Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231322e302f32322d3232203d3e20323635383939.roa
File:                     34352e3136332e3231322e302f32322d3232203d3e20323635383939.roa (raw, json)
Hash identifier:          9M9CWbuwvCeQmG0vBdzOzUXlKJt+hd8PIrqMA4pE+gk=
Subject key identifier:   7D:B3:EC:1A:5E:AB:59:26:6E:48:8C:EC:F2:D0:48:09:6E:63:30:26
Certificate issuer:       /CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
Certificate serial:       7A4AE7C0D02BB7EB8D3EF06AD542A31C6C5FFD8C
Authority key identifier: 50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231322e302f32322d3232203d3e20323635383939.roa
Signing time:             Tue 31 Dec 2024 18:17:34 +0000
ROA not before:           Tue 31 Dec 2024 18:12:34 +0000
ROA not after:            Tue 30 Dec 2025 18:17:34 +0000
asID:                     265899
IP address blocks:        45.163.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl
                          rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4a:e7:c0:d0:2b:b7:eb:8d:3e:f0:6a:d5:42:a3:1c:6c:5f:fd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
        Validity
            Not Before: Dec 31 18:12:34 2024 GMT
            Not After : Dec 30 18:17:34 2025 GMT
        Subject: CN=7DB3EC1A5EAB59266E488CECF2D048096E633026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:48:ea:c4:7c:eb:22:04:05:8c:55:93:88:
                    4c:6c:d6:4f:50:93:f6:61:17:45:ef:73:fb:21:6c:
                    ee:bb:81:45:8a:35:ef:88:9b:77:74:4b:dc:78:85:
                    9d:0e:5c:32:7c:65:13:14:0e:c1:e5:7c:dc:d3:2e:
                    e8:b9:a5:75:32:26:ce:2a:eb:9c:ab:30:8e:5d:2e:
                    8e:6c:03:9c:5e:78:e2:25:85:5a:ee:ad:82:8f:89:
                    32:f1:f0:22:f3:88:a2:8c:e4:d4:37:55:72:66:53:
                    3e:3b:86:a1:56:95:15:d6:c2:6d:7c:a2:e6:b7:f6:
                    00:f6:a7:ec:5b:41:36:e4:a3:41:4e:8e:f2:91:d1:
                    da:41:86:17:e1:d5:3f:fa:a0:ad:18:b5:e3:6f:cf:
                    37:e9:fb:8c:82:10:d3:d5:32:66:96:b3:02:ac:e7:
                    36:b8:e3:72:5c:1e:73:32:10:52:72:78:98:f6:1b:
                    ff:54:1d:e4:24:0e:3d:65:95:9a:77:41:c6:47:42:
                    eb:02:f4:da:12:c4:35:5b:38:ae:65:e4:d6:40:54:
                    96:8a:d6:65:a0:ef:8a:b3:2f:7f:a6:39:76:0c:e1:
                    6d:d8:ec:32:dd:45:61:c4:13:17:52:aa:84:4e:b4:
                    64:38:6c:4d:1e:4e:53:6d:5b:cb:1c:57:09:83:51:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B3:EC:1A:5E:AB:59:26:6E:48:8C:EC:F2:D0:48:09:6E:63:30:26
            X509v3 Authority Key Identifier:
                keyid:50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231322e302f32322d3232203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:e9:5d:6a:10:6a:1a:ff:19:cc:ca:c9:3e:f7:6b:f9:22:44:
         97:2d:dd:63:92:c4:e0:08:f6:07:6a:68:04:f5:db:17:5e:86:
         1c:4e:ab:03:37:1b:e3:28:d1:0f:02:31:72:4b:9c:81:7a:58:
         57:35:c4:8b:54:8b:d8:ab:38:56:78:90:37:2b:ab:69:95:29:
         42:34:4f:93:74:22:5e:82:50:66:b7:d1:3e:60:d1:72:18:19:
         a2:43:a1:0e:d4:c2:1b:0a:23:98:61:ad:63:05:7d:70:07:8f:
         cb:71:af:7c:40:df:1a:8d:f8:23:c2:91:0a:36:54:a7:ca:2d:
         a7:e8:2d:c6:55:5d:43:de:da:37:dd:9a:94:41:03:c7:2c:d1:
         f4:03:42:79:a7:e3:c4:a1:9d:6c:bd:50:88:1a:27:ac:df:f4:
         ab:cc:2a:36:23:51:51:dd:d9:64:60:ed:6a:86:ed:e4:ae:47:
         57:0d:cc:05:1c:9e:ae:a7:92:65:4e:e3:70:7a:1f:03:54:da:
         a2:d0:a6:41:42:32:83:be:4b:b4:a1:33:71:e6:dc:b2:00:c0:
         9e:35:73:b4:9e:c3:4f:b4:6e:68:55:11:5a:0e:54:ce:e6:e5:
         ff:ce:6e:06:74:72:e8:7c:23:0c:29:2e:3b:ce:7d:9a:46:7a:
         70:75:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:04 2025 by rpki-client on console.sobornost.net