Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33362e302f32342d3234203d3e20323638373930.roa
File:                     34352e3137332e33362e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier:          xlvR2Ip/YM+6ff3UJV6l9m/0xCNEY6CVmw5SpS2ag3c=
Subject key identifier:   2B:CC:86:98:BE:A0:D4:45:A0:C2:B6:33:F5:54:9F:B2:6C:3F:DF:CF
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       713A8929459B42E66C36AC4F5A68A2BB1BB1F237
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33362e302f32342d3234203d3e20323638373930.roa
Signing time:             Tue 15 Apr 2025 22:36:25 +0000
ROA not before:           Tue 15 Apr 2025 22:31:25 +0000
ROA not after:            Tue 14 Apr 2026 22:36:25 +0000
asID:                     268790
IP address blocks:        45.173.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 14:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3a:89:29:45:9b:42:e6:6c:36:ac:4f:5a:68:a2:bb:1b:b1:f2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Apr 15 22:31:25 2025 GMT
            Not After : Apr 14 22:36:25 2026 GMT
        Subject: CN=3082010A0282010100C402BF94875A31F526760B7D42F612D783F3D764CE7771A4453EB3A2BC17BA8D44D916F01546FE327C7A28F55B0CE32464A2583894E1B1E5CA41A7C3AE00229C4C7C7171C502C84AA877CE2116EBA4EA06E1EC398F13D3E9DC1D1562915F450446AA9299038EEC32449DEF2CBD44239E2753D7D466C7E7581A86F79010912F8C24902A36780E25E525D074C6EA5E2EAE558CDED62875EA6F553AC96650F871C6E6334D17BBEF330A73EB0002FF8D744DEB405E875136010ED2FCB171358F843A7EE5CC14A8EF0849B83FA324C09009416A4F2192B48898914EE322305047D20DB19C70FC29E3B56D05930F36D90623C651F64EF80A501C6F655C4E2D11708C9F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:bf:94:87:5a:31:f5:26:76:0b:7d:42:f6:
                    12:d7:83:f3:d7:64:ce:77:71:a4:45:3e:b3:a2:bc:
                    17:ba:8d:44:d9:16:f0:15:46:fe:32:7c:7a:28:f5:
                    5b:0c:e3:24:64:a2:58:38:94:e1:b1:e5:ca:41:a7:
                    c3:ae:00:22:9c:4c:7c:71:71:c5:02:c8:4a:a8:77:
                    ce:21:16:eb:a4:ea:06:e1:ec:39:8f:13:d3:e9:dc:
                    1d:15:62:91:5f:45:04:46:aa:92:99:03:8e:ec:32:
                    44:9d:ef:2c:bd:44:23:9e:27:53:d7:d4:66:c7:e7:
                    58:1a:86:f7:90:10:91:2f:8c:24:90:2a:36:78:0e:
                    25:e5:25:d0:74:c6:ea:5e:2e:ae:55:8c:de:d6:28:
                    75:ea:6f:55:3a:c9:66:50:f8:71:c6:e6:33:4d:17:
                    bb:ef:33:0a:73:eb:00:02:ff:8d:74:4d:eb:40:5e:
                    87:51:36:01:0e:d2:fc:b1:71:35:8f:84:3a:7e:e5:
                    cc:14:a8:ef:08:49:b8:3f:a3:24:c0:90:09:41:6a:
                    4f:21:92:b4:88:98:91:4e:e3:22:30:50:47:d2:0d:
                    b1:9c:70:fc:29:e3:b5:6d:05:93:0f:36:d9:06:23:
                    c6:51:f6:4e:f8:0a:50:1c:6f:65:5c:4e:2d:11:70:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CC:86:98:BE:A0:D4:45:A0:C2:B6:33:F5:54:9F:B2:6C:3F:DF:CF
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33362e302f32342d3234203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e2:6f:a0:41:cd:4a:75:e0:4d:75:ea:8a:a3:1a:da:4f:5a:
         bb:cf:b6:68:de:00:00:95:89:6e:cf:98:81:16:cb:1c:06:9c:
         e5:4b:64:af:e2:6f:69:3a:8c:12:0c:c9:ab:bb:61:01:d0:4d:
