Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
File:                     34352e3136382e31342e302f32332d3233203d3e20323638303335.roa (raw, json)
Hash identifier:          nLuKIFNyAsVwm7LeM80A+MrqjHUKgZphO4YgyJWjYrc=
Subject key identifier:   28:78:72:98:BA:B0:5F:2E:AD:96:66:0B:C4:E9:77:66:40:77:89:B7
Certificate issuer:       /CN=746F62E0AEFCCD80381655BD82E017B375D2EC7E
Certificate serial:       50345546437050D9AAA1954955C625FECE9E22C4
Authority key identifier: 74:6F:62:E0:AE:FC:CD:80:38:16:55:BD:82:E0:17:B3:75:D2:EC:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
Signing time:             Fri 25 Apr 2025 18:35:03 +0000
ROA not before:           Fri 25 Apr 2025 18:30:03 +0000
ROA not after:            Fri 24 Apr 2026 18:35:03 +0000
asID:                     268035
IP address blocks:        45.168.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:34:55:46:43:70:50:d9:aa:a1:95:49:55:c6:25:fe:ce:9e:22:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746F62E0AEFCCD80381655BD82E017B375D2EC7E
        Validity
            Not Before: Apr 25 18:30:03 2025 GMT
            Not After : Apr 24 18:35:03 2026 GMT
        Subject: CN=28787298BAB05F2EAD96660BC4E97766407789B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:02:55:b7:e3:4f:57:f2:32:3b:a9:32:36:
                    14:4e:11:1d:19:0b:f1:bf:55:55:cf:a3:14:92:ca:
                    44:fa:25:52:ee:fd:c8:1c:46:f1:b7:f8:ad:6b:52:
                    c8:39:94:aa:f2:c9:c0:c8:f0:e8:d3:68:b2:b5:a7:
                    64:e5:98:a5:1b:0a:fd:72:77:11:38:ed:cb:81:1a:
                    30:6e:5a:23:8a:ae:6a:0a:87:c1:c7:fb:5b:20:f3:
                    5b:92:9c:30:1d:01:d4:89:26:e6:8a:aa:cf:49:58:
                    2e:6f:f6:47:fb:c8:20:08:8e:2b:7b:c2:4f:a7:47:
                    9b:31:bf:26:a1:25:5f:7a:db:96:6c:ff:5d:f2:49:
                    cf:98:00:b3:17:77:7c:41:55:10:a4:8f:2b:a8:96:
                    79:e7:91:50:0c:5b:18:76:58:43:b2:17:91:ef:00:
                    74:07:50:20:e8:44:fa:c0:45:b3:64:12:1f:b9:a9:
                    16:12:c8:a8:0c:11:fa:ec:c4:67:9d:21:30:69:f2:
                    70:c5:7d:03:be:e8:f2:6d:c9:7d:8e:da:ee:f8:41:
                    dd:a3:0a:96:73:a1:f2:a5:78:0c:3d:3d:7e:ae:90:
                    5d:6f:72:22:e3:24:c9:86:cc:12:bd:6a:a5:37:fc:
                    fe:29:fe:d4:6f:3b:9a:c0:51:24:7b:dc:6e:d0:8a:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:78:72:98:BA:B0:5F:2E:AD:96:66:0B:C4:E9:77:66:40:77:89:B7
            X509v3 Authority Key Identifier:
                keyid:74:6F:62:E0:AE:FC:CD:80:38:16:55:BD:82:E0:17:B3:75:D2:EC:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:91:55:85:bb:3e:45:17:5c:d7:74:56:69:94:76:bb:ee:b6:
         78:0f:05:47:16:ce:57:9b:0f:60:5d:e6:19:15:a7:23:6e:dc:
         69:fc:85:e3:4f:70:20:33:ca:41:3b:6e:2b:91:84:14:e6:7f:
         8b:25:82:18:71:a4:40:c0:74:e2:4e:3a:6e:c2:91:55:41:17:
         02:e4:d7:4e:26:46:11:00:09:6c:17:9d:1a:9f:c1:60:54:d0:
         86:67:f1:46:5a:eb:36:5f:68:5f:34:f4:c4:8b:76:8c:7e:74:
         18:ea:bc:82:3b:30:5d:20:9c:3b:23:39:9d:96:82:d5:06:6e:
         04:90:d1:36:37:7d:6b:d5:5e:6d:aa:30:45:df:77:ce:c7:09:
         4c:2a:5c:04:b3:e2:f9:0e:ce:e1:db:35:8c:1f:e7:8b:1d:b0:
         0f:99:29:fb:c3:e4:27:b0:a8:3e:8f:de:6a:8d:24:fb:04:15:
         ae:49:9f:e3:e0:71:73:5b:00:48:fb:24:f6:53:c3:3b:3c:05:
         81:e8:f0:5e:d0:c0:0b:ce:5e:01:40:09:aa:01:2a:ef:ec:23:
         de:34:99:e5:c8:10:c3:15:9a:69:fc:57:f3:f8:c2:fc:7b:d4:
         55:e2:c7:83:6d:0a:8d:2e:3b:2b:01:4f:f7:20:69:5b:c9:b5:
         84:cb:ab:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:14 2025 by rpki-client on console.sobornost.net