Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36392e302f32342d3234203d3e20323637393932.roa
File:                     34352e3136372e36392e302f32342d3234203d3e20323637393932.roa (raw, json)
Hash identifier:          d67kmWk/wHnBOq2OBqEEQXnTRzaH7mlZXScGbmLTs/s=
Subject key identifier:   5C:5B:EC:13:03:0E:CF:E5:E0:A9:46:28:5F:92:30:6A:BC:AB:55:A4
Certificate issuer:       /CN=F241E143F0F3AEFE61D034C829AC452A653FD855
Certificate serial:       5BA59C23D2B2B9A0CA1CAC5D1D763F6DAFE6A709
Authority key identifier: F2:41:E1:43:F0:F3:AE:FE:61:D0:34:C8:29:AC:45:2A:65:3F:D8:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36392e302f32342d3234203d3e20323637393932.roa
Signing time:             Tue 15 Apr 2025 16:25:56 +0000
ROA not before:           Tue 15 Apr 2025 16:20:56 +0000
ROA not after:            Tue 14 Apr 2026 16:25:56 +0000
asID:                     267992
IP address blocks:        45.167.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.crl
                          rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a5:9c:23:d2:b2:b9:a0:ca:1c:ac:5d:1d:76:3f:6d:af:e6:a7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F241E143F0F3AEFE61D034C829AC452A653FD855
        Validity
            Not Before: Apr 15 16:20:56 2025 GMT
            Not After : Apr 14 16:25:56 2026 GMT
        Subject: CN=5C5BEC13030ECFE5E0A946285F92306ABCAB55A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:8d:4b:66:34:6c:98:2b:ae:2c:c5:50:78:
                    76:52:73:7c:c5:48:a5:a0:d6:08:c1:ce:32:18:97:
                    07:b0:10:1d:8e:cb:1d:68:93:59:ec:da:e7:74:69:
                    1b:44:57:14:aa:07:20:54:e1:15:6d:8f:a2:f5:46:
                    a9:8a:3b:36:bd:71:41:96:7e:54:b5:f0:4d:49:cb:
                    42:70:4d:d0:d0:40:5f:21:42:a3:1e:5c:c0:48:c3:
                    1c:25:7a:8b:d7:06:49:ad:91:3a:7c:8e:5b:6c:de:
                    b9:ae:6f:72:4d:84:e0:60:23:4e:23:d0:e2:04:19:
                    40:f4:42:95:38:0f:91:e6:0b:9d:bb:cc:45:cb:b6:
                    7c:d7:29:15:62:30:2f:a4:5c:14:a7:5e:df:29:79:
                    84:26:47:19:72:75:34:91:76:97:f7:61:19:7a:4c:
                    ba:35:55:d6:88:e7:6d:fa:cb:07:d6:bd:c0:c5:4f:
                    79:ac:1f:a6:61:d4:b8:60:ba:0d:ff:4e:1f:2a:dc:
                    39:91:60:cc:2b:22:3e:66:e6:1b:77:88:73:3f:ff:
                    93:8e:16:03:0e:e3:c6:d5:93:55:66:de:39:85:7c:
                    a8:f7:cb:41:97:8b:b6:b0:7c:18:2c:74:aa:09:67:
                    5a:ff:46:89:f5:9c:99:cf:54:68:4d:9a:cf:fa:ba:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5B:EC:13:03:0E:CF:E5:E0:A9:46:28:5F:92:30:6A:BC:AB:55:A4
            X509v3 Authority Key Identifier:
                keyid:F2:41:E1:43:F0:F3:AE:FE:61:D0:34:C8:29:AC:45:2A:65:3F:D8:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36392e302f32342d3234203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:2b:68:1a:ae:9d:c8:e3:61:43:09:64:1c:b0:d5:cc:ab:6b:
         a6:10:fc:18:15:43:54:9d:70:6d:dc:b8:56:a0:f2:c0:9e:f3:
         66:69:24:65:9d:fc:7a:64:e4:66:e8:fa:95:ea:7b:2b:ba:93:
         da:33:d2:24:c2:86:06:67:e6:18:42:15:96:ea:e6:e3:95:72:
         d8:9f:51:6b:59:1b:83:2b:db:05:c2:98:b0:38:08:a6:78:46:
         cf:8f:b8:b0:5a:73:f7:e7:14:9a:e4:64:87:ea:a9:5c:68:bc:
         b4:01:a6:0a:3b:d6:b9:8b:23:9d:48:9f:fa:ae:b5:4c:85:1a:
         fe:0e:30:36:14:d6:70:5d:64:29:56:4f:50:b0:74:1f:03:67:
         9c:46:26:cb:47:28:a4:27:2a:73:16:9f:2a:74:5a:2e:80:c9:
         2a:f8:aa:da:73:31:67:11:c8:dd:c1:1f:ab:ed:56:7c:42:85:
         be:89:33:62:1e:ab:18:88:42:9f:14:ad:0d:e2:34:e1:d5:1b:
         8e:4a:d4:71:b8:2b:8a:cc:da:f0:df:22:95:da:34:07:32:53:
         15:73:18:c8:fd:48:50:e3:ed:4c:41:0e:22:71:d8:c2:67:28:
         71:db:90:6b:3b:62:10:7c:4a:6b:b9:b9:88:3f:5a:4e:1e:72:
         9c:b3:a8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:41 2025 by rpki-client on console.sobornost.net