Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa
File:                     34352e3136372e35342e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier:          391aQk5mVh76p/hmZiK544XUL5SEB+oqhYwDIFhPTVA=
Subject key identifier:   B1:96:EA:D4:79:65:7A:CC:CC:87:F7:80:66:F5:11:C3:F7:67:18:C6
Certificate issuer:       /CN=B34B813BD07DD631ACD8AE3270BDB4117422DF51
Certificate serial:       1838D8F4450041F245893F88ABDA3741A468A00A
Authority key identifier: B3:4B:81:3B:D0:7D:D6:31:AC:D8:AE:32:70:BD:B4:11:74:22:DF:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B34B813BD07DD631ACD8AE3270BDB4117422DF51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa
Signing time:             Tue 15 Apr 2025 14:36:12 +0000
ROA not before:           Tue 15 Apr 2025 14:31:12 +0000
ROA not after:            Tue 14 Apr 2026 14:36:12 +0000
asID:                     267991
IP address blocks:        45.167.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/B34B813BD07DD631ACD8AE3270BDB4117422DF51.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/B34B813BD07DD631ACD8AE3270BDB4117422DF51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B34B813BD07DD631ACD8AE3270BDB4117422DF51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:38:d8:f4:45:00:41:f2:45:89:3f:88:ab:da:37:41:a4:68:a0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34B813BD07DD631ACD8AE3270BDB4117422DF51
        Validity
            Not Before: Apr 15 14:31:12 2025 GMT
            Not After : Apr 14 14:36:12 2026 GMT
        Subject: CN=B196EAD479657ACCCC87F78066F511C3F76718C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e5:2b:5e:f4:07:7c:df:94:e6:8b:dd:f8:06:
                    fb:ce:5c:17:cc:d8:b3:5e:9b:b1:2c:6a:35:4b:ce:
                    b8:58:e8:d1:6c:86:8f:35:42:30:43:34:86:8a:71:
                    24:77:a6:6d:4b:2d:a5:3a:9f:20:be:47:76:79:98:
                    3e:62:b5:ea:74:db:48:d9:e7:6d:3e:18:3f:06:42:
                    0f:3b:b6:3e:0b:17:b3:9b:85:36:bd:62:9d:5c:10:
                    1d:f7:7a:17:a6:25:1f:25:64:f3:18:87:af:7f:88:
                    b9:63:85:5a:28:e4:2b:64:3e:66:4a:d8:cb:34:1b:
                    4c:31:8f:b0:74:49:2f:96:f0:d7:3f:bd:60:73:18:
                    1b:c7:1d:8b:98:6d:0f:e2:a2:5d:dc:7e:85:4f:d9:
                    df:14:d3:ca:3a:47:e7:25:99:b6:44:78:89:60:28:
                    e2:de:7e:47:1e:71:60:e6:30:69:57:08:31:8b:7c:
                    10:2c:33:20:77:b0:4f:13:73:ca:67:c5:08:16:36:
                    50:16:88:f0:d9:4a:c2:7d:87:8f:56:82:10:eb:1e:
                    58:45:39:83:a2:c3:8a:8d:f1:ca:37:74:fb:e6:f7:
                    fb:32:bc:dd:36:74:26:0e:a8:c1:3c:02:ce:de:ac:
                    90:b2:d2:0f:ef:52:44:32:d6:66:35:83:03:45:dc:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:96:EA:D4:79:65:7A:CC:CC:87:F7:80:66:F5:11:C3:F7:67:18:C6
            X509v3 Authority Key Identifier:
                keyid:B3:4B:81:3B:D0:7D:D6:31:AC:D8:AE:32:70:BD:B4:11:74:22:DF:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/B34B813BD07DD631ACD8AE3270BDB4117422DF51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B34B813BD07DD631ACD8AE3270BDB4117422DF51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:88:72:6e:bb:82:f4:37:39:25:62:a1:a6:eb:67:c8:4a:1e:
         d6:18:a0:55:2a:0c:96:14:29:6a:c6:73:a6:e3:c4:ad:de:68:
         f1:86:af:12:47:cd:11:f7:61:77:e6:b1:86:cd:35:1e:0d:66:
         8e:7c:05:ba:8a:4c:2e:ba:a7:ae:f9:2e:48:a9:9c:98:55:f3:
         e7:ff:d2:4b:68:2a:5d:cc:65:79:e2:47:63:84:f3:d6:f2:43:
         92:92:87:a0:55:f1:a8:78:f7:5f:d9:a1:aa:76:25:2f:d1:83:
         c7:7b:95:29:1a:db:d4:9a:af:e7:50:0f:dd:0d:b8:a3:80:0b:
         76:10:f1:ac:75:99:23:07:9d:f4:83:b7:a7:ba:34:e3:ea:5d:
         30:72:5d:08:a2:22:98:41:62:1f:67:c1:dc:ed:2c:25:23:e8:
         2c:4c:27:a8:a1:b4:fd:36:81:c0:78:17:3b:0d:e6:93:3d:e0:
         5b:e3:c5:ee:7f:b5:a6:7e:4a:a4:3b:45:80:6d:27:71:27:92:
         62:31:ac:e5:2e:bc:c6:bb:35:1a:cc:80:60:d3:ac:e5:e9:f9:
         c8:b9:b0:42:3b:9c:b7:2e:ae:d4:7b:fc:89:de:cb:6d:73:6a:
         97:17:97:79:1f:08:f0:f8:ac:4c:b2:ca:cf:74:67:e0:eb:5f:
         2a:b9:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:31 2025 by rpki-client on console.sobornost.net