Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32342d3234203d3e20323637393932.roa
File:                     34352e3136372e36382e302f32342d3234203d3e20323637393932.roa (raw, json)
Hash identifier:          kL5Ik3LMS+qw7WkUsBdGKuZX5zSUcfnIU/sx3N9AD7g=
Subject key identifier:   6A:BB:D1:41:5D:78:13:68:9B:E2:23:DE:1B:AD:AC:1A:81:DD:7B:A4
Certificate issuer:       /CN=F241E143F0F3AEFE61D034C829AC452A653FD855
Certificate serial:       608F02D0422E56DC5E599DF72151B114A90CA2D9
Authority key identifier: F2:41:E1:43:F0:F3:AE:FE:61:D0:34:C8:29:AC:45:2A:65:3F:D8:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32342d3234203d3e20323637393932.roa
Signing time:             Tue 15 Apr 2025 16:25:56 +0000
ROA not before:           Tue 15 Apr 2025 16:20:56 +0000
ROA not after:            Tue 14 Apr 2026 16:25:56 +0000
asID:                     267992
IP address blocks:        45.167.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.crl
                          rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8f:02:d0:42:2e:56:dc:5e:59:9d:f7:21:51:b1:14:a9:0c:a2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F241E143F0F3AEFE61D034C829AC452A653FD855
        Validity
            Not Before: Apr 15 16:20:56 2025 GMT
            Not After : Apr 14 16:25:56 2026 GMT
        Subject: CN=6ABBD1415D7813689BE223DE1BADAC1A81DD7BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0b:c8:e6:f1:0d:15:9f:10:b3:eb:cc:a5:7f:
                    f0:d1:7d:11:6a:3d:09:1e:36:47:e2:93:d3:65:77:
                    fa:10:9c:6f:05:6d:f3:e8:13:b4:a5:ed:89:e5:d7:
                    9f:18:ad:12:7b:a9:60:85:cf:7a:5d:95:9c:59:81:
                    e9:26:cc:0b:73:2d:9a:c3:9d:90:f0:2a:29:4b:58:
                    af:d8:0b:9a:3f:d8:2d:ae:c1:0d:86:dd:81:d8:6b:
                    f2:19:42:b7:ef:bf:fd:5d:10:16:a2:61:a1:89:a8:
                    88:f2:fa:93:1e:a1:9a:49:b6:55:38:ce:31:8e:34:
                    b4:9d:20:10:7c:05:a5:75:e6:d5:d1:58:3c:05:66:
                    f5:8d:4e:d9:69:02:31:5b:26:cc:56:02:d0:3a:56:
                    32:74:99:d5:46:f0:5a:19:19:b5:f2:a2:9f:14:9f:
                    cd:6d:38:e1:44:3d:4d:9b:57:dc:16:8b:8d:9a:a6:
                    47:f7:33:6b:5b:22:de:bb:08:30:e6:25:e3:18:e4:
                    13:ff:2e:c3:6c:47:37:04:5f:c1:df:ab:9d:5e:e3:
                    ff:71:9e:d4:6f:56:5f:cd:4f:2f:b4:cf:48:ce:56:
                    80:68:32:42:2c:67:2c:7d:f8:2a:bf:ca:ca:65:35:
                    81:7c:f3:e6:0e:70:5f:ae:d8:ad:68:93:c7:99:e2:
                    89:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BB:D1:41:5D:78:13:68:9B:E2:23:DE:1B:AD:AC:1A:81:DD:7B:A4
            X509v3 Authority Key Identifier:
                keyid:F2:41:E1:43:F0:F3:AE:FE:61:D0:34:C8:29:AC:45:2A:65:3F:D8:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32342d3234203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:da:30:07:19:e8:ef:82:72:eb:e7:b3:96:b5:22:52:97:c5:
         62:36:e6:81:85:6b:74:53:f5:46:9c:c7:db:a0:89:54:f0:00:
         3a:63:34:78:c2:31:10:1c:63:0d:c7:f8:23:ee:62:08:e5:b4:
         cb:8c:83:96:a0:a6:ad:75:e6:08:0d:0b:5e:f8:3e:09:86:62:
         67:4d:a7:ee:de:94:6f:46:62:3e:c0:37:59:30:5d:07:3f:54:
         83:44:8f:38:70:53:0f:c1:57:c7:ff:7d:de:c5:ec:ff:73:09:
         10:98:ae:fa:31:bb:fc:c6:f7:e1:02:2e:ef:39:8e:29:dd:37:
         22:a9:7d:93:c3:30:11:c3:3f:6d:9f:ac:74:ed:d4:84:3b:7e:
         e2:65:16:0d:37:b8:08:22:9d:48:79:e4:b8:c3:ff:51:2e:d1:
         55:0f:41:72:12:4f:01:a8:79:98:7c:85:5c:f1:10:39:df:94:
         bc:8f:5b:b9:00:f5:53:75:b9:f8:aa:f1:54:b5:e4:44:d2:50:
         9a:19:72:d2:5d:35:4f:ad:dd:cc:da:0c:26:1a:0d:85:52:26:
         7d:37:12:ef:ac:62:e2:51:0e:40:7d:27:0a:13:58:fa:2f:79:
         5a:eb:eb:f7:c9:e9:43:a7:61:27:51:ef:c1:6a:f3:73:4b:6d:
         b8:00:7d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:41 2025 by rpki-client on console.sobornost.net