Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37342e302f32332d3233203d3e20323637323531.roa
File:                     34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (raw, json)
Hash identifier:          gq23d3+kRAY4dWCEoVb03VA6J8a063C0N58YBiErots=
Subject key identifier:   2C:63:BF:5F:88:C2:7F:72:5C:90:21:87:7B:8B:52:05:11:10:FD:B0
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       757329C0E0DBF4D5124462461F2B454CCE5794D9
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37342e302f32332d3233203d3e20323637323531.roa
Signing time:             Wed 05 Mar 2025 19:00:26 +0000
ROA not before:           Wed 05 Mar 2025 18:55:26 +0000
ROA not after:            Wed 04 Mar 2026 19:00:26 +0000
asID:                     267251
IP address blocks:        45.232.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:73:29:c0:e0:db:f4:d5:12:44:62:46:1f:2b:45:4c:ce:57:94:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Mar  5 18:55:26 2025 GMT
            Not After : Mar  4 19:00:26 2026 GMT
        Subject: CN=2C63BF5F88C27F725C9021877B8B52051110FDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:2f:89:04:e7:ac:b0:b4:78:3d:c6:ff:33:
                    b6:e7:15:57:f6:e1:08:69:71:8c:c8:35:95:78:cf:
                    6e:60:6e:10:8f:7f:36:93:4e:73:81:53:c8:84:90:
                    77:a0:75:11:6f:0a:8f:db:db:01:56:6d:42:f2:f6:
                    59:ac:38:0f:9a:63:6f:00:44:98:3f:8e:e7:7e:32:
                    67:c6:1c:4e:98:58:a2:a0:61:83:95:7e:3a:89:07:
                    04:dc:fc:90:bb:a5:79:2a:a3:12:75:f0:65:f9:da:
                    e1:1e:fc:2d:13:9c:09:55:e7:62:22:f6:0e:06:70:
                    20:66:93:28:b3:c9:a8:4e:4b:93:7b:2f:d8:fa:26:
                    05:28:af:1b:cd:40:26:3a:1b:22:df:aa:c5:89:e3:
                    60:95:d6:7e:f2:ab:55:0e:91:bd:0e:aa:85:71:25:
                    7a:ef:1d:11:82:9c:ec:7e:2d:f1:18:b1:0c:ed:49:
                    90:7d:fc:a9:4b:d2:62:60:ee:81:54:d1:0c:14:f5:
                    3f:13:26:e8:88:4e:7c:e6:4c:fb:d7:df:14:fe:7b:
                    b7:fb:29:0a:34:bf:d9:04:76:f5:66:3f:45:20:68:
                    30:34:51:45:fa:0b:26:77:a4:26:18:fd:1a:83:66:
                    25:63:1e:67:6e:86:46:f9:20:5f:4f:95:c2:94:5a:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:63:BF:5F:88:C2:7F:72:5C:90:21:87:7B:8B:52:05:11:10:FD:B0
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37342e302f32332d3233203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:1b:a4:22:9b:ae:75:22:56:76:68:ce:ff:55:d6:aa:19:28:
         20:8f:38:42:9a:84:e0:3a:4f:37:48:18:0b:80:9c:bb:ec:9a:
         b1:c5:70:b5:bd:88:49:24:d1:7d:ee:83:bc:a8:a1:71:0b:cd:
         d0:14:e6:eb:59:30:5e:a2:e7:7e:c7:a2:b0:e6:14:d4:d6:7d:
         8e:f6:42:f2:f1:3e:53:87:98:73:64:32:4e:07:77:d9:a8:22:
         52:5e:75:7f:1c:22:39:b7:17:6b:0f:40:3e:96:24:36:55:5c:
         46:db:22:a0:e9:e0:cc:0c:f8:1a:df:96:20:04:93:10:d3:0c:
         89:b8:81:55:e5:ba:74:50:93:b6:fd:9b:15:c8:c7:ff:fb:57:
         73:90:75:0d:65:3e:67:20:94:50:dc:ed:4b:aa:d0:da:bd:8a:
         c5:60:0d:ef:02:2e:d2:38:97:85:13:cd:de:28:5f:eb:1c:96:
         7b:38:5c:d4:d0:0b:52:a4:2b:bd:00:c9:cd:10:07:55:a0:dd:
         dd:85:ac:4b:c3:c3:f8:73:1c:13:49:67:01:c3:f0:c1:93:30:
         b5:c7:fe:54:f5:7e:e8:66:59:9d:cd:93:de:dc:8a:42:02:89:
         de:1d:80:8a:be:64:d1:45:1a:51:67:5f:3f:e1:05:09:ee:84:
         5f:ce:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:31 2025 by rpki-client on console.sobornost.net