Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230342e302f32342d3234203d3e20323636353434.roa
File:                     34352e36352e3230342e302f32342d3234203d3e20323636353434.roa (raw, json)
Hash identifier:          aULvvjaBI5CWve/Abev/1REj+S7IsGIzsCkjipRRoUQ=
Subject key identifier:   81:D2:B9:5B:8F:76:F1:E4:74:DF:82:84:A5:49:CD:09:0C:9E:2E:AB
Certificate issuer:       /CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
Certificate serial:       76F1DEB3DA4076BC8CE2C0E25C4F0141621E2F8B
Authority key identifier: 2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230342e302f32342d3234203d3e20323636353434.roa
Signing time:             Sun 27 Apr 2025 01:55:12 +0000
ROA not before:           Sun 27 Apr 2025 01:50:12 +0000
ROA not after:            Sun 26 Apr 2026 01:55:12 +0000
asID:                     266544
IP address blocks:        45.65.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f1:de:b3:da:40:76:bc:8c:e2:c0:e2:5c:4f:01:41:62:1e:2f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
        Validity
            Not Before: Apr 27 01:50:12 2025 GMT
            Not After : Apr 26 01:55:12 2026 GMT
        Subject: CN=81D2B95B8F76F1E474DF8284A549CD090C9E2EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:1c:3d:a8:c5:5e:fb:9a:10:5a:2f:44:09:
                    0e:f7:68:9a:df:44:ad:c4:51:1a:eb:c2:0a:6c:73:
                    d2:17:e0:a0:69:19:5c:d8:62:f5:cb:8a:81:04:8d:
                    b7:b5:95:5e:44:ce:7f:dd:49:a7:14:e2:37:21:f5:
                    73:57:40:2b:64:92:e3:b3:18:ee:0c:80:a9:b8:36:
                    0c:5b:73:53:34:fc:6e:32:38:ea:05:0a:8c:f8:d8:
                    6d:ff:bd:e7:eb:44:cd:e6:a4:d2:e8:9e:09:22:19:
                    34:30:1b:03:31:40:68:fa:b9:11:a8:2b:96:be:ed:
                    bd:f6:a6:24:3f:02:f4:b9:84:f3:e7:0b:01:91:a8:
                    c5:31:b5:e7:64:22:cd:e1:54:2a:88:27:ab:68:39:
                    33:4c:27:10:df:db:3b:c9:c9:34:96:9d:af:aa:9e:
                    b4:69:07:32:e8:35:ad:cc:93:d4:9b:64:22:c4:44:
                    8c:c7:ee:bf:d2:17:60:86:25:95:15:6b:8a:18:07:
                    1c:cc:76:37:66:d6:ed:ee:49:7c:0f:5c:8d:cd:d7:
                    b1:b1:fa:cb:da:93:bb:0e:c4:14:00:61:f8:a2:9d:
                    cd:76:29:21:dd:a5:d8:51:4c:8b:4d:34:a1:50:18:
                    9b:b4:b4:f7:00:72:80:bb:da:2b:d9:09:46:93:fe:
                    65:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D2:B9:5B:8F:76:F1:E4:74:DF:82:84:A5:49:CD:09:0C:9E:2E:AB
            X509v3 Authority Key Identifier:
                keyid:2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230342e302f32342d3234203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:93:57:ae:da:8a:5e:72:98:72:30:43:dc:6b:5f:20:62:99:
         e0:7a:fa:d3:f3:82:8b:15:ad:41:90:3f:57:96:2e:db:a1:68:
         de:a1:ee:1d:7d:2f:b4:56:a2:6f:c6:4f:97:d7:c4:81:c7:75:
         45:58:26:fc:95:55:57:d4:37:7f:c2:b3:54:0c:0a:d6:87:e2:
         cc:26:0c:09:17:e5:4a:02:e9:3b:5e:a3:45:ea:91:71:fb:b2:
         fa:b7:8f:fc:cc:5f:b1:e7:6f:fb:71:35:2d:39:a2:84:52:a2:
         a7:7e:9f:e2:87:ea:e9:c5:10:6d:59:6f:f6:ee:55:44:97:f1:
         b0:bf:3d:1f:b3:53:5d:64:a0:5a:67:56:e3:15:da:04:d3:57:
         40:cf:46:f8:10:c4:62:13:54:5f:dc:78:d9:da:8d:a8:55:1c:
         b9:c0:51:1a:15:c4:c5:49:8c:91:07:a6:72:0c:47:0c:aa:f1:
         a1:1f:08:bb:ee:16:3a:39:f6:5e:96:6e:e0:3b:e6:8f:76:7e:
         f0:c6:08:9e:4c:51:3f:b2:da:52:dd:88:ec:0e:96:bd:7b:8b:
         a0:14:70:d0:99:9d:48:86:26:f9:32:59:ec:34:b4:9b:93:22:
         29:76:0a:d3:c2:90:93:29:64:d7:4c:30:23:ee:b8:ab:7e:0b:
         b1:52:7d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:05 2025 by rpki-client on console.sobornost.net