Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa
File:                     34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa (raw, json)
Hash identifier:          ejJEf5xEbogGC/USaCk8EXhmofYJJbj0hG7st5KV/9Q=
Subject key identifier:   73:6F:D7:92:DF:03:AF:8D:7B:5F:2B:D1:6F:77:FB:89:5A:D1:F1:4B
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       241F77858724B0A579D61802C0B5CD9E900F6F56
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa
Signing time:             Thu 03 Apr 2025 18:00:22 +0000
ROA not before:           Thu 03 Apr 2025 17:55:22 +0000
ROA not after:            Thu 02 Apr 2026 18:00:22 +0000
asID:                     269423
IP address blocks:        45.186.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1f:77:85:87:24:b0:a5:79:d6:18:02:c0:b5:cd:9e:90:0f:6f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: Apr  3 17:55:22 2025 GMT
            Not After : Apr  2 18:00:22 2026 GMT
        Subject: CN=736FD792DF03AF8D7B5F2BD16F77FB895AD1F14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:48:23:55:91:a1:f6:7a:5e:f7:89:65:9f:
                    fc:1c:74:a1:ad:77:3b:61:a0:67:7d:89:57:ef:15:
                    4a:ab:23:39:35:52:7e:59:8f:d7:e9:8e:ca:58:ca:
                    cc:07:dc:d4:18:c2:05:f2:c2:2a:23:11:a8:7d:97:
                    01:b9:ae:13:6d:78:4d:67:0e:93:1b:7e:ad:9f:a8:
                    41:5b:ea:27:50:45:55:c4:1e:69:55:90:0f:96:30:
                    c4:2c:d5:79:1b:a4:04:5c:7a:e6:7c:85:82:ff:d6:
                    d9:59:e7:0e:c8:2f:be:a2:fb:9c:de:b3:66:8b:4b:
                    e1:68:9f:5e:98:30:5f:12:ed:9a:57:51:e3:33:10:
                    c7:e4:fb:14:79:fb:05:eb:6e:57:00:8a:25:65:6b:
                    dd:a2:b0:ce:7a:cc:4b:c6:8e:c5:2d:ae:13:c0:f5:
                    9b:a5:d7:9d:06:cd:83:be:1f:c9:d2:49:f0:0a:ec:
                    15:dc:b5:33:c5:43:fe:3b:26:bf:b2:4c:6a:1b:86:
                    22:15:bc:c6:8d:6b:2a:69:12:a7:9d:1b:5e:95:91:
                    27:41:a6:b5:56:6c:91:1a:7c:b3:a6:4b:bc:2c:56:
                    b2:69:a4:41:5b:2e:fc:92:44:d7:de:16:c4:45:e6:
                    03:4e:bc:d9:7c:97:3d:c6:69:7a:9b:30:8e:1b:68:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6F:D7:92:DF:03:AF:8D:7B:5F:2B:D1:6F:77:FB:89:5A:D1:F1:4B
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:2f:a5:ae:ed:ca:72:b1:c0:22:34:8a:17:74:1a:d0:0c:76:
         ca:e3:52:9c:1b:d0:28:22:0a:92:51:4a:d0:9f:1f:d7:d2:d3:
         53:33:49:99:62:dd:92:fb:8f:36:d9:a2:5c:94:4b:ef:ed:91:
         96:59:17:09:e1:c8:de:d0:1c:57:49:f3:68:b5:24:a1:e9:af:
         1d:df:42:2d:06:c1:e4:81:c2:f4:ea:e4:70:1b:39:7d:07:78:
         82:96:7e:87:7c:90:da:73:92:06:35:78:33:86:95:7f:33:2a:
         b7:aa:e0:8a:5f:31:48:b9:bc:ca:36:d6:24:f8:70:b3:54:84:
         45:65:ce:d6:ba:1d:4c:ba:f2:a3:e4:68:6b:e3:88:85:e9:22:
         55:97:3e:a5:9b:d4:c6:67:e4:25:d5:4a:5d:04:45:0a:7f:06:
         c0:41:b4:f8:38:f6:da:9a:6b:9f:bc:4a:e2:f5:e6:7f:da:69:
         6e:8f:a9:f1:e0:d1:25:3e:6f:88:15:d4:32:e3:92:d2:ae:65:
         23:6d:5c:20:90:d4:c3:92:63:ef:fc:c1:1b:9a:c6:bc:12:d0:
         9b:98:79:ae:a2:41:7a:e6:c6:b0:c8:a2:68:81:d8:c3:eb:b0:
         b5:2c:39:d0:68:0a:dc:5e:54:05:1b:eb:cf:46:a7:1e:de:d2:
         33:ef:47:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:48 2025 by rpki-client on console.sobornost.net