Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e32382e302f32322d3234203d3e20323637313435.roa
File:                     34352e3233302e32382e302f32322d3234203d3e20323637313435.roa (raw, json)
Hash identifier:          e3gDh30bCFxyxSG6XiET0YR4C4e+fAFmToi+8txavoA=
Subject key identifier:   6D:84:77:81:89:D2:95:96:D0:8C:D0:72:40:5C:81:F9:AA:3C:7D:99
Certificate issuer:       /CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
Certificate serial:       6CC5FE8448B9A6A051A521084BA180A74456DEBB
Authority key identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e32382e302f32322d3234203d3e20323637313435.roa
Signing time:             Thu 06 Mar 2025 03:03:25 +0000
ROA not before:           Thu 06 Mar 2025 02:58:25 +0000
ROA not after:            Thu 05 Mar 2026 03:03:25 +0000
asID:                     267145
IP address blocks:        45.230.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c5:fe:84:48:b9:a6:a0:51:a5:21:08:4b:a1:80:a7:44:56:de:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
        Validity
            Not Before: Mar  6 02:58:25 2025 GMT
            Not After : Mar  5 03:03:25 2026 GMT
        Subject: CN=6D84778189D29596D08CD072405C81F9AA3C7D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:62:e1:71:73:82:b5:15:b0:8e:a7:f8:16:fa:
                    63:08:34:47:22:b3:67:7e:70:5b:e7:53:6d:ee:be:
                    a4:d6:5e:ec:52:2a:d3:dc:70:66:38:6d:70:a5:d4:
                    a0:5a:03:88:fc:c5:78:75:03:1b:30:d2:15:f8:0c:
                    58:27:ad:6c:d3:96:0d:45:26:87:12:9c:dc:30:2e:
                    1e:82:aa:eb:d4:f8:c7:4c:15:44:77:d7:8a:11:d4:
                    20:7e:bb:53:88:21:43:28:68:97:c5:b3:32:3b:b9:
                    ce:84:70:51:f4:5e:40:cc:e0:08:50:54:de:33:b2:
                    70:0e:a3:7f:0d:62:51:6e:14:f5:42:c0:81:7f:90:
                    23:e0:34:61:24:a3:c6:0b:29:e1:28:b5:01:6b:93:
                    28:87:e2:1f:84:9e:1a:d4:98:8e:ab:36:2f:61:d7:
                    85:a3:76:6c:b0:8f:1f:58:98:3f:21:cf:97:b3:5e:
                    fa:eb:c8:15:c9:10:0e:5e:5f:dd:fb:d0:63:14:2a:
                    a6:db:33:3e:f8:01:9f:92:a5:b6:9b:ab:16:47:90:
                    8c:17:8a:67:f7:12:6a:fd:be:10:0c:46:f5:85:77:
                    71:27:71:f1:74:f2:ae:64:4e:76:ee:eb:be:39:65:
                    4b:8f:a2:29:37:fe:c8:21:9a:c2:92:8a:07:83:9d:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:84:77:81:89:D2:95:96:D0:8C:D0:72:40:5C:81:F9:AA:3C:7D:99
            X509v3 Authority Key Identifier:
                keyid:3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e32382e302f32322d3234203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:a5:7d:57:d8:23:d3:cf:98:d4:f8:3a:31:a6:32:05:cb:ba:
         cc:65:79:db:ea:b5:ec:cd:6c:69:fd:88:66:5b:bd:2b:05:46:
         0d:71:49:37:1e:15:8b:d0:4c:d8:cb:63:2f:c6:da:0c:d5:57:
         7d:23:02:58:39:75:55:97:4e:d5:51:a7:ed:f7:77:31:bb:f7:
         9b:58:9f:3e:4f:fe:3b:ae:2f:cc:97:37:6e:3b:39:93:c5:45:
         39:72:1d:c8:a6:82:3f:93:e4:0b:33:d1:4f:9f:09:c9:df:cb:
         14:5f:72:87:fa:2f:e0:c4:2c:9c:7c:ce:d5:2f:f2:51:5e:23:
         27:16:6e:e7:98:57:07:d3:ce:90:9c:9a:a1:bd:68:9e:65:48:
         1a:00:a5:04:bc:ab:15:28:96:2b:8a:fa:46:b5:08:c9:85:4f:
         8a:28:a6:57:b5:40:11:3f:3b:09:d0:c0:98:12:d1:1b:6e:b6:
         b2:95:36:10:83:59:1b:3c:0d:d7:90:66:32:df:15:49:33:f7:
         2d:2f:24:8a:82:77:29:01:91:8a:18:e6:25:46:7f:95:eb:b7:
         5e:49:55:50:8c:62:c8:94:34:c9:91:d6:f2:f9:6f:63:b7:52:
         16:cd:fb:00:95:8e:15:b9:0f:cb:44:55:0e:90:ed:04:88:e0:
         b6:53:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:43 2025 by rpki-client on console.sobornost.net