Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/34352e3137362e35362e302f32332d3233203d3e20323638393639.roa
File:                     34352e3137362e35362e302f32332d3233203d3e20323638393639.roa (raw, json)
Hash identifier:          bJHJYx289xTpRk4oCsjgvou1crRLE8WFjXgqj/rSXOY=
Subject key identifier:   FF:18:86:C6:14:5D:8E:B9:2F:12:FD:EB:BC:2A:47:1E:D2:D9:25:27
Certificate issuer:       /CN=E5121D713C732A6B45D5702FCDFD545FD0E1B866
Certificate serial:       75ACB72C251AB61C41AC52ABD9ACCC335664D747
Authority key identifier: E5:12:1D:71:3C:73:2A:6B:45:D5:70:2F:CD:FD:54:5F:D0:E1:B8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/34352e3137362e35362e302f32332d3233203d3e20323638393639.roa
Signing time:             Mon 14 Apr 2025 21:17:22 +0000
ROA not before:           Mon 14 Apr 2025 21:12:22 +0000
ROA not after:            Mon 13 Apr 2026 21:17:22 +0000
asID:                     268969
IP address blocks:        45.176.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.crl
                          rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ac:b7:2c:25:1a:b6:1c:41:ac:52:ab:d9:ac:cc:33:56:64:d7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5121D713C732A6B45D5702FCDFD545FD0E1B866
        Validity
            Not Before: Apr 14 21:12:22 2025 GMT
            Not After : Apr 13 21:17:22 2026 GMT
        Subject: CN=FF1886C6145D8EB92F12FDEBBC2A471ED2D92527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:47:61:c8:a4:4f:0a:00:0d:d4:b8:80:92:dc:
                    b8:43:8d:85:28:55:2f:97:73:e0:c4:2a:ff:eb:05:
                    5d:3b:7e:70:f6:84:2d:0f:8b:c3:3e:39:95:ce:73:
                    6d:19:03:5c:32:41:dc:c4:74:2b:52:74:c8:e8:05:
                    da:a1:33:3c:1f:e5:76:0b:bd:f2:ce:44:3d:45:1e:
                    3f:80:c4:b2:2e:8a:7c:60:68:4d:d6:0f:7e:4e:5f:
                    34:20:8c:95:45:e3:2a:af:b0:57:4d:91:49:2f:07:
                    8f:ee:42:46:ca:ec:d7:27:41:86:02:57:4d:7a:a1:
                    5c:48:60:e4:89:ee:90:a4:ac:cf:89:79:88:57:ab:
                    15:d8:88:a6:d0:20:35:56:8e:5a:3e:34:69:a7:98:
                    86:8d:e8:36:9f:5e:e3:d7:1e:67:e5:27:7c:27:bf:
                    42:af:2c:32:a6:1b:24:40:8e:95:45:1e:7b:4a:5b:
                    f6:be:dd:80:65:86:23:5b:97:c9:2d:8d:ea:0d:31:
                    f6:93:94:ea:81:f9:02:58:9a:9d:45:08:d4:58:05:
                    b7:62:34:96:37:4f:7d:1c:16:26:39:94:7a:da:93:
                    89:ec:e3:93:6b:1e:88:a9:92:33:08:7d:6d:31:2d:
                    ef:ab:ee:5c:1e:04:9f:79:40:99:ab:72:e7:83:41:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:18:86:C6:14:5D:8E:B9:2F:12:FD:EB:BC:2A:47:1E:D2:D9:25:27
            X509v3 Authority Key Identifier:
                keyid:E5:12:1D:71:3C:73:2A:6B:45:D5:70:2F:CD:FD:54:5F:D0:E1:B8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/34352e3137362e35362e302f32332d3233203d3e20323638393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:c4:34:36:74:e5:cd:19:38:2b:25:4f:89:37:0f:8e:68:ae:
         e5:27:90:23:a3:76:f2:74:20:e0:44:f6:05:55:7c:64:05:05:
         db:b5:1e:6d:fd:b5:05:dd:2f:14:f4:3a:0e:7f:6f:01:2f:ee:
         a6:e2:4d:4a:b5:56:96:cd:99:a1:60:60:e5:91:8e:1c:6e:3c:
         d1:53:4c:f4:de:01:fa:78:2b:d9:dc:67:af:b2:3d:18:67:9e:
         80:b8:98:02:cf:7b:59:cd:4b:ac:da:da:67:e0:a3:23:26:e3:
         9a:fd:0e:e9:b4:ad:00:52:10:27:1e:c7:c9:2a:d1:fa:55:b3:
         8e:97:aa:da:ab:13:fa:b0:f2:9c:1c:2d:da:8c:44:21:73:22:
         3e:76:2e:ff:b4:c2:cf:4a:52:94:3c:84:29:3a:97:59:7f:99:
         74:c5:c0:aa:89:aa:55:a1:11:91:52:5b:be:86:af:fc:f6:19:
         05:d2:ea:d8:26:bd:d7:c5:89:f1:43:0a:88:4c:07:90:8d:f9:
         ed:44:55:77:96:31:95:03:60:90:de:11:4a:b4:29:22:56:e5:
         09:69:99:36:a4:77:29:ed:a5:b2:81:19:83:d7:b5:cf:37:a8:
         17:7a:21:a5:09:49:f4:32:b3:45:ef:3b:c1:53:7f:4f:c1:2f:
         57:16:69:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:33 2025 by rpki-client on console.sobornost.net