Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa
File:                     34352e3233352e31362e302f32332d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          4LCrrvQ+BOGjGSkG8ar/hsHvykbg7yIYfD3mBcm+ssY=
Subject key identifier:   B8:8B:05:65:8A:B7:0C:D6:DC:CA:3F:B9:56:0C:71:52:8A:F8:18:05
Certificate issuer:       /CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Certificate serial:       06071F3C204910263354507A4D5B8148F592515A
Authority key identifier: 3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa
Signing time:             Mon 07 Apr 2025 18:12:36 +0000
ROA not before:           Mon 07 Apr 2025 18:07:36 +0000
ROA not after:            Mon 06 Apr 2026 18:12:36 +0000
asID:                     262391
IP address blocks:        45.235.16.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 22:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:07:1f:3c:20:49:10:26:33:54:50:7a:4d:5b:81:48:f5:92:51:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
        Validity
            Not Before: Apr  7 18:07:36 2025 GMT
            Not After : Apr  6 18:12:36 2026 GMT
        Subject: CN=B88B05658AB70CD6DCCA3FB9560C71528AF81805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:8f:48:d6:08:89:90:f1:96:08:44:39:ee:
                    43:29:33:28:d5:ce:37:66:cb:89:be:62:3e:4d:ac:
                    b8:fb:87:4a:b2:89:bc:3e:42:76:26:c1:e5:a6:a1:
                    07:7d:66:11:c6:c2:4e:5e:1c:00:55:06:41:69:67:
                    47:2d:9d:70:45:ab:16:70:0d:2a:25:56:35:43:6c:
                    3e:1e:d0:96:79:bf:0d:c1:fb:10:6b:8b:8f:06:79:
                    f2:e4:c7:75:7d:c6:6f:a6:1e:99:09:fe:33:05:ce:
                    be:83:77:30:b0:90:92:f5:7e:35:de:ee:19:45:32:
                    9a:57:a2:b7:f8:85:21:91:b0:79:e8:13:52:72:62:
                    1d:ad:69:03:03:ea:e4:6b:56:f1:0a:1c:62:e8:b5:
                    53:18:ee:99:1e:aa:87:6f:03:55:87:a8:3f:13:53:
                    b1:4f:3c:f4:d6:dd:9a:4d:c2:83:e7:15:0d:51:a8:
                    83:a3:d1:28:d5:1d:74:b6:25:1d:45:0f:e7:be:17:
                    ad:ce:4d:04:56:8c:2d:ea:a4:99:c5:fc:2b:8b:e5:
                    05:9b:24:71:ce:33:6e:1a:8d:65:a0:4d:0a:90:95:
                    b0:6b:d6:bd:9b:a5:ac:d7:73:62:e6:48:93:43:6d:
                    bc:02:18:16:4a:c5:26:e5:c1:83:65:e7:b2:b6:13:
                    33:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8B:05:65:8A:B7:0C:D6:DC:CA:3F:B9:56:0C:71:52:8A:F8:18:05
            X509v3 Authority Key Identifier:
                keyid:3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:bd:2b:45:40:a4:9d:81:23:ea:11:02:50:c8:c3:87:e3:00:
         34:11:c3:cc:ac:fc:ea:27:fb:41:db:a4:a4:d3:d6:d1:09:c6:
         53:6f:a6:5a:1b:9a:cf:11:6e:b3:b9:5b:ca:cd:77:1c:34:96:
         34:6d:66:36:e7:e1:02:0e:08:1d:52:46:9d:2f:38:d8:21:a3:
         88:4f:1e:fb:09:5c:d7:99:ff:c1:80:46:f5:96:dc:57:34:c8:
         fc:a4:ca:b7:76:c7:dd:9d:9c:a2:b0:c0:9d:8e:dd:84:7c:a2:
         bb:16:cb:2c:55:50:8b:c3:b0:8d:cb:56:cc:88:46:42:19:85:
         6e:87:6f:56:2f:ff:58:87:f1:6c:de:8a:85:e6:5a:24:58:76:
         54:a4:cd:76:1f:5f:28:28:14:c0:af:92:57:5c:95:47:ea:15:
         de:b9:06:d9:42:06:ea:00:1d:2e:31:0d:10:c6:7f:70:36:46:
         13:f6:db:bd:9d:ea:13:6f:e3:d7:d9:bc:c7:ec:b3:86:79:ce:
         0a:f0:c6:8e:31:31:f3:22:d1:f2:70:d4:2d:3c:26:95:61:6a:
         71:8e:95:f1:99:e1:21:02:42:16:79:de:ed:51:cd:b6:f6:65:
         db:eb:73:dc:ee:b8:fc:cd:47:c7:49:81:f1:95:b1:8a:78:d4:
         ed:d5:45:9c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUBgcfPCBJECYzVFB6TVuBSPWSUVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I0NUE0NzRGREJDRUNBOTRCQjhDQkMzNkUxMDdCQzk2
RDdBOTE5NDAeFw0yNTA0MDcxODA3MzZaFw0yNjA0MDYxODEyMzZaMDMxMTAvBgNV
BAMTKEI4OEIwNTY1OEFCNzBDRDZEQ0NBM0ZCOTU2MEM3MTUyOEFGODE4MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Oo9I1giJkPGWCEQ57kMpMyjV
zjdmy4m+Yj5NrLj7h0qyibw+QnYmweWmoQd9ZhHGwk5eHABVBkFpZ0ctnXBFqxZw
DSolVjVDbD4e0JZ5vw3B+xBri48GefLkx3V9xm+mHpkJ/jMFzr6DdzCwkJL1fjXe
7hlFMppXorf4hSGRsHnoE1JyYh2taQMD6uRrVvEKHGLotVMY7pkeqodvA1WHqD8T
U7FPPPTW3ZpNwoPnFQ1RqIOj0SjVHXS2JR1FD+e+F63OTQRWjC3qpJnF/CuL5QWb
JHHOM24ajWWgTQqQlbBr1r2bpazXc2LmSJNDbbwCGBZKxSblwYNl57K2EzMTAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUuIsFZYq3DNbcyj+5VgxxUor4GAUwHwYDVR0j
BBgwFoAUO0WkdP287KlLuMvDbhB7yW16kZQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zeWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5
LzIvM0I0NUE0NzRGREJDRUNBOTRCQjhDQkMzNkUxMDdCQzk2RDdBOTE5NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjQ1QTQ3NEZEQkNFQ0E5NEJC
OENCQzM2RTEwN0JDOTZEN0E5MTk0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
eWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5LzIvMzQz
NTJlMzIzMzM1MmUzMTM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMyMzMz
OTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBLesQMA0GCSqGSIb3DQEBCwUAA4IBAQBDvStFQKSdgSPq
EQJQyMOH4wA0EcPMrPzqJ/tB26Sk09bRCcZTb6ZaG5rPEW6zuVvKzXccNJY0bWY2
5+ECDggdUkadLzjYIaOITx77CVzXmf/BgEb1ltxXNMj8pMq3dsfdnZyisMCdjt2E
fKK7FsssVVCLw7CNy1bMiEZCGYVuh29WL/9Yh/Fs3oqF5lokWHZUpM12H18oKBTA
r5JXXJVH6hXeuQbZQgbqAB0uMQ0Qxn9wNkYT9tu9neoTb+PX2bzH7LOGec4K8MaO
MTHzItHycNQtPCaVYWpxjpXxmeEhAkIWed7tUc229mXb63Pc7rj8zUfHSYHxlbGK
eNTt1UWc
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:16:29 2025 by rpki-client on console.sobornost.net