Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234322e302f32342d3234203d3e20323638313334.roa
File:                     34352e3136392e3234322e302f32342d3234203d3e20323638313334.roa (raw, json)
Hash identifier:          hAF/Ltt/MMtz+5ZrSs8bnPbbnYehMPNXoGKi4FTyLK0=
Subject key identifier:   EE:C2:63:F8:DC:65:6F:06:C4:F3:D2:94:03:48:CC:DE:7F:52:EA:94
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       2EA5F336CF2BC0B9965AF45BC952D8E51133E98C
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234322e302f32342d3234203d3e20323638313334.roa
Signing time:             Thu 06 Mar 2025 14:31:12 +0000
ROA not before:           Thu 06 Mar 2025 14:26:12 +0000
ROA not after:            Thu 05 Mar 2026 14:31:12 +0000
asID:                     268134
IP address blocks:        45.169.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 19:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a5:f3:36:cf:2b:c0:b9:96:5a:f4:5b:c9:52:d8:e5:11:33:e9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Mar  6 14:26:12 2025 GMT
            Not After : Mar  5 14:31:12 2026 GMT
        Subject: CN=EEC263F8DC656F06C4F3D2940348CCDE7F52EA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:21:a9:40:5b:13:72:83:63:a3:34:59:2c:
                    21:d5:72:ac:00:f6:95:39:21:8e:4c:4f:65:2b:fb:
                    cb:d0:7c:7f:9c:fe:e8:b0:7b:3d:b2:9f:25:89:2f:
                    b3:21:bb:30:93:2a:90:3c:9f:3b:7c:fd:05:0c:03:
                    60:29:3b:1d:30:25:74:9d:92:4e:0e:da:d3:ee:e2:
                    a9:a8:4f:28:78:da:4d:ce:bb:ef:9a:50:10:e2:6a:
                    3b:2b:11:88:dc:01:f0:4c:38:4a:d7:a9:a4:86:5a:
                    cf:1f:33:ae:48:b4:4b:83:93:42:9a:30:94:7e:7e:
                    b8:90:1e:21:af:b9:e6:1c:99:29:69:4f:3b:13:ab:
                    38:cc:b5:a0:9e:ed:a9:6e:47:8d:e9:4a:bd:59:2d:
                    7a:a4:f9:eb:13:73:e4:60:df:4f:7e:12:7b:60:b3:
                    03:fb:7d:04:b2:e9:64:a4:7f:5a:b1:b2:c1:e5:72:
                    d6:98:b0:1a:99:ab:a5:55:a8:29:10:4e:d5:32:b4:
                    72:f6:8c:73:80:07:b7:b1:2c:5f:93:dd:07:5d:62:
                    e4:e4:e9:fa:53:db:52:98:58:a6:9f:3d:09:d4:02:
                    97:2a:58:f1:60:96:c4:7d:56:69:e1:f3:9d:df:96:
                    f6:5a:28:3a:34:1f:2f:eb:c1:cb:23:ae:7a:74:b8:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C2:63:F8:DC:65:6F:06:C4:F3:D2:94:03:48:CC:DE:7F:52:EA:94
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234322e302f32342d3234203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:ac:4c:34:21:4e:58:9d:c3:13:ce:19:f9:82:d0:51:f1:4f:
         7b:7c:d7:02:ed:3b:72:8a:3b:e4:8a:e9:32:e6:18:b5:30:5b:
         77:2f:51:9a:73:2c:6e:69:14:20:d0:bc:f7:fc:07:a8:4f:17:
         a4:9b:2a:5f:d5:de:5e:37:fc:81:e6:35:17:65:ed:ef:54:3a:
         94:38:c8:b4:bf:11:3a:b0:f4:93:4a:50:36:23:8e:f7:f3:29:
         31:45:02:c1:97:b8:f6:e5:ab:67:95:0c:23:83:c2:f0:c1:64:
         27:91:67:26:00:ee:33:27:96:99:e8:d2:ff:94:b9:70:2a:a7:
         63:f6:83:6c:e2:9b:49:e1:fa:94:63:d7:5c:a1:cf:6c:fc:8a:
         54:91:3c:c5:bc:65:de:b7:d1:c4:95:0a:0e:ca:bc:1e:7c:18:
         5e:44:84:b0:81:fe:32:88:3b:a3:c6:37:67:7a:8e:2d:5b:21:
         61:bb:26:f5:36:5f:45:cb:70:06:cc:5d:fd:a5:1a:86:03:7c:
         a6:61:c3:d6:e3:d7:1e:71:a9:12:82:dc:d8:7a:3f:30:f0:e5:
         89:81:5c:81:f2:19:c5:94:55:72:45:3f:f2:c2:b9:99:f4:32:
         ad:4e:54:65:7d:eb:f9:a4:c4:90:13:c7:fc:1e:2d:d5:39:8a:
         d2:42:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:20 2025 by rpki-client on console.sobornost.net