Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32332d3233203d3e20323638303335.roa
File:                     34352e3136382e31322e302f32332d3233203d3e20323638303335.roa (raw, json)
Hash identifier:          QfJmAtfE0p1TBeRREzp6on/bAVltEdp5BjkEyii9to4=
Subject key identifier:   6C:7C:75:C6:45:69:D5:FA:60:02:81:F9:C9:AC:C2:67:81:2A:D1:C5
Certificate issuer:       /CN=746F62E0AEFCCD80381655BD82E017B375D2EC7E
Certificate serial:       087A71754DDEA05F34AFE9D018E4B46BF5E06C09
Authority key identifier: 74:6F:62:E0:AE:FC:CD:80:38:16:55:BD:82:E0:17:B3:75:D2:EC:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32332d3233203d3e20323638303335.roa
Signing time:             Fri 25 Apr 2025 18:35:03 +0000
ROA not before:           Fri 25 Apr 2025 18:30:03 +0000
ROA not after:            Fri 24 Apr 2026 18:35:03 +0000
asID:                     268035
IP address blocks:        45.168.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7a:71:75:4d:de:a0:5f:34:af:e9:d0:18:e4:b4:6b:f5:e0:6c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746F62E0AEFCCD80381655BD82E017B375D2EC7E
        Validity
            Not Before: Apr 25 18:30:03 2025 GMT
            Not After : Apr 24 18:35:03 2026 GMT
        Subject: CN=6C7C75C64569D5FA600281F9C9ACC267812AD1C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:7f:54:17:8e:23:b4:a8:fc:a8:93:40:af:
                    87:4b:4b:91:11:87:50:0c:8c:3e:2a:32:ca:84:1c:
                    44:fd:a4:c1:f8:fc:c7:eb:ad:0d:83:b0:b1:3a:89:
                    d4:d0:c2:59:e4:e2:ea:ef:60:bf:cb:dc:52:1b:52:
                    24:d7:a1:e9:b4:16:3f:1f:d6:01:02:f3:ae:f5:5a:
                    23:87:6e:b8:f8:5a:14:04:69:03:a9:a2:af:c9:ca:
                    c2:d3:47:4e:2d:64:63:c7:25:ea:a0:a8:60:56:4c:
                    91:78:b4:c6:20:a4:c4:91:1d:78:42:9d:70:a4:05:
                    72:0c:53:9b:5f:6f:d0:c1:a3:99:76:b3:f2:27:3e:
                    84:b9:4b:5d:11:5a:28:43:27:7f:ee:e3:4b:f3:c0:
                    e6:60:9b:22:9e:33:a7:10:fd:51:89:4e:a8:c8:c4:
                    3d:9c:7b:22:5b:0f:48:5b:67:37:25:89:92:36:e2:
                    48:d2:57:e0:a3:c0:c6:64:99:79:b1:ba:00:01:fd:
                    f5:8d:d2:3f:22:88:2f:7e:98:d2:72:85:51:99:d8:
                    33:cc:1d:a2:07:c6:a5:b7:be:74:76:66:02:97:11:
                    6f:f0:75:67:5d:2f:29:c0:66:6e:64:e1:21:b6:46:
                    c7:d2:3c:b7:d8:ab:93:dd:e9:8e:b5:51:68:09:bf:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7C:75:C6:45:69:D5:FA:60:02:81:F9:C9:AC:C2:67:81:2A:D1:C5
            X509v3 Authority Key Identifier:
                keyid:74:6F:62:E0:AE:FC:CD:80:38:16:55:BD:82:E0:17:B3:75:D2:EC:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32332d3233203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:98:6f:7c:af:a3:bb:bb:d3:80:90:30:85:07:30:42:c0:0f:
