Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa
File:                     34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa (raw, json)
Hash identifier:          v7QTWtnXQz9q1OFLjnyEc/4Y4B2SRue31NFR1Gwl5YY=
Subject key identifier:   82:10:D9:39:41:7B:FD:40:D7:1C:7C:2F:40:C5:21:F3:EC:87:5D:2F
Certificate issuer:       /CN=18E27D86DE5A1AD9A728285FD883143042230B27
Certificate serial:       7420D0A42B509FF7D8CCEAC1BAB118535F312F84
Authority key identifier: 18:E2:7D:86:DE:5A:1A:D9:A7:28:28:5F:D8:83:14:30:42:23:0B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18E27D86DE5A1AD9A728285FD883143042230B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     266951
IP address blocks:        45.225.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/18E27D86DE5A1AD9A728285FD883143042230B27.crl
                          rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/18E27D86DE5A1AD9A728285FD883143042230B27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18E27D86DE5A1AD9A728285FD883143042230B27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:20:d0:a4:2b:50:9f:f7:d8:cc:ea:c1:ba:b1:18:53:5f:31:2f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18E27D86DE5A1AD9A728285FD883143042230B27
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=8210D939417BFD40D71C7C2F40C521F3EC875D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b5:49:21:99:29:48:53:86:04:ac:06:54:28:
                    4f:a0:fd:55:84:0d:f0:92:c2:f1:f3:3e:a5:bb:e4:
                    8c:4e:bd:66:df:25:b5:7e:ae:c5:52:65:f1:70:a8:
                    0d:bc:14:e6:be:20:05:79:65:ac:7b:85:9b:d6:2a:
                    ab:e0:43:6a:22:69:6d:b2:2e:15:a7:e8:46:bf:58:
                    12:ba:c9:04:d6:37:2d:1e:54:4e:6f:14:c2:08:6c:
                    f0:5f:9d:1f:d3:56:01:af:47:e0:d1:90:f7:f8:fd:
                    18:4d:1d:6f:53:3e:8c:fe:20:17:63:32:31:02:01:
                    69:be:b2:e4:5b:e3:60:9a:7b:d9:ee:a8:c8:f7:22:
                    ee:7a:39:02:86:6b:60:47:ee:06:ba:9d:3b:09:9f:
                    a5:f4:32:17:e4:4b:46:1b:8f:21:3d:4a:b8:f1:f3:
                    7a:c8:2b:50:1b:e5:85:5c:d2:5e:50:ee:d0:a7:07:
                    3c:50:08:23:a5:4a:40:c5:02:50:0d:b2:e7:19:f5:
                    26:ee:6d:a9:55:e3:bd:69:61:0b:03:86:de:38:b0:
                    e2:d5:5a:3d:5c:a0:72:fc:eb:1c:9e:9d:9c:35:ff:
                    57:fa:b7:c0:df:e1:94:72:fd:b5:40:1c:41:f9:15:
                    07:52:a9:b3:ee:e8:9b:2b:68:51:04:80:fb:86:95:
                    23:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:10:D9:39:41:7B:FD:40:D7:1C:7C:2F:40:C5:21:F3:EC:87:5D:2F
            X509v3 Authority Key Identifier:
                keyid:18:E2:7D:86:DE:5A:1A:D9:A7:28:28:5F:D8:83:14:30:42:23:0B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/18E27D86DE5A1AD9A728285FD883143042230B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18E27D86DE5A1AD9A728285FD883143042230B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:05:c4:69:05:de:9b:57:fb:bc:d1:da:2a:1b:ee:cd:49:cd:
