Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e322e302f32342d3234203d3e20323639353032.roa
File:                     34352e3138362e322e302f32342d3234203d3e20323639353032.roa (raw, json)
Hash identifier:          +O/bJxu5IBX/MXng7XAUrm3ianqgy4GYhyf+u9+Vafw=
Subject key identifier:   92:ED:A3:C5:DA:15:71:6E:81:CC:49:B0:AC:EE:02:02:4B:45:EC:45
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       4D005D0ACA0A02A4265D72D69E4F95F3D05370B5
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e322e302f32342d3234203d3e20323639353032.roa
Signing time:             Sun 13 Apr 2025 00:09:46 +0000
ROA not before:           Sun 13 Apr 2025 00:04:46 +0000
ROA not after:            Sun 12 Apr 2026 00:09:46 +0000
asID:                     269502
IP address blocks:        45.186.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 14:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:00:5d:0a:ca:0a:02:a4:26:5d:72:d6:9e:4f:95:f3:d0:53:70:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: Apr 13 00:04:46 2025 GMT
            Not After : Apr 12 00:09:46 2026 GMT
        Subject: CN=3082010A0282010100B840F38AF35D56445C3EA2DE7864B42EBB4D1FB283666995928306A722D5C17D994338881E7B58F4E7D7DADABB771344075791F53A84885A78413A40980203F36611F939A48DD8F83D4801DA82D7963E9C7F58062C9539A63CE91F04D87B5E7958C5460D366A93D2783888C9D07568F058C02B4638373302D91D9090E4D479200978C2E51FEE2F1115BBC4A9F1FB810617DBA42543BAECB55C18B7CD00406F86CD94CC784D69B8907017EE4FB34532F8B28A560B8337104BE73334F100DA8FD3812C236B559EEB223CEEBB858614BDD2EDA95A99922C1D87A3147A1FCE046CB17A7A1260A9CFAEB12BDB2E8AD290F35013AA57683168554D789A601049B385450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:f3:8a:f3:5d:56:44:5c:3e:a2:de:78:64:
                    b4:2e:bb:4d:1f:b2:83:66:69:95:92:83:06:a7:22:
                    d5:c1:7d:99:43:38:88:1e:7b:58:f4:e7:d7:da:da:
                    bb:77:13:44:07:57:91:f5:3a:84:88:5a:78:41:3a:
                    40:98:02:03:f3:66:11:f9:39:a4:8d:d8:f8:3d:48:
                    01:da:82:d7:96:3e:9c:7f:58:06:2c:95:39:a6:3c:
                    e9:1f:04:d8:7b:5e:79:58:c5:46:0d:36:6a:93:d2:
                    78:38:88:c9:d0:75:68:f0:58:c0:2b:46:38:37:33:
                    02:d9:1d:90:90:e4:d4:79:20:09:78:c2:e5:1f:ee:
                    2f:11:15:bb:c4:a9:f1:fb:81:06:17:db:a4:25:43:
                    ba:ec:b5:5c:18:b7:cd:00:40:6f:86:cd:94:cc:78:
                    4d:69:b8:90:70:17:ee:4f:b3:45:32:f8:b2:8a:56:
                    0b:83:37:10:4b:e7:33:34:f1:00:da:8f:d3:81:2c:
                    23:6b:55:9e:eb:22:3c:ee:bb:85:86:14:bd:d2:ed:
                    a9:5a:99:92:2c:1d:87:a3:14:7a:1f:ce:04:6c:b1:
                    7a:7a:12:60:a9:cf:ae:b1:2b:db:2e:8a:d2:90:f3:
                    50:13:aa:57:68:31:68:55:4d:78:9a:60:10:49:b3:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:ED:A3:C5:DA:15:71:6E:81:CC:49:B0:AC:EE:02:02:4B:45:EC:45
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/34352e3138362e322e302f32342d3234203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ca:ba:e8:7e:d9:3c:e9:a0:af:65:d0:15:f2:09:3f:79:eb:
         4c:68:d0:53:f0:c0:32:5a:c2:26:16:99:4f:d1:c2:da:21:66:
         9c:0c:31:ec:69:5a:82:be:29:e2:c0:e3:e2:68:4e:93:4a:d2:
         d0:a2:d1:f3:98:00:95:aa:10:55:e4:44:78:b1:99:ef:51:13:
         e6:c6:ca:27:52:52:b4:bb:0b:64:a6:11:7a:c6:2f:b9:f0:0a:
         a9:ea:40:df:e6:f8:08:7f:7a:af:85:62:01:01:48:ba:64:22:
         70:16:4a:a3:bf:13:e2:b3:a9:59:dc:f6:a8:a1:c8:ae:27:4c:
         83:67:d7:ff:ef:f7:1d:f1:80:ef:82:6d:27:8f:6c:db:b8:48:
         50:d8:38:ea:8d:67:8e:67:4b:47:7e:61:b4:00:5f:f9:e0:ec:
         d0:ec:38:4d:1f:39:5e:c6:2f:e8:b2:e1:cb:0d:c9:aa:3b:6a:
         1e:d5:2c:c5:8b:29:08:96:2d:8e:94:74:cc:4e:4b:9a:eb:f7:
         00:64:0f:e9:5b:c2:b2:83:b7:c3:51:46:cd:a1:78:03:a2:cd:
         02:9f:b4:1e:9f:3b:f1:39:00:8c:23:fe:19:79:7d:0b:ca:1c:
         ec:80:a1:58:20:00:5a:27:ad:2a:90:aa:19:41:d9:b9:07:e2:
         22:3d:07:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:59 2025 by rpki-client on console.sobornost.net