         5f:5f:53:0c:ff:78:31:e4:7b:28:8a:0a:25:ec:bd:d8:5c:df:
         22:6b:25:96:9c:06:2e:93:df:8c:1b:9e:80:8c:6f:58:65:51:
         92:cb:ec:76:44:63:5d:b5:85:55:51:25:91:21:de:59:9b:a2:
         bb:fc:47:13:13:3a:39:da:11:47:d5:c0:74:dd:e5:91:5d:a5:
         e2:ea:08:4c:c8:29:c1:8e:1a:14:28:0b:af:3a:6a:d1:23:19:
         d2:01:50:43:32:96:c5:1b:f2:c2:e8:28:fb:25:d1:15:aa:af:
         58:ad:5d:10:44:d0:71:62:62:e6:e4:0c:0d:13:47:14:fe:1c:
         ea:ed:1a:ef:27:d9:b1:26:6a:85:ac:9f:5e:c9:a2:2b:57:0d:
         f8:20:7a:57:ee:ee:2a:8b:00:b2:32:38:fd:3b:b3:56:bc:56:
         7f:1e:6f:75:96:e7:e8:04:c7:3b:b9:35:5f:d7:d6:45:eb:8f:
         e6:3b:cd:a7:3f:23:e4:e5:09:78:11:5c:8f:18:3e:9e:e6:08:
         30:59:e1:38:a2:3f:02:18:5e:92:b4:71:7d:a8:16:3c:38:2f:
         45:f9:f8:64:dc:a4:2c:e7:63:92:1d:d6:ac:f9:c4:63:39:a3:
         38:df:39:cf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCHpxdU3eoF80r+nQGOS0a/XgbAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ2RjYyRTBBRUZDQ0Q4MDM4MTY1NUJEODJFMDE3QjM3
NUQyRUM3RTAeFw0yNTA0MjUxODMwMDNaFw0yNjA0MjQxODM1MDNaMDMxMTAvBgNV
BAMTKDZDN0M3NUM2NDU2OUQ1RkE2MDAyODFGOUM5QUNDMjY3ODEyQUQxQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQ39UF44jtKj8qJNAr4dLS5ER
h1AMjD4qMsqEHET9pMH4/MfrrQ2DsLE6idTQwlnk4urvYL/L3FIbUiTXoem0Fj8f
1gEC8671WiOHbrj4WhQEaQOpoq/JysLTR04tZGPHJeqgqGBWTJF4tMYgpMSRHXhC
nXCkBXIMU5tfb9DBo5l2s/InPoS5S10RWihDJ3/u40vzwOZgmyKeM6cQ/VGJTqjI
xD2ceyJbD0hbZzcliZI24kjSV+CjwMZkmXmxugAB/fWN0j8iiC9+mNJyhVGZ2DPM
HaIHxqW3vnR2ZgKXEW/wdWddLynAZm5k4SG2RsfSPLfYq5Pd6Y61UWgJv+z3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbHx1xkVp1fpgAoH5yazCZ4Eq0cUwHwYDVR0j
BBgwFoAUdG9i4K78zYA4FlW9guAXs3XS7H4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2VpM21pZHViaDh4cVN6amV5TmQ0TEwxcFpoUnRKMVRCb0p4YzVSVmNp
RjgvMC83NDZGNjJFMEFFRkNDRDgwMzgxNjU1QkQ4MkUwMTdCMzc1RDJFQzdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0NkY2MkUwQUVGQ0NEODAz
ODE2NTVCRDgyRTAxN0IzNzVEMkVDN0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlaTNtaWR1Ymg4eHFTempleU5kNExMMXBaaFJ0SjFUQm9KeGM1UlZjaUY4LzAv
MzQzNTJlMzEzNjM4MmUzMTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzAzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLagMMA0GCSqGSIb3DQEBCwUAA4IBAQAimG98r6O7
u9OAkDCFBzBCwA9fX1MM/3gx5Hsoigol7L3YXN8iayWWnAYuk9+MG56AjG9YZVGS
y+x2RGNdtYVVUSWRId5Zm6K7/EcTEzo52hFH1cB03eWRXaXi6ghMyCnBjhoUKAuv
OmrRIxnSAVBDMpbFG/LC6Cj7JdEVqq9YrV0QRNBxYmLm5AwNE0cU/hzq7RrvJ9mx
JmqFrJ9eyaIrVw34IHpX7u4qiwCyMjj9O7NWvFZ/Hm91lufoBMc7uTVf19ZF64/m
O82nPyPk5Ql4EVyPGD6e5ggwWeE4oj8CGF6StHF9qBY8OC9F+fhk3KQs52OSHdas
+cRjOaM43znP
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:42 2025 by rpki-client on console.sobornost.net