Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa
File:                     34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa (raw, json)
Hash identifier:          glY5avmtaczh644B8sTSQdzC5CEnmx4hImgp5JNM7RU=
Subject key identifier:   FB:D7:00:48:F7:1E:EC:70:60:E8:87:ED:2E:83:6B:61:3D:0A:1E:DA
Certificate issuer:       /CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
Certificate serial:       0799E319AF909EEBB7D698CAE36F00B212EDF9D7
Authority key identifier: D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa
Signing time:             Wed 23 Apr 2025 23:40:49 +0000
ROA not before:           Wed 23 Apr 2025 23:35:49 +0000
ROA not after:            Wed 22 Apr 2026 23:40:49 +0000
asID:                     267961
IP address blocks:        45.165.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 17:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:99:e3:19:af:90:9e:eb:b7:d6:98:ca:e3:6f:00:b2:12:ed:f9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
        Validity
            Not Before: Apr 23 23:35:49 2025 GMT
            Not After : Apr 22 23:40:49 2026 GMT
        Subject: CN=FBD70048F71EEC7060E887ED2E836B613D0A1EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:60:61:7f:4e:f3:19:47:07:05:eb:29:8c:af:
                    05:e3:da:eb:bf:56:4d:d5:34:04:65:47:af:81:c9:
                    d9:8d:bc:46:27:da:15:48:d7:67:0d:1f:48:ac:d6:
                    78:99:0c:da:f7:f7:4b:09:d9:c3:49:d6:d8:dd:84:
                    20:e2:d6:69:0e:56:5e:19:13:b8:01:2c:85:d6:c1:
                    5f:df:6c:cf:e4:69:0e:81:29:ec:a4:27:83:0c:a3:
                    ae:2e:92:93:a7:25:d0:51:ed:78:a9:ed:68:d8:25:
                    a3:f6:ab:90:20:1f:cc:ef:df:f0:7c:f6:45:57:b4:
                    dc:f8:68:83:51:8e:5f:8e:ce:d2:d1:27:5b:fe:d0:
                    7e:ae:10:6f:3e:f1:c3:99:63:d7:e1:be:07:0b:63:
                    5f:36:43:43:95:d9:85:27:13:10:fa:26:50:ce:42:
                    07:e2:8a:cd:dd:28:99:00:1d:6e:df:85:78:eb:27:
                    04:98:91:1b:13:d4:aa:f9:70:75:82:34:91:f2:54:
                    85:49:cb:18:cb:44:5e:96:fc:31:32:7d:e5:b1:80:
                    9e:7f:b3:d3:23:79:c6:c7:73:db:9f:36:a0:92:d0:
                    96:db:8d:74:d7:bd:27:83:2f:0c:82:eb:64:67:9a:
                    4b:ce:e8:46:ff:b8:8b:f7:c9:16:20:ab:a6:38:3c:
                    ce:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D7:00:48:F7:1E:EC:70:60:E8:87:ED:2E:83:6B:61:3D:0A:1E:DA
            X509v3 Authority Key Identifier:
                keyid:D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:63:48:a6:de:d5:ac:24:10:70:f1:cb:a2:10:ac:e7:6c:6e:
         41:c2:af:20:6d:88:a8:bb:ab:21:84:0c:3e:08:d7:3b:b7:73:
         46:be:ec:77:0e:f0:c3:71:81:61:2a:6a:c0:53:7b:7a:3a:60:
         2c:01:04:d2:9a:f1:55:97:4a:dd:17:6f:ee:f6:e1:1b:62:71:
         74:67:6e:64:13:cc:a9:d3:c4:b7:7e:b0:a7:44:61:fe:c3:83:
         76:4e:c9:58:b1:f8:c7:f1:91:82:d3:98:ba:81:47:64:61:3d:
         5a:f6:06:25:32:25:f6:d4:29:f1:43:94:a5:bf:24:f4:37:fc:
         4d:9a:dd:a0:0d:2d:cd:8f:97:bd:29:94:7b:58:d6:be:7b:45:
         b8:fc:d4:78:f9:49:7b:b5:19:2b:c0:db:74:52:d7:cf:9a:1f:
         b2:7d:89:48:6e:bb:e7:04:89:b8:26:d8:a3:b5:bf:fc:43:04:
         62:84:cf:fc:27:69:2e:4a:77:3b:2b:9f:3f:02:cf:9b:69:c5:
         70:1a:8a:d5:bb:76:6e:af:6b:b6:c6:22:a6:ea:b7:90:ee:a6:
         d6:f6:29:ca:2a:b9:52:8c:5b:3f:4a:46:69:dd:fc:a9:8c:a8:
         60:1b:24:2c:22:0c:8c:0c:27:0a:b1:08:5d:62:08:87:59:08:
         41:78:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:57 2025 by rpki-client on console.sobornost.net