Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/34352e3137312e31392e302f32342d3234203d3e20323638313831.roa
File:                     34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (raw, json)
Hash identifier:          ocNiHrf1d9Z7plIcCmYweeZ2niT6wSQyBuY0x2/edlw=
Subject key identifier:   51:C4:4C:A0:50:52:D1:78:33:88:5C:6F:07:D5:97:08:E9:55:6F:C5
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       09C11086F27A01F22338874BE181EE36364023B8
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/34352e3137312e31392e302f32342d3234203d3e20323638313831.roa
Signing time:             Wed 05 Mar 2025 20:49:41 +0000
ROA not before:           Wed 05 Mar 2025 20:44:41 +0000
ROA not after:            Wed 04 Mar 2026 20:49:41 +0000
asID:                     268181
IP address blocks:        45.171.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c1:10:86:f2:7a:01:f2:23:38:87:4b:e1:81:ee:36:36:40:23:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Mar  5 20:44:41 2025 GMT
            Not After : Mar  4 20:49:41 2026 GMT
        Subject: CN=51C44CA05052D17833885C6F07D59708E9556FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:04:a7:c5:44:ff:78:07:aa:e7:a0:33:11:
                    10:50:9b:50:aa:17:72:13:af:a5:f0:c6:ed:23:d8:
                    2d:23:15:2c:fa:34:84:ad:74:ca:03:30:52:0c:0c:
                    70:e6:a9:45:8d:1e:05:9b:f6:f5:f5:1b:12:f1:5d:
                    15:3a:d4:37:c0:00:d8:da:98:a2:da:10:85:0b:a7:
                    61:53:aa:4b:7c:1d:ab:a8:a4:b1:28:67:62:46:7b:
                    d5:58:f2:6a:58:d5:ff:06:9d:40:40:ab:1e:aa:5f:
                    c5:51:47:52:a4:88:06:d8:df:bf:b3:b2:88:73:e7:
                    d5:b0:be:27:6e:75:52:57:3b:50:16:f4:ef:6e:77:
                    4e:3b:18:85:ab:db:27:55:d1:b7:d7:a8:b7:15:c7:
                    c3:51:56:fb:4a:15:c0:5a:57:b5:f7:a0:21:ac:7b:
                    55:1b:fc:35:b0:56:74:dc:62:54:4a:cc:89:f3:81:
                    84:9d:07:7b:1b:47:d9:27:0b:a9:ee:c2:33:62:71:
                    df:ba:36:94:9d:3c:98:b9:a4:71:a9:19:4c:51:33:
                    b5:c9:3f:5e:79:4b:8c:fc:28:9f:76:cc:e6:a6:31:
                    98:ac:b3:54:c9:d6:77:75:ac:91:d0:f6:b1:e4:f5:
                    73:97:48:2b:c6:57:a3:54:81:94:98:02:e3:a9:67:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C4:4C:A0:50:52:D1:78:33:88:5C:6F:07:D5:97:08:E9:55:6F:C5
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/34352e3137312e31392e302f32342d3234203d3e20323638313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:35:f0:09:50:10:9c:3c:9c:6b:ed:ef:7c:f9:33:e0:fb:c3:
         24:46:d9:82:0b:1f:5f:9d:12:cb:34:a2:a8:a7:a2:c8:6d:5e:
         87:0d:64:31:69:d3:aa:7b:88:10:78:5b:a0:61:17:f3:bf:a8:
         b0:26:9b:53:63:2a:9d:61:f4:00:2c:51:8a:66:c0:14:7c:43:
         ce:0f:5e:14:58:ac:61:bd:5c:89:8f:2f:4e:27:94:77:a9:6d:
         c6:fa:7f:64:dd:b7:cf:fe:0f:af:68:10:2c:bf:69:b2:16:57:
         7d:99:41:b2:cc:c3:0b:1a:da:16:9d:8b:a2:25:62:ad:45:8a:
         39:e4:42:a3:cb:d0:81:e5:2e:de:f7:ba:3f:e2:14:47:ea:cc:
         ee:c5:f3:8a:1e:60:21:b3:90:1e:14:9d:b1:d2:a5:21:16:85:
         9d:55:8d:d2:c7:5d:dc:72:7d:12:2f:1d:e9:db:5f:ae:b9:f3:
         8b:d9:f3:9a:8a:b7:42:1d:84:b4:b6:54:9d:2d:89:ac:47:71:
         22:19:0c:8e:2c:cf:cd:75:85:95:17:83:59:41:a8:97:90:fb:
         ea:68:f9:98:cc:89:18:41:98:4d:46:e2:62:a1:2d:f5:6a:a6:
         58:db:c5:4a:a3:f0:bd:3b:9f:9d:7d:a3:04:bf:cf:65:d0:01:
         45:af:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:30 2025 by rpki-client on console.sobornost.net