         09:93:3b:5b:0f:22:93:96:7d:ed:0d:da:79:20:92:f5:36:9f:
         ea:b5:42:2e:5e:1c:07:69:47:e0:74:75:fa:fb:cd:59:50:c9:
         02:a9:b6:99:63:1a:98:46:a6:b8:21:eb:93:a0:fa:ca:1c:17:
         68:18:67:aa:f7:ec:86:1b:66:47:99:f2:b6:31:9a:93:de:24:
         f4:9a:0c:e6:89:a1:cf:fb:f4:4f:e2:b9:e0:aa:e5:9b:72:b4:
         e1:07:6a:ad:9e:0c:c6:83:6a:56:b8:b4:93:a1:c0:47:b2:2a:
         2e:87:ff:bf:0b:ae:4e:04:26:61:ec:f4:48:5c:db:1e:dc:4c:
         f8:8e:28:f7:45:3f:34:19:b3:ac:92:2f:9e:b6:89:a8:b1:ff:
         97:cb:6f:d1:89:e6:e0:36:16:0d:b2:89:f8:cc:73:30:05:af:
         27:73:2d:72:f1:55:86:8a:54:21:64:3a:04:64:fe:c6:e5:15:
         cf:b1:90:f0:e2:32:95:a1:90:94:88:bf:42:9f:a7:69:03:c4:
         87:3a:f5:c8
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUcTqJKUWbQuZsNqxPWmiiuxux8jcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCNEM5MUVCRTA3RDcwN0VFNzc1QTE1N0FBNTgyQkY0
QjUzM0M2MjAeFw0yNTA0MTUyMjMxMjVaFw0yNjA0MTQyMjM2MjVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQwMkJGOTQ4NzVBMzFGNTI2
NzYwQjdENDJGNjEyRDc4M0YzRDc2NENFNzc3MUE0NDUzRUIzQTJCQzE3QkE4RDQ0
RDkxNkYwMTU0NkZFMzI3QzdBMjhGNTVCMENFMzI0NjRBMjU4Mzg5NEUxQjFFNUNB
NDFBN0MzQUUwMDIyOUM0QzdDNzE3MUM1MDJDODRBQTg3N0NFMjExNkVCQTRFQTA2
RTFFQzM5OEYxM0QzRTlEQzFEMTU2MjkxNUY0NTA0NDZBQTkyOTkwMzhFRUMzMjQ0
OURFRjJDQkQ0NDIzOUUyNzUzRDdENDY2QzdFNzU4MUE4NkY3OTAxMDkxMkY4QzI0
OTAyQTM2NzgwRTI1RTUyNUQwNzRDNkVBNUUyRUFFNTU4Q0RFRDYyODc1RUE2RjU1
M0FDOTY2NTBGODcxQzZFNjMzNEQxN0JCRUYzMzBBNzNFQjAwMDJGRjhENzQ0REVC
NDA1RTg3NTEzNjAxMEVEMkZDQjE3MTM1OEY4NDNBN0VFNUNDMTRBOEVGMDg0OUI4
M0ZBMzI0QzA5MDA5NDE2QTRGMjE5MkI0ODg5ODkxNEVFMzIyMzA1MDQ3RDIwREIx
OUM3MEZDMjlFM0I1NkQwNTkzMEYzNkQ5MDYyM0M2NTFGNjRFRjgwQTUwMUM2RjY1
NUM0RTJEMTE3MDhDOUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxAK/lIdaMfUmdgt9QvYS14Pz12TOd3GkRT6zorwXuo1E2RbwFUb+
Mnx6KPVbDOMkZKJYOJThseXKQafDrgAinEx8cXHFAshKqHfOIRbrpOoG4ew5jxPT
6dwdFWKRX0UERqqSmQOO7DJEne8svUQjnidT19Rmx+dYGob3kBCRL4wkkCo2eA4l
5SXQdMbqXi6uVYze1ih16m9VOslmUPhxxuYzTRe77zMKc+sAAv+NdE3rQF6HUTYB
DtL8sXE1j4Q6fuXMFKjvCEm4P6MkwJAJQWpPIZK0iJiRTuMiMFBH0g2xnHD8KeO1
bQWTDzbZBiPGUfZO+ApQHG9lXE4tEXCMnwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCvMhpi+oNRFoMK2M/VUn7JsP9/PMB8GA1UdIwQYMBaAFNK0yR6+B9cH7ndaFXql
gr9LUzxiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRyeW9HU1o0bmNaN01j
OGRoQ1ViczVWaHNBa1RDMm95QzFoNm1OQzhIVlpYLzEvRDJCNEM5MUVCRTA3RDcw
N0VFNzc1QTE1N0FBNTgyQkY0QjUzM0M2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMkI0QzkxRUJFMDdENzA3RUU3NzVBMTU3QUE1ODJCRjRCNTMz
QzYyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cnlvR1NaNG5jWjdNYzhkaENV
YnM1VmhzQWtUQzJveUMxaDZtTkM4SFZaWC8xLzM0MzUyZTMxMzczMzJlMzMzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODM3MzkzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2t
JDANBgkqhkiG9w0BAQsFAAOCAQEAFuJvoEHNSnXgTXXqiqMa2k9au8+2aN4AAJWJ
bs+YgRbLHAac5Utkr+JvaTqMEgzJq7thAdBNCZM7Ww8ik5Z97Q3aeSCS9Taf6rVC
Ll4cB2lH4HR1+vvNWVDJAqm2mWMamEamuCHrk6D6yhwXaBhnqvfshhtmR5nytjGa
k94k9JoM5omhz/v0T+K54Krlm3K04QdqrZ4MxoNqVri0k6HAR7IqLof/vwuuTgQm
Yez0SFzbHtxM+I4o90U/NBmzrJIvnraJqLH/l8tv0Ynm4DYWDbKJ+MxzMAWvJ3Mt
cvFVhopUIWQ6BGT+xuUVz7GQ8OIylaGQlIi/Qp+naQPEhzr1yA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:10 2025 by rpki-client on console.sobornost.net