Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/34352e3136392e3137322e302f32322d3234203d3e20323638373031.roa
File:                     34352e3136392e3137322e302f32322d3234203d3e20323638373031.roa (raw, json)
Hash identifier:          wXRaVvQHTiwrI74rUYR2+jY/NLYFKWOjbTZ9OxdgLm8=
Subject key identifier:   36:D3:E0:7E:7D:2F:4B:F5:1D:85:72:97:8F:F2:8C:FC:84:AF:8E:7D
Certificate issuer:       /CN=7DC1C2AA899276F04E4330B1E4471D510486417F
Certificate serial:       7FC8D2D424DDF4136D299238356A23676EC5C712
Authority key identifier: 7D:C1:C2:AA:89:92:76:F0:4E:43:30:B1:E4:47:1D:51:04:86:41:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC1C2AA899276F04E4330B1E4471D510486417F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/34352e3136392e3137322e302f32322d3234203d3e20323638373031.roa
Signing time:             Wed 05 Mar 2025 23:51:42 +0000
ROA not before:           Wed 05 Mar 2025 23:46:42 +0000
ROA not after:            Wed 04 Mar 2026 23:51:42 +0000
asID:                     268701
IP address blocks:        45.169.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/7DC1C2AA899276F04E4330B1E4471D510486417F.crl
                          rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/7DC1C2AA899276F04E4330B1E4471D510486417F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC1C2AA899276F04E4330B1E4471D510486417F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c8:d2:d4:24:dd:f4:13:6d:29:92:38:35:6a:23:67:6e:c5:c7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DC1C2AA899276F04E4330B1E4471D510486417F
        Validity
            Not Before: Mar  5 23:46:42 2025 GMT
            Not After : Mar  4 23:51:42 2026 GMT
        Subject: CN=36D3E07E7D2F4BF51D8572978FF28CFC84AF8E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:26:6e:26:6b:fc:c4:10:c6:6a:a8:ca:97:
                    77:b4:83:88:4d:07:32:19:7f:79:b4:bf:a0:5a:44:
                    52:24:9f:1e:d4:c8:2f:be:13:d4:df:22:b9:e6:ca:
                    8f:61:2b:72:c7:26:db:3d:cf:70:87:7c:1a:7c:39:
                    ae:53:7d:a2:0a:86:75:88:67:5d:65:0d:ce:3d:c7:
                    8a:0a:17:80:06:98:0e:63:ae:9a:e6:c9:1b:95:d3:
                    e0:c1:d1:5f:bf:ef:ed:ef:03:54:45:c0:d8:15:02:
                    05:c3:df:9f:66:43:04:38:25:0a:d1:bb:27:47:78:
                    0c:91:24:38:14:8c:50:e9:f2:d3:02:27:d9:90:f4:
                    97:cc:98:29:0a:1f:2d:9d:42:4a:ca:46:2e:0c:f1:
                    65:c0:d4:b4:e3:6b:05:2c:6b:e0:87:1e:72:4d:12:
                    0f:07:5a:a4:75:02:b2:29:1a:a5:4f:cd:11:b8:7c:
                    be:15:75:5c:d8:a9:38:21:9b:c3:95:ad:c3:cc:bc:
                    80:2e:58:16:92:d6:e9:ac:a8:c3:f3:ad:1e:d8:5a:
                    80:71:b4:44:fc:07:5a:58:fd:2d:b6:27:06:f7:68:
                    4f:95:f3:18:de:ca:40:ac:58:47:a5:ba:a0:ef:d6:
                    41:22:dc:b5:31:ed:4e:b0:2f:9a:e2:26:a4:e5:7e:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D3:E0:7E:7D:2F:4B:F5:1D:85:72:97:8F:F2:8C:FC:84:AF:8E:7D
            X509v3 Authority Key Identifier:
                keyid:7D:C1:C2:AA:89:92:76:F0:4E:43:30:B1:E4:47:1D:51:04:86:41:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/7DC1C2AA899276F04E4330B1E4471D510486417F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC1C2AA899276F04E4330B1E4471D510486417F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/1/34352e3136392e3137322e302f32322d3234203d3e20323638373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d8:63:8c:19:3e:5e:d6:2f:e3:f3:4d:8b:52:cc:c5:31:ca:c4:
         6d:71:88:53:61:17:8b:f4:11:35:36:45:47:cf:9b:12:a0:35:
         53:29:b9:b5:8e:a5:c9:2e:fd:fd:77:bf:fd:8c:af:ed:5f:50:
         8f:18:b8:de:df:b8:3c:3d:fa:ea:57:6a:69:3f:e1:2c:f6:40:
         6f:76:4a:42:f4:25:df:62:0c:49:fa:bd:38:16:eb:f2:b9:3a:
         e1:a7:42:ac:18:6b:e9:fa:a8:65:bc:bc:51:fd:f0:12:86:bf:
         ad:04:33:1c:e0:11:10:9e:06:e9:bb:ee:af:d4:b8:2e:46:3a:
         76:4c:a3:05:3b:18:26:49:02:9d:c7:20:5e:12:66:e8:c4:14:
         3b:bd:bd:fa:05:62:3f:14:d1:a1:8e:de:d0:c8:2d:9a:e6:24:
         c8:f5:7e:81:d3:7d:cc:9f:9a:7f:65:94:40:f6:c8:16:8e:9b:
         66:92:ee:4d:7e:e4:02:ad:9b:19:49:f4:0f:34:a9:2f:b5:07:
         2c:fe:9f:66:74:d5:c8:70:d4:00:f9:0c:35:f8:19:c8:61:1e:
         35:78:43:de:93:b2:a1:19:38:cb:1e:91:70:a1:60:72:91:dc:
         5c:7d:33:73:67:d9:9a:b6:36:37:fd:0b:cf:0f:a4:87:5c:9f:
         60:c9:22:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:09 2025 by rpki-client on console.sobornost.net