Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/34352e3136372e3231382e302f32342d3234203d3e20323638303039.roa
File:                     34352e3136372e3231382e302f32342d3234203d3e20323638303039.roa (raw, json)
Hash identifier:          y/vwmLrW6WGS6QqfS/e0QadMBDEigYsaajaBKCPHpA4=
Subject key identifier:   EF:BC:B1:98:1A:41:94:06:13:A3:B1:13:40:1D:F1:AB:30:62:AC:15
Certificate issuer:       /CN=3FF4610BF1D06106BA50D14E85900089D08C658F
Certificate serial:       4368F2660070850E49849130DF5063AA848F4A6E
Authority key identifier: 3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/34352e3136372e3231382e302f32342d3234203d3e20323638303039.roa
Signing time:             Wed 26 Mar 2025 14:09:25 +0000
ROA not before:           Wed 26 Mar 2025 14:04:25 +0000
ROA not after:            Wed 25 Mar 2026 14:09:25 +0000
asID:                     268009
IP address blocks:        45.167.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:68:f2:66:00:70:85:0e:49:84:91:30:df:50:63:aa:84:8f:4a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF4610BF1D06106BA50D14E85900089D08C658F
        Validity
            Not Before: Mar 26 14:04:25 2025 GMT
            Not After : Mar 25 14:09:25 2026 GMT
        Subject: CN=EFBCB1981A41940613A3B113401DF1AB3062AC15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:89:35:c8:bc:9a:b6:29:d4:55:2f:3c:72:
                    3d:1c:c7:e8:2a:5a:2e:36:d9:ab:96:ed:24:74:79:
                    41:62:ec:22:e3:00:44:e9:18:6f:47:ef:70:39:66:
                    85:78:bc:6b:ea:c7:bf:83:47:9b:e4:9a:46:b1:85:
                    34:a2:15:be:10:ad:ad:59:fd:c6:d6:02:bb:4e:04:
                    49:dc:1a:dc:27:25:34:8c:30:7c:99:c6:da:a4:61:
                    24:57:57:28:14:77:32:19:a2:cf:37:c6:f3:c4:75:
                    80:5c:e5:3e:b3:94:9c:01:bc:d9:f5:30:08:38:30:
                    fb:06:c5:12:41:57:23:84:fa:c4:ac:95:de:ab:3b:
                    89:bd:9c:2e:3e:fa:89:19:61:b2:96:06:40:b9:66:
                    ed:70:71:2e:a3:e8:c9:ea:b8:f6:2b:48:b0:a8:1a:
                    74:f6:01:be:a5:59:e2:d7:57:f7:41:3d:d5:3b:ac:
                    38:c6:5e:74:6c:ec:45:87:db:34:a2:01:e1:01:19:
                    f0:d7:b7:21:a4:20:da:62:0a:be:bf:1a:ef:f1:0f:
                    06:e0:8a:cb:91:d5:8b:06:14:b4:d7:7a:31:05:bd:
                    2e:86:f3:18:76:44:9f:5f:68:7c:fa:ab:a8:83:46:
                    8f:96:24:ab:09:92:f9:1b:45:1a:70:76:b0:b3:f7:
                    39:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BC:B1:98:1A:41:94:06:13:A3:B1:13:40:1D:F1:AB:30:62:AC:15
            X509v3 Authority Key Identifier:
                keyid:3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/34352e3136372e3231382e302f32342d3234203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:ec:ce:ad:23:ca:2b:9e:ad:28:ff:41:78:32:f2:e0:61:fc:
         1a:aa:19:b0:3e:4f:f2:d9:38:2d:97:1c:9e:af:cc:2f:fc:b5:
         6a:7f:43:95:c7:fe:23:34:62:6a:12:6b:7a:df:fa:2c:a8:f2:
         57:74:f2:16:a3:16:d5:cf:8d:22:2d:ed:fc:3f:30:2f:91:cd:
         32:8b:34:7a:06:f8:bf:12:90:ef:80:10:17:5c:88:29:02:9e:
         ff:5f:77:05:df:8b:7f:aa:1c:d2:73:8d:09:7f:8b:8d:29:37:
         4a:07:7c:7e:00:66:6d:26:e7:30:68:b0:10:47:87:12:f6:65:
         0f:f3:fc:77:5d:0d:3a:72:36:57:49:84:8b:97:cb:15:f9:79:
         28:d8:39:f7:1b:01:bc:b2:40:67:77:39:ed:ae:c8:fa:3f:9f:
         8f:38:27:40:6d:e3:d1:5f:b9:76:31:4a:48:56:01:21:5b:e3:
         87:eb:a8:21:9e:8d:60:8b:7d:5b:54:b7:d8:69:8d:d4:36:76:
         f4:b8:89:2c:2b:0f:6f:a4:66:06:99:91:0b:6e:ae:38:f8:1a:
         b3:80:f4:17:ee:89:00:af:6e:9e:be:3a:56:7f:30:97:d9:9f:
         ca:64:10:06:5e:b0:eb:f8:78:a4:a0:72:e5:b7:73:11:2c:12:
         10:19:8b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:54 2025 by rpki-client on console.sobornost.net