Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36352e302f32342d3234203d3e20323637343132.roa
File:                     34352e3233352e36352e302f32342d3234203d3e20323637343132.roa (raw, json)
Hash identifier:          NfJTQbxT8xUR7ySzpguhJBvUIDSHJm2u2UBEyCyFQZM=
Subject key identifier:   B0:E6:42:A6:5E:26:C1:83:08:2D:CF:B2:E0:7E:8E:34:17:65:AD:20
Certificate issuer:       /CN=07FCA7D1215090422388794719E04DCE9A5F39AA
Certificate serial:       796A172E136DBCD4599358C3E47F04EEB136286B
Authority key identifier: 07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36352e302f32342d3234203d3e20323637343132.roa
Signing time:             Mon 03 Feb 2025 17:47:42 +0000
ROA not before:           Mon 03 Feb 2025 17:42:42 +0000
ROA not after:            Mon 02 Feb 2026 17:47:42 +0000
asID:                     267412
IP address blocks:        45.235.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6a:17:2e:13:6d:bc:d4:59:93:58:c3:e4:7f:04:ee:b1:36:28:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FCA7D1215090422388794719E04DCE9A5F39AA
        Validity
            Not Before: Feb  3 17:42:42 2025 GMT
            Not After : Feb  2 17:47:42 2026 GMT
        Subject: CN=B0E642A65E26C183082DCFB2E07E8E341765AD20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:44:85:05:72:01:13:07:a9:f6:13:c5:30:
                    f1:bd:7b:5b:95:ab:07:64:e3:fc:e4:0e:d6:08:bc:
                    7b:b8:d2:b2:bd:9f:1b:08:3b:8d:64:14:ef:4f:f0:
                    42:32:df:a5:e3:c6:a9:74:ef:19:cb:a2:7a:4b:2d:
                    0c:2a:a3:90:f7:bf:1c:27:a5:e9:b2:87:6e:13:d2:
                    13:dd:c1:b3:bb:dd:2f:65:cc:e3:5c:75:c6:45:f6:
                    b1:15:47:19:38:8d:1e:1f:3a:cb:73:ef:de:99:24:
                    0c:73:51:31:cb:b8:13:35:7e:fb:22:65:e5:cb:90:
                    22:38:12:20:11:b8:02:8a:25:41:60:b0:a5:b0:92:
                    e4:1c:d9:1b:03:9f:c0:d8:85:af:f7:f1:49:4d:a4:
                    30:ad:8a:f1:c4:ec:50:d1:3e:b5:40:84:49:1e:17:
                    5c:be:d9:46:62:ec:66:1f:4d:57:01:7e:7b:b6:d4:
                    8a:9c:56:6c:8e:6c:3d:0c:f2:47:19:7c:4c:90:89:
                    97:87:4d:7d:46:7b:5c:e4:e7:a7:16:ff:08:b0:ec:
                    d8:94:cb:44:36:58:a8:db:b6:b9:ed:12:23:e5:38:
                    bf:fc:31:5b:d8:4c:e5:1d:a2:17:79:72:ba:4f:f3:
                    86:61:ac:4c:de:b4:4b:da:d7:ba:8a:3e:39:ba:f8:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E6:42:A6:5E:26:C1:83:08:2D:CF:B2:E0:7E:8E:34:17:65:AD:20
            X509v3 Authority Key Identifier:
                keyid:07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/34352e3233352e36352e302f32342d3234203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:0d:5e:13:41:cc:50:7a:2e:6c:07:26:77:00:6a:80:00:
         be:0f:a2:26:f6:21:b4:ae:40:6b:73:a5:d0:95:9a:d8:d3:5d:
         4a:d8:92:5e:37:bf:0d:ec:7d:65:4c:8f:93:af:c4:00:05:b4:
         c1:c0:f5:2e:17:78:70:fe:cb:2e:47:82:ac:ef:c8:e6:07:ae:
         5e:64:f0:90:60:1e:7b:32:2f:17:af:86:10:a9:db:7d:f3:b7:
         74:90:48:d3:a0:b3:3e:d2:ef:91:54:0d:a6:13:29:6e:c8:fa:
         57:1b:01:cb:03:e3:b6:68:5b:0f:be:7d:d7:d9:d6:ed:0c:e6:
         57:e1:b0:3e:3c:ab:2c:d3:f0:54:01:32:65:ab:6d:9d:78:b9:
         83:b2:e0:c6:ca:0a:b1:a5:ea:f0:04:2d:a5:c5:34:b0:7d:9e:
         85:bd:b1:34:98:d9:59:87:20:c1:21:70:e5:21:c3:4a:d4:0d:
         d3:a5:24:bc:4f:06:f5:c6:3f:22:24:13:e9:14:2a:c2:59:07:
         b2:36:a5:41:4b:92:35:6a:aa:65:80:fa:c0:68:ef:70:7b:14:
         1c:4e:b9:00:e2:dc:79:2f:9c:b3:5f:ea:a2:a4:a2:d0:04:6f:
         1c:00:d8:9b:10:cd:1c:f3:98:30:af:44:fa:4d:64:6a:2d:5e:
         9f:bd:85:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:09 2025 by rpki-client on console.sobornost.net