Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39362e302f32322d3232203d3e20323638343037.roa
File:                     34352e3136302e39362e302f32322d3232203d3e20323638343037.roa (raw, json)
Hash identifier:          BcAza3VqoW3jLYG3+flC/gWkHubELXgo24veB4fH3q8=
Subject key identifier:   BE:FD:08:F2:AF:0B:1E:E0:53:86:D1:A9:D5:8A:3D:7A:4C:2C:8D:F9
Certificate issuer:       /CN=18380AF093DF48152B3963AA733B302A175459DB
Certificate serial:       437AA46F9F4882C48692C5A105A831397FFDB6E9
Authority key identifier: 18:38:0A:F0:93:DF:48:15:2B:39:63:AA:73:3B:30:2A:17:54:59:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39362e302f32322d3232203d3e20323638343037.roa
Signing time:             Fri 14 Feb 2025 12:58:59 +0000
ROA not before:           Fri 14 Feb 2025 12:53:59 +0000
ROA not after:            Fri 13 Feb 2026 12:58:59 +0000
asID:                     268407
IP address blocks:        45.160.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/18380AF093DF48152B3963AA733B302A175459DB.crl
                          rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/18380AF093DF48152B3963AA733B302A175459DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7a:a4:6f:9f:48:82:c4:86:92:c5:a1:05:a8:31:39:7f:fd:b6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18380AF093DF48152B3963AA733B302A175459DB
        Validity
            Not Before: Feb 14 12:53:59 2025 GMT
            Not After : Feb 13 12:58:59 2026 GMT
        Subject: CN=BEFD08F2AF0B1EE05386D1A9D58A3D7A4C2C8DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:38:7e:99:28:54:de:cf:f5:d7:bc:97:1b:
                    8e:73:a0:92:38:64:9a:0c:89:23:4e:e3:41:00:5f:
                    94:64:f0:e4:4a:28:38:ba:18:44:7c:68:a0:8d:98:
                    36:89:b0:2f:d7:dd:9e:74:6a:82:e5:1b:76:8c:bd:
                    f3:c8:3d:73:e2:87:cf:10:47:2c:3a:4c:0b:07:e7:
                    a3:e3:9e:51:4e:be:a7:50:c5:8b:29:9d:18:d7:1b:
                    65:1d:6f:7e:0a:ee:84:ef:dc:4e:72:5a:aa:53:f1:
                    ae:7a:cb:2a:3f:dd:7f:b5:e0:d8:37:37:83:4a:b4:
                    90:e2:e8:f6:63:46:73:c5:e2:20:44:12:3b:33:15:
                    7d:5e:37:60:34:de:97:a2:d3:9f:83:cd:72:b0:92:
                    97:ee:8c:99:9d:14:e5:9b:fb:6f:b7:b1:3a:53:8b:
                    b2:ab:4f:46:bf:8b:09:60:63:eb:22:c0:f8:5b:d9:
                    46:7a:e2:c5:06:a2:2c:05:fb:d9:e6:f0:34:17:71:
                    d3:88:bf:be:db:50:bb:7d:50:0e:6b:f5:77:87:cd:
                    e5:1b:58:fe:07:68:d9:6b:71:ee:c0:49:53:57:12:
                    f6:f7:45:5e:dc:b2:a1:d1:f1:66:fd:c5:8d:6a:a1:
                    55:7f:12:58:f7:eb:01:2f:95:f9:4d:0e:c5:32:4d:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FD:08:F2:AF:0B:1E:E0:53:86:D1:A9:D5:8A:3D:7A:4C:2C:8D:F9
            X509v3 Authority Key Identifier:
                keyid:18:38:0A:F0:93:DF:48:15:2B:39:63:AA:73:3B:30:2A:17:54:59:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/18380AF093DF48152B3963AA733B302A175459DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/34352e3136302e39362e302f32322d3232203d3e20323638343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:da:d1:2a:07:c0:ab:d6:cf:e7:c4:0d:68:2c:eb:e6:ff:da:
         9d:fb:17:5b:65:cb:58:81:5e:c8:0d:b3:f7:cc:51:de:e9:30:
         12:5f:3b:ff:9f:83:64:e2:d6:15:e2:98:54:cb:3f:a0:ed:ac:
         c2:a2:68:fb:b4:ea:f2:19:f5:39:16:07:7b:43:93:47:d3:25:
         9d:56:e2:30:33:cb:35:f4:8e:2b:cc:76:ec:61:88:dd:7e:73:
         e4:63:a2:ce:25:cf:4f:26:e1:9b:ee:43:92:23:71:35:60:6a:
         4b:86:d8:13:55:f5:69:75:e0:d9:9d:80:c6:38:3b:20:90:ec:
         f2:cd:76:86:f6:e4:f1:21:db:d9:b2:76:0e:e1:a9:29:75:4f:
         0f:f7:11:a9:37:fc:5f:c4:74:10:45:bd:24:be:5d:a9:dc:03:
         31:35:10:e7:55:87:87:6f:b4:19:86:00:8e:8d:63:92:cf:94:
         68:5d:7b:25:8d:38:85:ab:7a:07:cb:0e:98:ed:f5:75:6e:c6:
         f9:95:cc:d8:b2:26:ab:62:98:9a:fa:24:ad:46:75:22:c8:d5:
         80:9e:02:07:92:a5:ae:8f:44:e4:0c:9e:af:f3:ba:de:7b:0b:
         82:68:f4:61:49:32:6a:19:43:ee:8b:18:0e:f8:f1:fb:67:a0:
         96:23:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:29 2025 by rpki-client on console.sobornost.net