Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa
File:                     34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa (raw, json)
Hash identifier:          57M5zT7bwnTdVuiEiGUC5SaiuybEBy3X/bHYDAY83DM=
Subject key identifier:   61:25:0F:B5:14:55:16:46:F0:04:2F:8C:91:8C:4E:99:E4:5B:7C:97
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       6613597B1478E2264CA2372F62E6551EC847B50C
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa
Signing time:             Thu 06 Mar 2025 13:53:29 +0000
ROA not before:           Thu 06 Mar 2025 13:48:29 +0000
ROA not after:            Thu 05 Mar 2026 13:53:29 +0000
asID:                     267177
IP address blocks:        45.230.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 22:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:13:59:7b:14:78:e2:26:4c:a2:37:2f:62:e6:55:1e:c8:47:b5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: Mar  6 13:48:29 2025 GMT
            Not After : Mar  5 13:53:29 2026 GMT
        Subject: CN=61250FB514551646F0042F8C918C4E99E45B7C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:1a:43:d8:bb:d3:94:11:d2:5f:3d:f2:db:
                    9a:b8:c5:0f:2b:64:7c:a3:c1:f5:66:88:cd:bb:30:
                    f5:3d:44:e2:c9:31:a4:48:ec:1e:91:47:f5:1e:7c:
                    2c:48:36:31:36:d9:42:2d:f7:3e:7c:d1:f8:62:1f:
                    14:76:ed:9b:d6:d1:49:b7:f8:f8:5d:c5:e0:af:18:
                    1a:41:88:f8:be:1e:4a:56:78:7d:c0:9a:eb:86:59:
                    d7:b8:02:f0:58:f9:1b:61:03:a0:2c:67:2a:31:f9:
                    79:4a:9d:3d:fd:e8:7d:bb:ea:c0:f9:78:29:f3:d9:
                    2b:f0:20:77:c8:de:78:05:84:ac:4d:d7:11:6c:7c:
                    86:61:3d:73:f6:d5:04:b4:a8:e3:6e:bd:96:7f:a6:
                    fa:b4:74:ee:8c:0d:6a:10:61:e0:46:e7:b5:d5:13:
                    40:c7:48:48:34:08:bf:3d:80:76:41:c8:d5:60:10:
                    4a:8a:95:fd:fb:b8:1f:4d:13:e8:c9:ae:a4:d9:99:
                    db:7b:72:41:82:11:ff:61:b2:c8:94:96:79:c3:3c:
                    31:b1:f2:cd:46:37:03:6d:91:8b:74:44:7f:17:04:
                    1b:09:ff:ef:e3:23:65:e3:46:9a:b8:7a:59:57:08:
                    a9:eb:6d:ae:c8:9a:79:43:87:05:b9:43:9e:e8:03:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:25:0F:B5:14:55:16:46:F0:04:2F:8C:91:8C:4E:99:E4:5B:7C:97
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233322e302f32332d3233203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:c4:81:d5:95:23:b8:c9:51:8c:f8:e7:ee:f2:4b:87:1e:20:
         80:d2:b1:2f:3f:ac:da:82:00:f7:c1:03:dc:53:f9:ec:f4:33:
         42:3f:f7:59:33:a3:4a:ad:0e:72:60:9d:07:18:ce:39:a3:79:
         32:55:24:02:e8:29:b3:ea:fb:dd:ab:a3:bc:c3:3f:3f:f0:44:
         4e:c2:51:24:98:96:0c:1f:8e:19:76:5d:b1:52:79:90:4a:4c:
         d9:44:c6:95:e3:04:d7:cb:8f:62:5e:1e:84:de:da:18:05:2a:
         e1:21:2a:9a:c2:2c:11:a1:40:a3:4b:4a:37:ed:98:55:bb:99:
         e1:5e:cf:45:d5:40:e1:a8:da:ee:c3:7a:b7:71:3a:70:cc:9c:
         64:e2:bb:69:14:e5:f7:3c:ea:c2:b3:f4:7f:c0:dc:42:cb:d2:
         e5:9e:e6:a3:cc:5f:c4:23:8f:9d:bf:16:d9:68:c0:da:49:fa:
         f2:b1:0d:b6:c6:7d:1c:9e:0a:80:7d:d8:8c:0f:9c:07:f0:6c:
         2c:fc:39:51:e6:c4:55:01:d5:47:81:87:7b:1d:d2:97:87:e3:
         f0:c9:31:74:1d:5a:75:7e:b9:41:12:dd:3e:73:12:36:64:8c:
         af:46:00:fa:fa:87:9a:b9:ab:12:d7:a4:18:08:2f:b1:a0:e4:
         c8:47:b3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:29 2025 by rpki-client on console.sobornost.net