         fa:0b:2f:1f:10:30:fd:63:a1:bb:d7:73:6c:b0:f4:da:5c:63:
         60:2d:91:07:a0:69:2c:23:dc:74:fc:b7:6a:60:6d:d6:75:4a:
         1e:41:ef:ec:0e:45:fe:87:7c:bd:7f:ca:11:ba:aa:90:a6:34:
         36:dc:01:88:09:a1:09:32:64:a5:0c:0e:10:71:48:6b:c9:be:
         b1:d1:f2:19:4c:b9:03:39:0f:3a:a0:a0:3b:3c:a3:91:01:bf:
         fb:ad:58:77:f4:90:64:c0:84:cf:b8:af:8e:95:23:e3:08:29:
         f8:68:ff:2d:dc:5b:b5:bf:c6:ff:f2:47:0e:12:d8:4c:d9:48:
         f1:b1:45:f5:02:2c:13:bb:3d:72:97:cc:44:cb:a7:d1:49:a0:
         65:6e:c8:50:58:3a:5c:d1:41:8f:d7:5d:8e:11:9a:71:fd:30:
         5f:91:cf:f0:44:3c:29:aa:d0:aa:e9:61:6f:f2:22:11:ba:34:
         56:47:4c:de:7b:71:77:a2:5b:83:54:26:e4:e4:6d:ee:cd:20:
         cc:39:9a:3f:15:2f:4c:7b:04:fb:ef:be:70:72:10:25:43:c1:
         dd:8b:6c:1a:55:02:46:04:80:ef:99:a8:df:26:e1:a1:5a:1f:
         f6:d0:92:6c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUdCDQpCtQn/fYzOrBurEYU18xL4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThFMjdEODZERTVBMUFEOUE3MjgyODVGRDg4MzE0MzA0
MjIzMEIyNzAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDgyMTBEOTM5NDE3QkZENDBENzFDN0MyRjQwQzUyMUYzRUM4NzVEMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWtUkhmSlIU4YErAZUKE+g/VWE
DfCSwvHzPqW75IxOvWbfJbV+rsVSZfFwqA28FOa+IAV5Zax7hZvWKqvgQ2oiaW2y
LhWn6Ea/WBK6yQTWNy0eVE5vFMIIbPBfnR/TVgGvR+DRkPf4/RhNHW9TPoz+IBdj
MjECAWm+suRb42Cae9nuqMj3Iu56OQKGa2BH7ga6nTsJn6X0MhfkS0YbjyE9Srjx
83rIK1Ab5YVc0l5Q7tCnBzxQCCOlSkDFAlANsucZ9SbubalV471pYQsDht44sOLV
Wj1coHL86xyenZw1/1f6t8Df4ZRy/bVAHEH5FQdSqbPu6JsraFEEgPuGlSO3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUghDZOUF7/UDXHHwvQMUh8+yHXS8wHwYDVR0j
BBgwFoAUGOJ9ht5aGtmnKChf2IMUMEIjCycwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9pUGhRRGRkeEtWRWNjd0drS2o0NlVWSHV6RFRhb1FYRkJiUHhZdXpwSktL
LzEvMThFMjdEODZERTVBMUFEOUE3MjgyODVGRDg4MzE0MzA0MjIzMEIyNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xOEUyN0Q4NkRFNUExQUQ5QTcy
ODI4NUZEODgzMTQzMDQyMjMwQjI3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9p
UGhRRGRkeEtWRWNjd0drS2o0NlVWSHV6RFRhb1FYRkJiUHhZdXpwSktLLzEvMzQz
NTJlMzIzMjM1MmUzMTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYz
OTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAIt4bAwDQYJKoZIhvcNAQELBQADggEBACUFxGkF3ptX
+7zR2iob7s1JzfoLLx8QMP1jobvXc2yw9NpcY2AtkQegaSwj3HT8t2pgbdZ1Sh5B
7+wORf6HfL1/yhG6qpCmNDbcAYgJoQkyZKUMDhBxSGvJvrHR8hlMuQM5DzqgoDs8
o5EBv/utWHf0kGTAhM+4r46VI+MIKfho/y3cW7W/xv/yRw4S2EzZSPGxRfUCLBO7
PXKXzETLp9FJoGVuyFBYOlzRQY/XXY4RmnH9MF+Rz/BEPCmq0KrpYW/yIhG6NFZH
TN57cXeiW4NUJuTkbe7NIMw5mj8VL0x7BPvvvnByECVDwd2LbBpVAkYEgO+ZqN8m
4aFaH/bQkmw=
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:33 2025 by rpki-client on console.sobornost.net