Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa
File:                     34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa (raw, json)
Hash identifier:          TKyHWjRbHegnsEl44kAudqsLZnNQyWetG5e6OcAfPNo=
Subject key identifier:   F2:24:E7:43:3A:26:1B:7F:9B:E0:BB:2B:16:C7:A0:65:59:54:3E:C6
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       0B9816E81534320A23AF68E2BD5CCF4B967810C7
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268070
IP address blocks:        45.167.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:98:16:e8:15:34:32:0a:23:af:68:e2:bd:5c:cf:4b:96:78:10:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:38:a4:5c:e8:2d:47:cc:de:df:b6:c7:c0:
                    e8:cc:66:5e:9f:b9:27:05:97:5e:de:31:93:4c:d4:
                    1b:bb:9b:2d:cc:32:1c:f1:e7:ca:72:3a:26:94:2f:
                    f1:c3:11:b1:f8:fa:2d:ef:f5:68:09:06:bc:41:31:
                    a9:ef:75:14:ba:4e:1c:e3:09:f3:f2:68:19:aa:f3:
                    c2:03:ac:a9:2c:79:81:f5:a3:2b:77:0e:9e:6c:54:
                    09:5a:c3:b5:1b:56:2d:2d:ff:ef:fe:62:5b:1c:18:
                    0c:7f:a9:57:7d:cf:d4:1a:3a:e6:2d:9e:ae:02:7a:
                    0d:f5:8e:af:ad:4e:0d:db:5f:5c:49:ce:02:07:24:
                    ff:7c:43:24:96:ae:ef:79:a6:38:0b:1a:d2:c7:ef:
                    ba:39:c9:f4:49:e5:00:c9:e4:93:4d:1f:73:c2:ea:
                    48:75:cc:61:e5:a9:fd:c3:db:23:fa:37:12:83:ec:
                    c2:be:44:b0:e0:b0:f0:8b:14:08:40:86:b2:77:05:
                    87:dd:8a:57:38:ab:ab:13:ad:d8:17:2a:ec:3d:69:
                    bb:bc:c4:6d:8b:ab:fc:54:23:e2:84:70:29:86:05:
                    0c:67:eb:57:b8:ec:84:0f:50:0c:a8:d5:70:7e:10:
                    30:81:d6:c4:f8:e9:25:39:3b:da:80:e9:af:2e:3c:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:24:E7:43:3A:26:1B:7F:9B:E0:BB:2B:16:C7:A0:65:59:54:3E:C6
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132322e302f32332d3233203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:14:0d:7f:26:96:fc:00:2a:56:e4:ad:49:bf:5b:f3:b4:cf:
         a5:42:64:2f:c3:5d:cc:f3:d5:61:5e:05:dc:63:0e:cb:0b:63:
         2f:57:0f:3f:1a:91:8c:b5:13:a8:ec:cc:7f:26:39:34:0a:b6:
         fc:e1:15:2e:01:e0:06:c6:28:5b:5a:8d:20:81:a6:06:e0:2c:
         97:1d:bf:b2:97:85:1b:d5:67:b9:21:ae:15:ab:b6:f0:64:09:
         82:0b:f6:62:ae:21:9d:80:fa:a7:1b:2d:6b:45:c4:36:f4:bc:
         ec:d4:45:e7:76:8d:f8:12:c6:bf:2e:e4:42:7c:02:04:7a:0f:
         c0:19:13:e3:aa:71:e3:f0:32:6b:b9:16:0c:d0:8b:56:c0:ba:
         d0:cc:86:77:2e:6c:2b:ad:21:ad:16:ab:10:5a:d8:dc:c1:19:
         8b:e8:dd:c2:f7:91:fc:ac:50:a3:f4:2d:85:b1:f8:12:b2:18:
         e7:48:6a:c6:7a:21:f2:f1:4c:89:66:9d:df:b2:13:a7:9e:bd:
         a9:86:0a:32:e1:cf:a3:ff:59:30:cf:6a:b3:b7:70:83:97:0e:
         42:a0:ad:3c:1a:64:bb:aa:f9:b5:42:09:bc:63:6e:0f:cf:da:
         f2:7c:f8:4d:5f:97:21:5c:63:43:86:c4:61:a6:88:31:02:39:
         4f:2a:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:38 2025 by rpki-client on console.sobornost.net