:
                    fb:3a:05:bc:1f:86:32:69:0b:51:9e:e2:45:50:07:
                    3f:22:2e:5c:fa:15:ed:b3:2a:fd:ff:99:a8:1f:51:
                    f8:66:84:7a:9a:35:7f:85:38:05:c8:76:82:ba:fa:
                    9d:1a:dc:ec:a8:5f:90:9d:12:47:bb:7b:48:d0:a4:
                    4e:3a:0c:70:ff:bf:10:c3:6a:dc:22:9f:72:7d:d6:
                    69:cc:f5:b4:d9:6b:6e:1c:40:b1:81:86:fc:b4:a1:
                    c9:c2:e1:a2:03:fb:31:f8:de:81:89:1b:ea:33:73:
                    d8:a2:a6:72:0b:25:38:17:11:ec:08:8f:8a:46:68:
                    31:c3:93:8a:64:bf:bf:e8:1a:03:31:86:17:c1:3e:
                    c1:bb:13:4a:1e:26:0d:0b:c6:80:84:a8:f6:1a:9d:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0E:05:A9:71:08:59:1D:1E:57:65:75:A5:CE:62:CE:F4:6D:99:26
            X509v3 Authority Key Identifier:
                keyid:8D:A0:47:40:53:F9:34:31:37:43:C6:8A:D2:5C:D4:99:27:9B:FB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA0474053F934313743C68AD25CD499279BFBF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:4f:14:dd:37:b8:65:58:4d:fd:d3:bd:1e:6b:7e:6e:e3:a3:
         63:3e:08:8d:75:5b:9e:51:01:6b:b9:e4:84:f4:c1:3f:29:c5:
         bc:f4:67:7b:e1:cc:ee:75:06:93:01:29:69:45:8a:8d:1f:50:
         f8:84:a4:45:51:79:29:00:61:a0:06:67:b6:bd:2c:69:5f:64:
         c8:2c:cc:80:58:48:d8:8a:72:35:34:e3:e3:4b:12:69:62:4a:
         1e:0c:3a:ea:49:81:5e:45:52:c4:48:8f:97:ad:a8:e6:f1:01:
         e3:63:13:b0:aa:36:38:1c:fb:04:ca:af:64:08:ab:bd:4f:22:
         19:c2:8f:a9:68:44:3d:ad:86:68:10:c0:58:ad:9b:da:3f:f0:
         de:a0:bf:58:2c:8f:c1:a8:56:43:5d:d0:9c:c6:50:00:23:5b:
         37:cc:69:e9:87:82:e3:ab:dc:ae:2c:41:2f:de:9d:43:4b:a7:
         14:dc:e8:e2:2c:92:27:7c:82:9f:19:30:7e:f5:8f:c8:d0:68:
         12:33:7e:60:91:63:c5:c9:32:59:9c:7f:bf:93:b8:33:bf:54:
         1e:9d:89:27:e2:51:ed:e6:8b:98:91:14:ec:6c:02:a4:32:1a:
         d6:08:53:27:30:c5:7f:6f:a4:64:46:49:0c:86:26:a0:c9:e1:
         36:f5:be:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:31 2025 by rpki-client on console.sobornost.net