Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231322e302f32342d3234203d3e203631363134.roa
File:                     34352e3233322e3231322e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          wcJcn03N1AA7E0Vlcq1qVt6pnLn7MGyNpqb+sgfqZN8=
Subject key identifier:   67:A1:4A:5D:DF:D5:C8:B1:59:61:02:DC:D5:9C:FF:02:B2:60:A3:9F
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       3A15B590730D4646201063334D693C232D5BF186
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231322e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61614
IP address blocks:        45.232.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:15:b5:90:73:0d:46:46:20:10:63:33:4d:69:3c:23:2d:5b:f1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100CF35AB515068C25F302EBAAA09BA55725C6BFFF71246E8B97164D4763680C96E6C24BF22EDC6FCF1725903853D065330A78AC6FF8F43D02C7AB2687920E01E8B199A3CB510E33B654459DAF05B73B84C41B4FFB00373F0768DFE1EFFED47AF130F8513C73194CA7C608AF725A4E5424B86B903F592D84D056CCE2E02DD49C796CF24B1536FFAE2FDD4CAD6DA3F74DBB7EBA2BA18FF20471DAC6C72AC15787513E86DAB29BCCD897A2C33DD069471FA1D4653C9BB1DE67A1324EE691A3E70D95D1310D33D718CD0B55C09883CBB8D63B104D8974F454D56E2611C9BB38C1C12E165086E6363103712A2B74D98CF8C283E24F5B9842417404BDB346E3ED71D67B90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:ab:51:50:68:c2:5f:30:2e:ba:aa:09:ba:
                    55:72:5c:6b:ff:f7:12:46:e8:b9:71:64:d4:76:36:
                    80:c9:6e:6c:24:bf:22:ed:c6:fc:f1:72:59:03:85:
                    3d:06:53:30:a7:8a:c6:ff:8f:43:d0:2c:7a:b2:68:
                    79:20:e0:1e:8b:19:9a:3c:b5:10:e3:3b:65:44:59:
                    da:f0:5b:73:b8:4c:41:b4:ff:b0:03:73:f0:76:8d:
                    fe:1e:ff:ed:47:af:13:0f:85:13:c7:31:94:ca:7c:
                    60:8a:f7:25:a4:e5:42:4b:86:b9:03:f5:92:d8:4d:
                    05:6c:ce:2e:02:dd:49:c7:96:cf:24:b1:53:6f:fa:
                    e2:fd:d4:ca:d6:da:3f:74:db:b7:eb:a2:ba:18:ff:
                    20:47:1d:ac:6c:72:ac:15:78:75:13:e8:6d:ab:29:
                    bc:cd:89:7a:2c:33:dd:06:94:71:fa:1d:46:53:c9:
                    bb:1d:e6:7a:13:24:ee:69:1a:3e:70:d9:5d:13:10:
                    d3:3d:71:8c:d0:b5:5c:09:88:3c:bb:8d:63:b1:04:
                    d8:97:4f:45:4d:56:e2:61:1c:9b:b3:8c:1c:12:e1:
                    65:08:6e:63:63:10:37:12:a2:b7:4d:98:cf:8c:28:
                    3e:24:f5:b9:84:24:17:40:4b:db:34:6e:3e:d7:1d:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A1:4A:5D:DF:D5:C8:B1:59:61:02:DC:D5:9C:FF:02:B2:60:A3:9F
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231322e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:54:f6:c1:02:74:4c:61:ae:b9:e8:7d:65:88:f4:49:ba:56:
         7d:d2:c9:86:8f:c1:1c:c2:b9:ae:49:d6:4c:a6:a3:9e:f5:5b:
         b8:f7:8c:0f:69:23:f0:be:e0:c4:12:4b:ce:cc:f4:67:dc:58:
         35:17:1e:05:95:65:9f:cd:a4:d2:f2:79:8f:19:77:1e:ed:ba:
         c0:24:b0:e4:11:48:cb:47:a2:4b:0f:84:35:d4:5b:72:f0:c9:
         0d:d7:3b:2e:72:3f:e5:1a:04:f0:d0:1d:f6:6b:f4:e4:55:e8:
         31:2e:a7:ef:e8:63:2e:b3:a7:5a:cb:6d:c9:fa:1e:4a:3d:fe:
         21:53:25:c9:9e:06:ac:32:35:01:1a:10:0d:5c:74:d3:4a:6f:
         eb:a3:1b:26:ed:e6:2c:d8:a6:ab:18:fd:17:dc:51:73:85:bc:
         97:88:de:e1:4f:f2:1b:d2:16:cf:93:07:58:10:e0:5f:23:b3:
         05:0b:69:bf:ac:12:dc:87:11:00:46:b6:4f:07:1c:b9:3d:36:
         a5:fb:c0:1e:20:9e:bd:e3:b8:75:48:74:41:8d:fb:b3:20:5e:
         9d:05:4e:44:f1:ae:1b:cb:f9:7e:f5:5a:48:46:9f:bf:7f:75:
         3c:16:eb:a4:a9:ae:cd:f3:90:eb:a9:28:bd:0d:f4:e1:5e:a7:
         47:ff:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:51 2025 by rpki-client on console.sobornost.net