Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231322e302f32322d3232203d3e20323639313131.roa
File:                     34352e3137382e3231322e302f32322d3232203d3e20323639313131.roa (raw, json)
Hash identifier:          JPk2lAYL2+h/q+s7p1gJDTY4mAC1qZMncVy3Fx5lND0=
Subject key identifier:   4C:D3:59:EE:52:C0:5E:C4:2C:68:5A:3E:FF:BD:D9:39:57:12:2E:3E
Certificate issuer:       /CN=6B5D42D93E58C00245A6501E9C01C833BB782217
Certificate serial:       14D3D2D613F1C8C6227CB9D259C7E90E18298998
Authority key identifier: 6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231322e302f32322d3232203d3e20323639313131.roa
Signing time:             Wed 05 Mar 2025 23:49:31 +0000
ROA not before:           Wed 05 Mar 2025 23:44:31 +0000
ROA not after:            Wed 04 Mar 2026 23:49:31 +0000
asID:                     269111
IP address blocks:        45.178.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl
                          rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 22:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d3:d2:d6:13:f1:c8:c6:22:7c:b9:d2:59:c7:e9:0e:18:29:89:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5D42D93E58C00245A6501E9C01C833BB782217
        Validity
            Not Before: Mar  5 23:44:31 2025 GMT
            Not After : Mar  4 23:49:31 2026 GMT
        Subject: CN=4CD359EE52C05EC42C685A3EFFBDD93957122E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:c7:5a:08:0b:62:54:e1:7c:22:3b:f2:9f:
                    df:6d:ca:d9:a5:ef:65:ce:86:9d:9a:03:2b:2d:8a:
                    9a:1d:6e:23:77:be:ed:82:b2:3d:ec:e7:b1:07:43:
                    3f:6c:9d:14:8c:d3:8e:0d:68:89:06:8b:19:e2:2c:
                    c7:2d:c5:a9:7f:93:5f:dc:ed:ba:43:af:a7:ba:9f:
                    9a:b6:e3:9b:0b:a4:f2:32:10:94:4c:d0:c1:3d:9f:
                    c4:9b:74:1d:ab:16:8a:ef:12:ce:47:cc:07:b3:28:
                    ea:06:f9:71:4a:65:ad:08:0f:e2:af:8b:da:ad:22:
                    1e:52:31:a8:7a:44:80:8e:8f:4b:0b:a6:c4:dc:3d:
                    c6:27:eb:6f:1e:6f:67:12:9a:d0:32:e1:63:fa:1c:
                    4b:85:47:1e:27:4d:04:93:83:24:ea:71:7a:00:17:
                    05:d1:e2:e5:42:e6:26:aa:e0:4f:50:ea:1e:9e:1a:
                    cb:9b:c7:4f:75:b2:0e:f6:f9:3d:e0:23:0b:11:38:
                    3f:0b:42:40:a2:32:b2:c3:d6:07:3e:22:bb:47:2b:
                    f4:f5:52:4e:74:7e:7a:33:1e:fd:7e:57:66:4d:04:
                    a0:06:4a:68:8a:44:c9:18:3c:36:48:55:60:20:b2:
                    cd:5e:14:01:91:16:ca:69:62:10:6d:f6:c6:69:2b:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D3:59:EE:52:C0:5E:C4:2C:68:5A:3E:FF:BD:D9:39:57:12:2E:3E
            X509v3 Authority Key Identifier:
                keyid:6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231322e302f32322d3232203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:92:28:d6:43:b9:26:7a:ed:a8:51:e7:11:1a:86:ec:8a:6c:
         de:84:6a:60:5a:37:36:ca:ed:a1:64:25:e2:0b:8d:2c:8d:38:
         87:0c:2b:48:61:49:8e:f5:51:81:d3:e8:11:97:2d:7e:dd:30:
         be:85:35:0a:af:23:92:d0:d9:54:53:06:aa:b0:af:c6:33:d9:
         a2:a0:8f:63:de:83:c5:66:df:69:57:17:14:5d:e8:8a:6b:84:
         dd:c1:e0:f2:86:3a:85:0d:89:76:9e:c6:9a:31:b6:2c:3a:df:
         85:24:40:3a:f3:45:9c:cc:70:0c:b9:90:2f:ba:a0:dd:ef:68:
         7d:ca:c4:d5:36:14:69:62:5b:3e:12:96:f6:d3:ca:71:ee:26:
         a7:4b:49:83:39:d8:d8:94:15:da:6a:45:5f:29:e1:7d:5e:ba:
         b5:ee:ee:58:19:d6:63:fd:3a:81:0b:65:5e:cd:22:93:27:2a:
         89:01:1a:95:ca:ee:a3:f8:f8:cc:d0:98:95:b0:cf:73:38:02:
         ea:e8:be:0b:f4:3f:72:12:7a:6a:f6:be:8a:69:9e:2a:0c:a5:
         0b:8b:53:05:7b:ee:1c:50:62:c2:8a:42:38:96:3b:59:09:fe:
         f2:62:e6:81:2c:e5:b9:f5:7b:50:25:b7:57:2f:f1:60:b3:52:
         22:26:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:45 2025 by rpki-client on console.sobornost.net