Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa
File:                     34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa (raw, json)
Hash identifier:          lMO4yrGYKBsUZj4SQzp3jpNg7boVqwI/fiTvmKjGnsw=
Subject key identifier:   51:98:5C:79:BA:D2:89:A8:60:1E:7D:61:9F:F0:A3:9C:2F:1F:45:13
Certificate issuer:       /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
Certificate serial:       7D103EDFB81CC6DFDF1D52CECBE1C004C9F2B632
Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa
Signing time:             Thu 06 Mar 2025 04:05:19 +0000
ROA not before:           Thu 06 Mar 2025 04:00:19 +0000
ROA not after:            Thu 05 Mar 2026 04:05:19 +0000
asID:                     268513
IP address blocks:        45.161.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 07:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:10:3e:df:b8:1c:c6:df:df:1d:52:ce:cb:e1:c0:04:c9:f2:b6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Validity
            Not Before: Mar  6 04:00:19 2025 GMT
            Not After : Mar  5 04:05:19 2026 GMT
        Subject: CN=51985C79BAD289A8601E7D619FF0A39C2F1F4513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:cb:01:a3:c7:fb:2f:b8:60:da:63:d1:9d:
                    ad:8a:45:2f:d7:01:fa:8c:c9:cd:07:3d:e1:33:22:
                    55:f2:8c:55:a0:f8:9d:32:df:cd:8a:fd:2e:e2:2b:
                    b4:c4:dc:54:bf:34:5e:ab:a4:8d:a1:72:4e:0e:e7:
                    87:c0:22:df:93:31:b6:b7:07:92:98:ce:f4:ff:b5:
                    53:fe:5f:f6:ce:f8:45:eb:4f:13:81:b4:0a:6a:e2:
                    e2:f4:69:fd:e8:03:d3:8f:c4:3f:fd:c0:8f:ff:0a:
                    b2:2c:ba:a5:03:28:d0:69:e0:c6:e8:c9:59:80:75:
                    af:64:d8:58:7e:7f:93:6f:5b:7b:c5:6b:2c:5c:e6:
                    0a:b5:20:4e:d6:b6:48:5c:1e:84:89:d1:24:71:39:
                    6f:e5:85:c4:18:e5:95:90:aa:33:46:cc:66:73:98:
                    5c:0c:e9:70:4d:1d:0e:4a:53:f6:cc:90:3a:e3:9b:
                    f3:46:b4:c3:23:4b:71:b3:2b:83:49:91:4e:62:87:
                    a0:a2:7f:d2:b7:4d:11:85:59:be:e1:58:46:3f:21:
                    9d:7f:fa:73:87:6e:b1:f8:0f:83:bb:b7:5a:e8:85:
                    ea:97:fe:6e:68:68:6a:97:47:4f:ed:67:3e:d2:5d:
                    ce:f3:89:75:fe:f0:a6:98:55:ca:a9:0c:cf:1c:80:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:98:5C:79:BA:D2:89:A8:60:1E:7D:61:9F:F0:A3:9C:2F:1F:45:13
            X509v3 Authority Key Identifier:
                keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:8d:b2:5f:f6:21:20:55:77:a2:d9:1f:43:50:47:7b:20:7b:
