Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133342e302f32342d3234203d3e20323639303739.roa
File:                     34352e3137392e3133342e302f32342d3234203d3e20323639303739.roa (raw, json)
Hash identifier:          rwjNl64x327P3k0KMdlwAOf6e4eVGgNDyz5xVF0FrJQ=
Subject key identifier:   A8:ED:74:7C:D8:53:69:1D:5D:F6:35:4A:57:B1:3F:B8:C6:32:41:C1
Certificate issuer:       /CN=433BC56DE61BF5759F79705E437131F09597AF13
Certificate serial:       2BB06FC7E267E41DDAB96E83F55DB2E8953A5881
Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133342e302f32342d3234203d3e20323639303739.roa
Signing time:             Mon 31 Mar 2025 17:43:18 +0000
ROA not before:           Mon 31 Mar 2025 17:38:18 +0000
ROA not after:            Mon 30 Mar 2026 17:43:18 +0000
asID:                     269079
IP address blocks:        45.179.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
                          rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 19:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b0:6f:c7:e2:67:e4:1d:da:b9:6e:83:f5:5d:b2:e8:95:3a:58:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13
        Validity
            Not Before: Mar 31 17:38:18 2025 GMT
            Not After : Mar 30 17:43:18 2026 GMT
        Subject: CN=A8ED747CD853691D5DF6354A57B13FB8C63241C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:54:7b:11:56:9e:f0:8d:7c:60:81:53:39:12:
                    55:58:72:61:68:5e:34:df:bf:75:5e:ef:f3:70:83:
                    b3:b5:51:28:55:51:7f:c8:d3:d3:f4:25:29:98:82:
                    ce:27:5c:e7:92:42:56:34:24:e5:2a:b9:f8:d3:7b:
                    ce:21:04:88:1a:02:b1:e1:37:f6:aa:7f:42:64:bf:
                    48:82:34:3d:40:f5:8d:aa:d0:76:ca:18:b4:d7:18:
                    ae:3f:b3:96:9d:11:fb:b1:86:1e:4a:1a:ea:32:9e:
                    13:16:33:7d:6d:4b:ad:22:bc:e8:f5:3c:c8:6f:75:
                    63:d5:3c:90:a4:15:58:e1:f4:95:c3:18:d6:30:31:
                    0d:34:51:a8:e9:e9:c6:73:1d:00:d5:2b:d6:5a:ed:
                    4a:11:30:3e:ab:bb:0a:11:2c:fa:37:e0:6e:9a:66:
                    5f:68:b6:46:58:fb:24:e5:3c:0f:15:01:bc:3f:01:
                    af:49:dd:9b:20:07:e2:1b:64:89:29:85:71:a1:24:
                    79:8b:f7:a5:50:c9:65:8b:c9:23:4b:6b:48:5e:0e:
                    dd:7d:58:31:dd:58:43:43:ad:e8:25:bc:6b:0f:fe:
                    1d:9b:f4:0a:f2:a8:c8:ac:0c:89:c7:8e:68:bd:ab:
                    e6:d0:f3:78:a1:78:96:d7:1d:c2:70:ba:0e:ee:40:
                    3f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:ED:74:7C:D8:53:69:1D:5D:F6:35:4A:57:B1:3F:B8:C6:32:41:C1
            X509v3 Authority Key Identifier:
                keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133342e302f32342d3234203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:5f:e9:16:e2:62:93:f5:ba:b6:e6:d4:1a:87:8e:bd:1a:80:
         95:55:f7:3f:4e:03:29:70:38:ea:3d:e0:39:db:6c:51:11:4d:
         dd:fd:0f:46:14:99:10:ed:d5:49:9e:e7:8e:c0:aa:f6:b9:31:
         67:53:45:35:23:2e:4e:4f:6c:02:b7:49:a1:b8:b2:ab:1a:5f:
         51:97:6b:1b:86:85:3d:0c:2f:6b:51:5c:2c:cb:ac:b2:25:34:
         e9:df:db:23:34:2c:b6:2e:ca:a3:b9:e6:60:0d:cf:cf:f6:a8:
         42:5c:c3:ae:e6:fa:d1:df:73:60:75:e6:7a:c4:28:5e:c6:a0:
         b6:8f:50:7c:bb:1b:24:06:b3:8a:08:3a:40:07:93:dc:0e:c6:
         1f:4b:88:c1:c6:02:b2:8d:a8:61:e5:82:c9:ed:f2:a5:1e:13:
         02:c0:83:1d:5e:53:91:db:82:37:27:37:69:6f:c9:03:87:e9:
         d9:54:d6:eb:56:50:c0:16:3a:ed:62:d9:49:82:3c:c4:a0:5d:
         ac:c8:85:7a:14:45:42:d6:b5:71:68:8f:13:d5:c7:60:77:86:
         38:71:35:ec:2a:9f:17:d4:fd:10:9c:e1:c9:27:32:af:a5:98:
         8b:ec:1a:b8:09:fa:48:8e:95:6f:9a:5d:3a:9c:69:db:2f:ab:
         fd:b8:6b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:23 2025 by rpki-client on console.sobornost.net