Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/34352e3233342e3230382e302f32322d3332203d3e20323637333835.roa
File:                     34352e3233342e3230382e302f32322d3332203d3e20323637333835.roa (raw, json)
Hash identifier:          yq5XeCU0gzS8O2JDLt36f5CmAWg447NZw84atnW3Iig=
Subject key identifier:   5C:E5:0D:46:60:21:E1:DF:AE:C2:E7:EC:45:A8:94:1F:50:C3:48:BE
Certificate issuer:       /CN=2544A744BF63CAFEE703C310B888A17EEA5620E4
Certificate serial:       1F06BAD88A371867985F25353248220235703A4B
Authority key identifier: 25:44:A7:44:BF:63:CA:FE:E7:03:C3:10:B8:88:A1:7E:EA:56:20:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2544A744BF63CAFEE703C310B888A17EEA5620E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/34352e3233342e3230382e302f32322d3332203d3e20323637333835.roa
Signing time:             Sat 08 Feb 2025 20:41:41 +0000
ROA not before:           Sat 08 Feb 2025 20:36:41 +0000
ROA not after:            Sat 07 Feb 2026 20:41:41 +0000
asID:                     267385
IP address blocks:        45.234.208.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.crl
                          rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2544A744BF63CAFEE703C310B888A17EEA5620E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:06:ba:d8:8a:37:18:67:98:5f:25:35:32:48:22:02:35:70:3a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2544A744BF63CAFEE703C310B888A17EEA5620E4
        Validity
            Not Before: Feb  8 20:36:41 2025 GMT
            Not After : Feb  7 20:41:41 2026 GMT
        Subject: CN=5CE50D466021E1DFAEC2E7EC45A8941F50C348BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d2:33:1e:1e:55:dc:6c:ed:8d:41:27:16:8d:
                    05:4a:9e:0e:ff:15:b6:fa:1f:4d:b0:07:79:53:68:
                    c7:6a:d1:2b:8e:74:64:ed:35:69:b1:cc:c1:95:c4:
                    02:b4:e4:cb:2a:7b:f6:73:c7:22:88:4f:5f:48:e0:
                    ff:c2:84:47:b6:37:80:12:67:3c:70:aa:d1:84:71:
                    59:b4:7c:07:52:5e:3b:b4:ed:a1:31:0c:a0:cd:74:
                    8c:ac:82:4c:c6:ba:62:90:6c:f3:4f:35:04:37:d5:
                    53:f0:b8:1a:5c:80:d9:f9:e5:95:f0:f8:2a:2f:90:
                    63:39:2b:47:08:e7:6e:da:45:a7:f5:da:fb:e1:af:
                    d1:17:d2:86:4b:23:63:4b:9c:20:d5:49:ab:8e:e9:
                    66:89:90:dd:c2:f5:27:f0:36:eb:ba:78:37:cf:3b:
                    d7:43:7b:c9:ba:90:aa:69:07:9f:53:8c:2b:c9:2d:
                    66:7d:b2:14:d3:a0:f8:54:76:6f:a3:ee:46:c6:0c:
                    ac:29:f7:66:b4:e1:de:a9:79:1e:ce:a9:75:15:1d:
                    97:85:83:38:4d:41:a8:c4:69:89:c9:1e:e5:a6:55:
                    96:6a:66:a8:0c:7a:18:b5:b7:ea:78:69:82:51:ae:
                    61:fd:e7:cd:5a:b7:bc:fa:0b:e2:22:a9:40:c2:7a:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E5:0D:46:60:21:E1:DF:AE:C2:E7:EC:45:A8:94:1F:50:C3:48:BE
            X509v3 Authority Key Identifier:
                keyid:25:44:A7:44:BF:63:CA:FE:E7:03:C3:10:B8:88:A1:7E:EA:56:20:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2544A744BF63CAFEE703C310B888A17EEA5620E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/34352e3233342e3230382e302f32322d3332203d3e20323637333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:c1:ea:36:97:5c:91:e1:59:e9:ec:99:26:a8:fa:43:12:c8:
         8a:0e:48:00:10:b7:71:01:5d:c3:14:6c:65:2a:67:e6:55:22:
         20:b3:1c:86:71:f6:2f:04:e3:59:a3:41:82:1c:df:72:d9:ed:
         36:f4:ab:5f:0e:f6:44:a8:b2:c7:93:ec:bc:c2:cc:3d:4f:7d:
         80:01:46:11:cb:ba:63:dd:55:96:c3:14:10:58:52:18:8c:f8:
         5b:fb:fb:00:a1:f4:55:64:b0:7a:5c:12:2c:ff:9a:7c:19:ee:
         29:9b:f6:10:6c:7a:1c:bf:22:de:2d:e7:bd:6f:4f:4d:43:47:
         48:60:78:d2:18:f4:13:61:05:c3:f9:bb:c9:46:53:b0:c8:fd:
         bb:1d:0f:09:22:6b:63:64:6a:73:39:c3:9e:39:d6:47:e9:c3:
         2f:08:3e:9f:6a:81:d0:8a:45:d8:a0:21:de:00:7f:52:5b:b3:
         53:1d:94:50:93:f8:1a:99:08:04:24:06:96:5f:b2:69:16:aa:
         ad:97:1c:2c:ac:c1:e5:5a:34:71:fb:03:92:92:1d:f7:3a:69:
         72:0e:bd:b6:f0:21:dd:d7:4b:0e:4e:96:b7:92:31:f3:f8:8d:
         4b:cd:6d:24:ee:04:05:69:ef:73:63:fd:98:34:ba:0a:b5:87:
         e8:9b:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:16 2025 by rpki-client on console.sobornost.net