Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/34352e3136312e362e302f32342d3234203d3e20323638343234.roa
File:                     34352e3136312e362e302f32342d3234203d3e20323638343234.roa (raw, json)
Hash identifier:          Xr4pWJPal3nJE6xppgvr7xz7oIRlMWjORJpopMQ9J5M=
Subject key identifier:   F1:E9:D1:85:8B:AF:28:CA:68:A1:BC:D4:77:62:C4:2D:7B:B6:93:0B
Certificate issuer:       /CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
Certificate serial:       6DF03987DD42E82027E5E81B2E589C314C2AE5C4
Authority key identifier: 93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/34352e3136312e362e302f32342d3234203d3e20323638343234.roa
Signing time:             Thu 06 Mar 2025 01:41:50 +0000
ROA not before:           Thu 06 Mar 2025 01:36:50 +0000
ROA not after:            Thu 05 Mar 2026 01:41:50 +0000
asID:                     268424
IP address blocks:        45.161.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl
                          rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f0:39:87:dd:42:e8:20:27:e5:e8:1b:2e:58:9c:31:4c:2a:e5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
        Validity
            Not Before: Mar  6 01:36:50 2025 GMT
            Not After : Mar  5 01:41:50 2026 GMT
        Subject: CN=F1E9D1858BAF28CA68A1BCD47762C42D7BB6930B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1b:11:79:da:69:6a:4e:f0:ac:66:8f:da:24:
                    e1:f9:02:3c:96:13:e5:10:28:1f:bc:7d:90:01:33:
                    e9:5e:5d:15:8c:9f:71:a8:f5:3f:95:13:7b:5a:f4:
                    a1:4d:e8:2b:17:4b:79:51:b0:32:b8:73:26:18:9a:
                    65:7e:82:c2:5a:3c:c7:1f:aa:d9:42:ff:7e:73:9c:
                    37:0b:4a:74:be:31:e6:3e:83:b3:d1:a0:30:63:11:
                    33:38:e7:2f:ff:f2:d4:02:85:79:b4:28:a5:fa:b3:
                    0c:0e:8a:e9:bf:fa:e1:ce:a4:f4:23:d5:4b:ad:3a:
                    2b:6c:05:b9:80:e9:39:fd:6f:36:c1:6d:04:59:52:
                    87:07:f8:db:18:f8:3c:75:7a:4a:cb:6f:fa:12:59:
                    d3:24:63:99:33:c5:35:77:8e:78:97:ef:07:e8:1c:
                    96:5c:1d:71:57:b7:ab:f4:31:96:60:be:ff:5d:a3:
                    40:77:cf:5b:4e:b4:ec:ce:af:94:04:86:2a:2a:5e:
                    3f:b8:ae:ae:eb:9b:09:bb:40:3d:c0:74:5e:a3:0e:
                    28:eb:53:f4:a9:cf:0d:2f:d5:dc:f9:11:7a:4b:97:
                    0a:14:72:80:87:c0:b8:aa:70:c8:72:25:1c:33:52:
                    7c:e9:8f:a2:4f:56:39:3b:dc:4d:20:98:4a:b5:e9:
                    b1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E9:D1:85:8B:AF:28:CA:68:A1:BC:D4:77:62:C4:2D:7B:B6:93:0B
            X509v3 Authority Key Identifier:
                keyid:93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/34352e3136312e362e302f32342d3234203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:04:5a:c1:42:ad:92:dc:4a:d4:c6:ae:e0:89:22:87:6b:92:
         82:b8:40:d0:be:45:9a:48:74:62:60:d4:78:1e:f7:43:7a:42:
         0b:64:9a:ff:d9:39:4f:be:e9:eb:14:1b:28:e9:34:4a:ff:89:
         18:51:3c:a5:94:a0:96:a7:5b:5e:b4:f5:de:72:ec:ba:e9:fd:
         24:20:e3:92:35:01:93:52:9d:a1:f0:4d:ec:35:e5:26:76:bb:
         ec:71:ef:86:40:33:c7:78:8b:cf:f7:fb:07:b8:5e:71:cd:03:
         52:57:5a:8d:8e:20:a2:0b:18:cf:7c:85:84:8b:f3:b3:3c:09:
         fb:20:11:c6:a9:64:6d:d2:b8:56:5f:c4:08:ed:b4:a4:72:e2:
         73:37:66:98:af:7e:49:63:3b:26:c3:02:24:37:ec:05:24:5f:
         c5:32:a3:b7:e6:51:5c:c0:f2:d3:a8:70:bf:b2:8b:e0:40:32:
         21:d3:cb:66:27:85:aa:2d:9d:4e:65:e0:91:ef:86:2b:47:d3:
         5b:15:f7:78:82:7a:9b:24:c7:f3:4a:25:56:b8:2f:96:cd:5e:
         ae:4e:00:99:fc:1c:db:9a:fa:ca:c8:10:8c:13:93:8b:e6:b5:
         e0:95:b8:ae:d1:6f:20:20:61:71:f1:2b:71:3e:c6:77:1e:d2:
         6d:9d:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:07 2025 by rpki-client on console.sobornost.net