Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/34352e3137312e31372e302f32342d3234203d3e20323638313831.roa
File:                     34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (raw, json)
Hash identifier:          Nn6jD2pUfzWh45ebiPgn3qZcw/WBvZhUPEAdVETzjO8=
Subject key identifier:   A5:B1:06:D6:84:C5:B5:CA:09:BC:57:03:82:FC:9E:59:E5:4E:22:89
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       3FF1F9990A2F325B8EAAEE05BC71AC01CEEB4841
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/34352e3137312e31372e302f32342d3234203d3e20323638313831.roa
Signing time:             Wed 05 Mar 2025 20:49:41 +0000
ROA not before:           Wed 05 Mar 2025 20:44:41 +0000
ROA not after:            Wed 04 Mar 2026 20:49:41 +0000
asID:                     268181
IP address blocks:        45.171.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 19:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f1:f9:99:0a:2f:32:5b:8e:aa:ee:05:bc:71:ac:01:ce:eb:48:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Mar  5 20:44:41 2025 GMT
            Not After : Mar  4 20:49:41 2026 GMT
        Subject: CN=A5B106D684C5B5CA09BC570382FC9E59E54E2289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:46:8b:ea:20:f5:98:5d:17:0f:66:b0:52:
                    03:d7:9b:35:aa:e4:a3:52:52:8b:a3:64:18:e3:7a:
                    a7:aa:fc:eb:41:9f:27:0a:1a:d3:23:0c:b3:6b:af:
                    95:35:3d:03:3f:fa:cf:7a:2f:30:c4:d2:c8:7d:f9:
                    dd:d9:9f:0b:22:42:c7:36:38:e0:58:ad:d2:9e:83:
                    98:3d:74:89:29:4f:43:52:16:7c:1c:94:0e:24:fd:
                    a0:c1:2c:21:d8:a8:12:a3:56:bb:6e:42:fe:bc:c2:
                    ff:5b:be:8d:16:12:04:9c:34:8e:e0:20:d9:22:38:
                    c8:ba:b6:09:b2:94:ee:47:dd:3d:63:a5:97:c7:de:
                    8e:34:ca:dc:81:b2:7c:16:e1:0a:fb:7f:b7:a1:78:
                    c7:28:07:83:0e:93:ab:69:f0:22:ec:91:d5:30:40:
                    4d:34:b5:55:da:3e:cf:2b:af:17:a4:76:0d:8c:2a:
                    e8:49:ff:3c:80:68:10:a8:fc:e0:19:16:2f:96:46:
                    08:16:55:c3:9a:f7:6a:72:7c:75:b5:e4:33:64:ac:
                    71:55:19:f1:23:3a:0a:69:1d:2f:7a:a3:ce:b5:aa:
                    1d:b1:aa:4e:24:60:b8:a5:1b:6e:47:85:9f:bc:a6:
                    5a:eb:c6:0d:79:13:f8:31:7e:9d:c9:5e:ba:d7:c5:
                    71:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B1:06:D6:84:C5:B5:CA:09:BC:57:03:82:FC:9E:59:E5:4E:22:89
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/34352e3137312e31372e302f32342d3234203d3e20323638313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:e9:58:ed:a1:bf:4f:b9:0d:00:c2:b4:9c:c5:8f:fb:68:18:
         f9:c0:28:18:07:b9:9d:ed:22:4d:23:a0:55:2e:18:49:74:34:
         1f:26:ec:49:f1:b5:ac:34:20:b5:8e:1e:a0:69:be:da:2f:74:
         68:7c:32:75:18:00:15:b2:3c:67:c9:72:e3:75:5c:fd:a9:b5:
         d2:0c:1c:9c:e7:3d:03:5c:8a:af:5e:8c:48:eb:99:8d:6e:b2:
         fc:3a:46:4c:79:fd:47:0f:45:51:2d:67:0a:b1:58:32:08:12:
         b0:8f:47:bf:21:7d:4b:07:6a:96:d8:f3:da:06:82:c9:dd:e2:
         6b:3a:c7:b6:65:9f:50:cd:8c:64:96:94:89:4a:66:b0:ec:ec:
         9b:6e:35:07:86:f1:ea:46:b7:f5:ac:97:09:3a:05:87:ea:92:
         9d:e3:40:12:ae:0f:9e:cf:cf:d1:70:aa:ec:43:55:e1:82:68:
         72:40:b8:fb:5e:2e:1b:2e:85:b2:cc:91:68:5f:32:da:7a:94:
         20:5a:38:7d:cd:a9:57:ae:00:4d:7d:58:03:0b:8b:91:8d:99:
         80:1c:4d:18:7f:86:52:75:a3:f3:0e:f3:bd:7b:8a:7c:c8:c6:
         a0:96:1a:f8:dd:62:98:f4:d3:4b:66:09:e3:5e:3a:15:e3:28:
         d3:f1:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:45 2025 by rpki-client on console.sobornost.net