         a7:2f:a9:86:79:51:5f:05:9a:32:6e:a0:96:02:24:7e:a1:3c:
         e6:57:fc:48:b1:25:ee:91:27:61:1c:81:ca:bf:ab:6b:98:d1:
         54:4f:1e:f2:d3:9d:5c:f7:64:47:3d:7d:9a:59:62:16:26:a8:
         da:61:6d:d8:aa:0f:36:c0:0a:d7:ab:98:ea:3b:a4:6e:00:7e:
         45:11:0a:d6:74:f8:32:bf:2a:65:1f:e7:30:97:ed:e2:46:2c:
         97:1a:d4:bf:78:77:69:98:9b:d3:7b:a4:9e:88:3f:2e:81:14:
         b9:83:4c:75:a8:65:24:e1:30:77:2d:ac:c1:6e:92:b9:cd:11:
         0d:19:16:cf:7a:ea:a3:b7:1a:f2:f2:c6:b3:75:a3:15:c9:8f:
         2b:1c:76:f4:41:31:2b:4b:3f:ce:d2:57:67:f0:9f:90:55:33:
         c9:93:64:ac:c5:2f:f5:e2:59:af:7a:9e:e8:fb:ff:27:2f:48:
         ad:2a:ce:91:b6:a6:bd:7c:d7:81:64:93:cb:ce:fd:44:e6:43:
         c4:4b:05:11:12:ed:73:16:10:a0:3b:d3:e3:65:95:a9:e7:8f:
         90:96:1e:e9:02:b5:42:9f:b4:d5:73:90:18:c5:45:e8:45:ff:
         a0:ea:ca:fe
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfRA+37gcxt/fHVLOy+HABMnytjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTREOENDRDk3N0MyMkM3ODZCQzFGMTczRkM0RTc3OTJF
OEE0NDIwQTAeFw0yNTAzMDYwNDAwMTlaFw0yNjAzMDUwNDA1MTlaMDMxMTAvBgNV
BAMTKDUxOTg1Qzc5QkFEMjg5QTg2MDFFN0Q2MTlGRjBBMzlDMkYxRjQ1MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrG8sBo8f7L7hg2mPRna2KRS/X
AfqMyc0HPeEzIlXyjFWg+J0y382K/S7iK7TE3FS/NF6rpI2hck4O54fAIt+TMba3
B5KYzvT/tVP+X/bO+EXrTxOBtApq4uL0af3oA9OPxD/9wI//CrIsuqUDKNBp4Mbo
yVmAda9k2Fh+f5NvW3vFayxc5gq1IE7WtkhcHoSJ0SRxOW/lhcQY5ZWQqjNGzGZz
mFwM6XBNHQ5KU/bMkDrjm/NGtMMjS3GzK4NJkU5ih6Cif9K3TRGFWb7hWEY/IZ1/
+nOHbrH4D4O7t1roheqX/m5oaGqXR0/tZz7SXc7ziXX+8KaYVcqpDM8cgJ/rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUZhcebrSiahgHn1hn/CjnC8fRRMwHwYDVR0j
BBgwFoAU5NjM2XfCLHhrwfFz/E53kuikQgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGZhdnBQVVlFdGFEWHp1bUJvQmo0ZmhQVTV2Y21Ld0ozSEJ1cmRlWkJi
b2IvMS9FNEQ4Q0NEOTc3QzIyQzc4NkJDMUYxNzNGQzRFNzc5MkU4QTQ0MjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0RDhDQ0Q5NzdDMjJDNzg2
QkMxRjE3M0ZDNEU3NzkyRThBNDQyMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRmYXZwUFVZRXRhRFh6dW1Cb0JqNGZoUFU1dmNtS3dKM0hCdXJkZVpCYm9iLzEv
MzQzNTJlMzEzNjMxMmUzMjMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtodYwDQYJKoZIhvcNAQELBQADggEBAJqNsl/2
ISBVd6LZH0NQR3sge6cvqYZ5UV8FmjJuoJYCJH6hPOZX/EixJe6RJ2Ecgcq/q2uY
0VRPHvLTnVz3ZEc9fZpZYhYmqNphbdiqDzbACtermOo7pG4AfkURCtZ0+DK/KmUf
5zCX7eJGLJca1L94d2mYm9N7pJ6IPy6BFLmDTHWoZSThMHctrMFukrnNEQ0ZFs96
6qO3GvLyxrN1oxXJjyscdvRBMStLP87SV2fwn5BVM8mTZKzFL/XiWa96nuj7/ycv
SK0qzpG2pr1814Fkk8vO/UTmQ8RLBRES7XMWEKA70+Nllannj5CWHukCtUKftNVz
kBjFRehF/6Dqyv4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:57 2025 by rpki-client on console.sobornost.net