Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234312e302f32342d3234203d3e20323638313334.roa
File:                     34352e3136392e3234312e302f32342d3234203d3e20323638313334.roa (raw, json)
Hash identifier:          zSlCdf2nnMEaBWfySJynzi+q4DsCrdfDHvAPKoW6tas=
Subject key identifier:   49:45:74:67:25:AA:B0:88:9A:CD:1A:A0:60:B0:11:A4:E0:74:72:46
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       330FA11CDB593B50A0CE785B86731F493F4B7E58
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234312e302f32342d3234203d3e20323638313334.roa
Signing time:             Thu 06 Mar 2025 14:31:12 +0000
ROA not before:           Thu 06 Mar 2025 14:26:12 +0000
ROA not after:            Thu 05 Mar 2026 14:31:12 +0000
asID:                     268134
IP address blocks:        45.169.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 19:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0f:a1:1c:db:59:3b:50:a0:ce:78:5b:86:73:1f:49:3f:4b:7e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Mar  6 14:26:12 2025 GMT
            Not After : Mar  5 14:31:12 2026 GMT
        Subject: CN=4945746725AAB0889ACD1AA060B011A4E0747246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:11:2a:07:85:d0:b4:c4:82:c9:17:11:35:
                    ba:33:7a:f9:09:1f:4e:07:db:ba:92:54:be:db:38:
                    9e:52:63:df:56:6d:8f:8d:fc:e5:18:86:93:65:9b:
                    ad:dd:e1:1c:c8:6e:a2:93:6d:f3:68:63:f7:80:70:
                    dc:ad:0b:22:09:d5:bd:95:92:29:5f:e2:e9:6d:6c:
                    ba:9f:f1:28:1c:49:ae:9c:cd:82:85:f7:de:0c:66:
                    ff:2d:e8:14:bf:99:41:e6:06:b1:e9:34:89:00:f0:
                    4b:77:5e:27:d7:96:51:c6:6f:19:80:94:db:b4:2b:
                    2a:f3:5a:73:4a:1d:a8:4c:5f:af:81:2f:17:f1:2c:
                    2c:31:e4:1c:2c:b5:bc:35:2f:27:a0:38:dc:fa:e4:
                    d3:d9:dd:33:85:e8:f4:96:10:9c:34:f3:00:29:bf:
                    c2:62:6b:32:f3:51:e3:4f:6d:4c:73:24:b4:57:e0:
                    4e:2c:1d:ef:15:07:8a:a6:12:60:79:5b:0e:01:e3:
                    90:51:01:43:60:5a:f4:6e:9d:9a:15:5a:70:8d:ee:
                    a4:62:9e:5e:bc:4b:dc:47:09:f3:7a:2e:b4:8c:08:
                    55:08:ca:78:3c:93:06:cf:f7:a9:16:b2:82:49:df:
                    f3:d8:55:67:bf:eb:5c:44:81:7f:dd:51:c5:8c:56:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:45:74:67:25:AA:B0:88:9A:CD:1A:A0:60:B0:11:A4:E0:74:72:46
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234312e302f32342d3234203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:83:f2:4d:6d:ba:92:85:30:7b:0b:1e:ca:97:d8:71:27:4c:
         9a:56:79:15:22:26:99:0a:c7:f6:50:4e:b6:bb:f6:ee:9a:7c:
         03:c3:8a:c3:5b:ec:72:4b:11:75:97:cb:5c:b9:3f:19:01:3a:
         09:fb:a3:66:e3:5c:df:aa:ab:9c:16:d9:fa:b9:d8:fe:52:2a:
         3a:22:07:1e:65:90:a1:b6:b0:bc:9c:06:2f:41:95:b7:5f:bc:
         05:df:ad:a3:f7:f8:26:48:80:bd:c9:86:0f:90:38:9b:1f:5b:
         cf:3a:78:46:8b:2a:5a:3f:49:ae:89:3b:5d:c7:e6:32:e9:ff:
         ff:22:e9:f2:34:58:bb:8d:a2:b3:49:ac:12:99:38:74:1b:aa:
         b5:a3:3f:8e:da:81:ae:d5:c4:70:8b:ac:a8:9a:a1:97:66:b9:
         8f:ca:2d:cc:a8:29:a3:82:46:0b:0e:87:db:51:27:f7:a3:62:
         93:e3:03:0d:49:8d:c5:4c:ef:d9:43:01:3a:35:4f:83:ae:1c:
         81:34:7c:fa:6a:77:8e:2a:06:37:3a:4c:67:d5:6b:d1:d9:d4:
         d1:d4:0c:9f:c7:35:8b:c5:a0:bd:f8:6f:5e:6e:7a:41:97:30:
         ec:96:ca:fa:75:2b:92:7b:4f:8b:71:5b:fe:89:36:05:7b:76:
         1b:ce:1d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:20 2025 by rpki-client on console.sobornost.net