Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32332d3233203d3e20323637393932.roa
File:                     34352e3136372e36382e302f32332d3233203d3e20323637393932.roa (raw, json)
Hash identifier:          +/Bi4Iv+dPTJCKhZMBgzhzZdWaLAP6z2eKpGaqlxYps=
Subject key identifier:   C9:EB:D1:02:AE:18:A8:1F:21:31:CC:B7:3A:86:ED:8A:00:96:03:84
Certificate issuer:       /CN=F241E143F0F3AEFE61D034C829AC452A653FD855
Certificate serial:       39C9D1528FA2D23111350CD61F6C98DE2636BB97
Authority key identifier: F2:41:E1:43:F0:F3:AE:FE:61:D0:34:C8:29:AC:45:2A:65:3F:D8:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32332d3233203d3e20323637393932.roa
Signing time:             Tue 15 Apr 2025 16:55:56 +0000
ROA not before:           Tue 15 Apr 2025 16:50:56 +0000
ROA not after:            Tue 14 Apr 2026 16:55:56 +0000
asID:                     267992
IP address blocks:        45.167.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.crl
                          rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c9:d1:52:8f:a2:d2:31:11:35:0c:d6:1f:6c:98:de:26:36:bb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F241E143F0F3AEFE61D034C829AC452A653FD855
        Validity
            Not Before: Apr 15 16:50:56 2025 GMT
            Not After : Apr 14 16:55:56 2026 GMT
        Subject: CN=C9EBD102AE18A81F2131CCB73A86ED8A00960384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:2b:b7:67:04:12:aa:96:13:5c:2e:4e:ac:
                    3f:9c:39:84:3c:77:46:43:bf:cf:6a:11:5a:87:02:
                    ad:1c:61:21:c5:df:4d:ab:68:c9:a4:e7:64:c6:d4:
                    4a:28:0d:cd:5a:09:fc:41:09:84:59:ed:cc:23:89:
                    36:b3:d0:af:41:a3:34:1a:29:6f:ef:a0:b6:ff:e1:
                    a4:1c:ea:89:6b:7f:ed:63:a2:18:11:51:63:11:b4:
                    bf:88:e1:35:90:9c:e7:3f:0c:c5:a2:ea:e2:ad:56:
                    0e:07:68:8a:8c:0e:21:ad:01:17:6c:12:1e:11:8b:
                    4f:23:80:d1:1e:6d:9a:08:1f:f6:1f:7e:0e:36:5e:
                    12:6c:12:a2:b9:9a:bd:da:f7:e5:b1:71:4b:18:07:
                    dc:30:e5:ac:ec:e5:9d:8f:41:6c:a7:db:81:b8:44:
                    29:a5:ad:32:20:e5:6f:de:95:59:c8:e9:31:ae:a7:
                    f8:ea:5d:78:17:ba:dc:97:50:74:db:10:35:c5:76:
                    38:2c:d6:58:dc:e4:70:f8:80:91:92:e7:ee:8d:2b:
                    a8:8c:ff:9e:a7:d9:ba:7f:de:02:bf:10:50:62:c7:
                    28:9e:cd:c8:14:bd:a0:9d:db:a8:7b:80:7d:ff:af:
                    18:7f:59:6e:fb:a7:3d:55:a0:2f:20:75:9f:9b:b6:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EB:D1:02:AE:18:A8:1F:21:31:CC:B7:3A:86:ED:8A:00:96:03:84
            X509v3 Authority Key Identifier:
                keyid:F2:41:E1:43:F0:F3:AE:FE:61:D0:34:C8:29:AC:45:2A:65:3F:D8:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32332d3233203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:3f:ce:a0:4c:c3:20:a8:89:38:ae:1e:f7:2a:22:62:73:66:
         e4:06:d4:2d:83:3c:e9:53:a7:33:f9:d5:2a:79:de:0c:af:b2:
         92:de:20:3d:10:b1:a6:4c:8e:05:7f:74:84:77:d1:d1:be:ee:
         80:6f:84:1d:fd:45:27:d7:d9:23:1c:64:eb:bd:12:7a:20:0e:
         c6:ff:c0:13:05:98:67:5d:c2:91:41:f6:93:87:d2:39:c6:b3:
         4c:c5:61:bf:8b:58:5e:32:d2:84:59:17:3f:0d:a5:9a:96:09:
         67:21:f2:da:c3:7c:64:f9:7c:20:df:0f:b8:da:ff:ea:40:38:
         c4:58:d1:1c:9c:f2:3f:d5:fb:11:3e:5b:c6:a1:5e:fd:a1:84:
         b7:15:df:44:8e:d9:46:b9:17:3a:24:b9:ef:7b:74:f1:c0:e2:
         08:2f:c3:c4:c5:2b:33:2c:d1:43:29:53:ba:c6:1a:cd:6e:3e:
         a0:74:3e:6a:96:10:ba:25:b0:34:cc:84:80:05:c2:9a:e4:66:
         36:dc:49:6a:69:d4:e0:82:65:54:24:2b:10:a2:81:c0:1d:29:
         94:cd:f3:06:b8:b3:78:04:bd:8d:b1:21:3c:d3:e6:a9:00:c3:
         70:94:d1:11:2d:30:88:f5:9e:85:c4:26:1c:bb:dc:05:2f:5f:
         91:bc:03:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:41 2025 by rpki-client on console.sobornost.net