Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230392e302f32342d3234203d3e20323636323530.roa
File:                     34352e362e3230392e302f32342d3234203d3e20323636323530.roa (raw, json)
Hash identifier:          ciOO9GaPPcU5ig/P/C2zEqP02GVQWG7fwF7IKzsuvik=
Subject key identifier:   F1:91:E5:F9:07:F5:3E:AA:4A:4C:FD:F1:50:4D:45:80:FF:90:E5:5E
Certificate issuer:       /CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
Certificate serial:       060F15E586B7BB071D65FD0CDC786E67A80D0C19
Authority key identifier: A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230392e302f32342d3234203d3e20323636323530.roa
Signing time:             Fri 18 Apr 2025 17:42:41 +0000
ROA not before:           Fri 18 Apr 2025 17:37:41 +0000
ROA not after:            Fri 17 Apr 2026 17:42:41 +0000
asID:                     266250
IP address blocks:        45.6.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl
                          rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0f:15:e5:86:b7:bb:07:1d:65:fd:0c:dc:78:6e:67:a8:0d:0c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
        Validity
            Not Before: Apr 18 17:37:41 2025 GMT
            Not After : Apr 17 17:42:41 2026 GMT
        Subject: CN=F191E5F907F53EAA4A4CFDF1504D4580FF90E55E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0c:1e:f3:f8:b0:86:82:6f:74:7a:b7:78:54:
                    50:ed:b6:67:8f:69:cf:27:6b:5c:d6:0d:a3:ad:e7:
                    cf:2e:b7:69:fc:77:e2:94:4d:bb:12:f5:7d:b8:f1:
                    b1:fe:3e:01:85:7d:00:33:b3:51:d3:b1:da:4b:77:
                    e8:83:85:dc:d8:df:48:fc:5c:c4:48:40:27:c6:12:
                    df:68:69:eb:0d:75:d7:0d:f8:6b:9c:ca:e6:ea:17:
                    79:87:3f:df:38:81:19:64:a1:c6:ff:7f:25:4a:11:
                    b5:c4:08:a0:e3:62:5c:a7:1b:89:1d:b1:37:23:1f:
                    27:5d:a1:79:5a:74:01:8a:ec:2a:20:03:9f:0a:14:
                    84:38:ad:53:c1:30:45:9c:45:35:b9:15:1b:d3:8e:
                    93:b9:3e:62:c7:b8:b5:6d:6f:16:5f:b2:a3:53:2e:
                    9b:b2:a6:d1:e6:01:59:29:d5:8d:b3:44:fa:0e:72:
                    81:4d:2c:09:88:03:84:4b:f8:9d:cf:da:09:93:e7:
                    66:29:8a:bf:8e:57:3e:bd:2c:13:01:04:48:81:35:
                    da:65:fa:ff:a8:80:bf:cb:0d:3b:34:7c:64:f9:7a:
                    02:0a:e0:8e:4f:81:52:e5:a5:fb:be:77:8c:c4:15:
                    68:5d:fd:8e:bc:a0:8c:11:65:ac:c1:d0:92:a4:15:
                    27:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:E5:F9:07:F5:3E:AA:4A:4C:FD:F1:50:4D:45:80:FF:90:E5:5E
            X509v3 Authority Key Identifier:
                keyid:A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230392e302f32342d3234203d3e20323636323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:13:c9:27:4e:d1:26:77:91:c8:08:d0:cb:a7:0e:30:23:be:
         97:31:7d:47:4f:dd:69:56:c4:d0:76:cf:13:b4:af:9c:cb:67:
         d7:46:59:9f:c9:0e:eb:1d:9d:2f:b0:0c:92:cc:32:d7:5f:a2:
         1c:cc:d7:26:c8:ea:23:c8:96:61:f6:73:6d:8f:df:c8:f7:73:
         0a:27:86:75:19:63:ab:e2:22:0c:23:e7:c3:fe:e7:ef:e4:64:
         81:65:eb:2e:bb:0d:28:50:af:b0:6f:cd:00:4e:dc:48:44:af:
         35:07:e3:8b:00:63:2a:d0:8b:88:5f:2f:2d:c3:34:5a:2d:04:
         11:be:38:46:a2:41:c3:fe:61:29:d1:e3:5c:d9:6a:d9:9d:82:
         0c:27:58:32:78:26:a2:29:7e:e8:9f:2b:e7:79:0d:0a:ae:38:
         2a:ac:62:4d:c0:66:2e:37:ab:c4:af:54:3c:fd:55:7f:be:9f:
         a9:ad:3f:b5:2c:7e:98:fa:cf:b3:44:0c:3e:a2:32:a6:18:2c:
         51:d1:63:84:27:48:24:36:62:25:c5:92:cf:f0:aa:3b:9c:e3:
         78:30:5c:78:18:b7:c6:cd:a3:8a:a8:e1:8d:68:7f:c8:7d:e0:
         45:ea:ea:f2:d3:bc:a5:f8:ea:57:40:1e:b3:11:cd:aa:79:34:
         f8:63:54:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:43 2025 by rpki-client on console.sobornost.net