Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3232372e38342e302f32342d3234203d3e20323733333039.roa
File:                     34352e3232372e38342e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          8ehBoAA7j7RL1XUfpnXV0w92VRNZ5lKP+31wW32mKLM=
Subject key identifier:   33:90:56:41:78:FB:28:C4:2F:30:77:24:E1:5A:2B:43:D3:68:D6:25
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       0552337C319CDCA593FCBA376960A8C84EC137D4
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3232372e38342e302f32342d3234203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:39 +0000
ROA not before:           Wed 09 Apr 2025 13:48:39 +0000
ROA not after:            Wed 08 Apr 2026 13:53:39 +0000
asID:                     273309
IP address blocks:        45.227.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:52:33:7c:31:9c:dc:a5:93:fc:ba:37:69:60:a8:c8:4e:c1:37:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:39 2025 GMT
            Not After : Apr  8 13:53:39 2026 GMT
        Subject: CN=3390564178FB28C42F307724E15A2B43D368D625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a3:a8:34:02:73:9f:62:d5:61:a9:bf:bf:48:
                    97:dc:a4:3b:d6:9a:47:8e:6b:c6:f3:12:28:ab:af:
                    e6:f7:9f:54:2b:a0:60:49:55:6e:54:ea:09:db:46:
                    73:17:25:7a:83:6c:8a:7b:88:50:25:5c:da:50:c9:
                    a5:6d:62:09:3e:29:20:2f:2c:ec:1a:6b:ef:29:ae:
                    02:74:f0:ee:67:0e:af:78:54:dc:de:51:1b:ee:4b:
                    f4:b6:28:5d:d1:6b:9b:67:58:ec:3f:c4:8f:8d:d1:
                    f2:c3:dd:67:34:22:ef:3c:5b:55:df:94:64:aa:40:
                    b2:24:cf:93:bb:73:06:7a:1f:dd:fb:9a:c8:14:07:
                    45:3e:cb:44:1e:ca:3d:1d:67:af:2a:68:38:aa:2b:
                    49:f2:ab:5a:39:91:a9:8f:50:6c:90:07:a1:c0:2a:
                    47:c4:f6:94:e6:4a:5d:5e:2e:7c:7f:49:cf:a3:02:
                    e2:a8:25:22:e8:d4:39:6f:4b:a5:78:f7:90:7e:12:
                    d2:c6:27:ab:e0:08:30:52:e4:47:84:f5:b0:ed:9c:
                    db:07:9e:e5:ec:11:7b:c4:f3:4e:da:25:90:38:1e:
                    04:44:9c:39:f4:5f:83:97:1e:75:a1:0f:44:8d:af:
                    28:68:3a:6e:c7:bb:a0:73:1f:d8:14:ef:34:b7:56:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:90:56:41:78:FB:28:C4:2F:30:77:24:E1:5A:2B:43:D3:68:D6:25
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3232372e38342e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:f1:52:07:45:69:6c:41:09:2f:3f:4a:2f:fd:81:3b:55:45:
         c0:f8:d0:7b:45:dd:31:21:68:18:42:01:d1:20:fc:49:70:d5:
         27:a6:21:57:50:55:a1:cf:e8:00:b0:b8:2d:ba:61:bb:11:70:
         3a:5b:67:16:3e:b5:86:9f:71:02:47:0b:45:b8:3d:08:89:73:
         66:2a:9c:dd:e4:31:7a:a2:1f:33:98:91:6e:07:d6:15:92:06:
         cb:06:24:5e:1e:4c:34:b8:0e:0f:d5:ca:ed:06:1a:45:d4:c6:
         70:63:0e:9e:32:58:ea:37:94:e6:66:56:43:fe:a0:af:31:9a:
         51:71:02:a4:39:86:a9:d7:c0:cf:d9:0f:39:aa:3b:c5:1c:e9:
         ad:5c:38:3a:fc:f0:7c:22:e3:0f:26:34:49:92:10:6f:ec:3d:
         d2:82:75:32:53:33:7c:01:6c:2a:5b:9f:c0:9d:1e:37:6e:e4:
         a7:a2:f3:8d:22:e3:eb:a9:0d:7f:85:97:80:1d:13:eb:dc:dd:
         c6:97:fc:35:23:b1:6c:8e:26:96:97:81:ba:8d:1a:11:f7:01:
         b7:61:a4:42:5b:33:41:b4:af:87:76:9c:d7:ef:da:67:95:5a:
         7f:8f:5a:9b:12:56:db:f5:73:38:39:66:eb:17:cf:e1:63:6a:
         59:c1:5c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net