Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa
File:                     34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa (raw, json)
Hash identifier:          M2ANeNr4No2J+wJ++XkCVUePHYF6iQiRwux1xyP3Y5s=
Subject key identifier:   99:B2:E7:61:37:E4:75:E5:D1:2B:4E:C0:2C:D0:46:80:35:FD:85:4F
Certificate issuer:       /CN=759056D29FFF39251355512175D35C57E1A33318
Certificate serial:       2BC4E4B6E59CF220CF43E625363A02A2475F0D7D
Authority key identifier: 75:90:56:D2:9F:FF:39:25:13:55:51:21:75:D3:5C:57:E1:A3:33:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa
Signing time:             Tue 22 Apr 2025 16:07:57 +0000
ROA not before:           Tue 22 Apr 2025 16:02:57 +0000
ROA not after:            Tue 21 Apr 2026 16:07:57 +0000
asID:                     268763
IP address blocks:        45.172.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.crl
                          rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c4:e4:b6:e5:9c:f2:20:cf:43:e6:25:36:3a:02:a2:47:5f:0d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759056D29FFF39251355512175D35C57E1A33318
        Validity
            Not Before: Apr 22 16:02:57 2025 GMT
            Not After : Apr 21 16:07:57 2026 GMT
        Subject: CN=99B2E76137E475E5D12B4EC02CD0468035FD854F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:97:09:19:f3:be:07:92:e7:58:85:32:3a:
                    44:1c:3a:9d:a5:80:e4:9b:ca:27:67:bb:99:7d:51:
                    c8:64:cf:6f:ac:10:2b:bd:b8:26:52:7c:40:20:b7:
                    f1:8e:64:b7:bc:4d:a7:0f:df:a3:9f:60:e9:53:7d:
                    b1:e4:d1:91:d3:c1:49:be:32:0c:8c:63:91:f5:ce:
                    bc:d0:c2:ed:4f:54:cf:f4:c2:b4:74:d0:18:04:8c:
                    4f:ca:98:eb:61:33:60:57:15:5c:36:01:25:d4:76:
                    41:9d:b6:3a:73:84:da:25:49:27:d9:d9:4a:6f:7c:
                    f8:3e:f1:e5:0c:bc:e8:32:d9:c6:5d:d5:12:ce:e9:
                    14:6e:d7:a1:21:91:4d:2e:80:9a:b6:ce:3d:a0:69:
                    a0:a5:5f:51:6d:cf:4b:12:66:71:2c:d2:f0:27:e2:
                    4c:85:39:4e:38:9b:c6:f0:48:bb:cf:fb:78:04:d0:
                    5e:a5:97:c3:84:28:b9:1b:5a:77:74:49:56:ef:f6:
                    18:5c:dd:bb:e3:6b:73:7a:32:61:3b:32:f1:cb:6d:
                    24:f1:c8:3b:4a:8a:76:b8:a0:6b:7d:af:ab:44:d9:
                    fc:4d:d4:53:dd:e8:d7:ea:8d:bb:d8:cd:9d:1b:b0:
                    1e:48:34:9e:88:d2:c3:a4:ce:49:1e:f0:4a:20:50:
                    eb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:E7:61:37:E4:75:E5:D1:2B:4E:C0:2C:D0:46:80:35:FD:85:4F
            X509v3 Authority Key Identifier:
                keyid:75:90:56:D2:9F:FF:39:25:13:55:51:21:75:D3:5C:57:E1:A3:33:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:34:ed:cd:a9:15:c2:3b:8b:c3:72:51:2c:a7:b9:96:80:77:
         8b:a4:9d:e0:58:b3:7a:de:73:5b:49:4b:b6:1c:1b:8d:8f:5e:
         d3:64:c9:8e:3b:cc:e3:4f:01:76:ac:80:23:d5:b6:59:90:dd:
         b4:6b:c5:d5:2e:cb:1c:84:3a:33:7f:06:e2:17:e1:f5:3c:34:
         d1:94:cd:4b:91:b5:1a:3a:10:c6:87:e1:71:c3:89:c1:02:79:
         9b:65:e7:93:08:43:fa:4b:c7:dd:d0:6b:88:43:87:c7:cc:53:
         0d:d4:7b:b0:86:a6:54:df:1a:06:5b:a4:0b:68:54:8a:bf:ea:
         6a:2f:37:ba:6b:f2:ce:01:16:60:ae:a0:63:96:e4:54:b9:d5:
         59:71:ef:85:e0:b3:9c:36:90:e5:c0:27:d3:67:a7:2a:ed:e9:
         58:d1:f9:54:cb:67:72:2b:70:fc:5a:90:30:1c:ad:ee:47:81:
         a4:7b:38:1c:c2:ae:2b:89:2c:c0:d7:16:54:0d:51:d5:25:2b:
         8c:3b:bf:23:99:76:03:41:cf:c0:aa:db:d6:93:f9:6f:3c:68:
         81:6a:70:1e:c1:1d:3d:33:5b:54:28:a3:f8:08:40:6e:77:b9:
         26:e6:5f:9d:36:68:ae:1c:bb:fa:02:86:ec:43:1f:c0:cf:43:
         21:49:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:54 2025 by rpki-client on console.sobornost.net