Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31372e302f32342d3234203d3e20323638303837.roa
File:                     34352e3136392e31372e302f32342d3234203d3e20323638303837.roa (raw, json)
Hash identifier:          ble/6ujdkYtn4KoPnOPcGWlQo9Lcdov+Pa7U0QdKD1s=
Subject key identifier:   F0:38:8D:3A:52:0C:97:A9:1B:B1:25:83:13:73:A9:4D:3D:C1:1E:2C
Certificate issuer:       /CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
Certificate serial:       4A8C424BAE7F9402B039F531B380159C20F4485C
Authority key identifier: 45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31372e302f32342d3234203d3e20323638303837.roa
Signing time:             Tue 18 Mar 2025 14:38:43 +0000
ROA not before:           Tue 18 Mar 2025 14:33:43 +0000
ROA not after:            Tue 17 Mar 2026 14:38:43 +0000
asID:                     268087
IP address blocks:        45.169.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl
                          rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 05:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8c:42:4b:ae:7f:94:02:b0:39:f5:31:b3:80:15:9c:20:f4:48:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
        Validity
            Not Before: Mar 18 14:33:43 2025 GMT
            Not After : Mar 17 14:38:43 2026 GMT
        Subject: CN=F0388D3A520C97A91BB125831373A94D3DC11E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:18:49:f3:c6:56:68:61:ba:3a:f7:77:ff:
                    e5:cf:12:bc:e8:87:7a:a9:cb:c5:38:cc:0c:1b:b0:
                    10:8f:a5:a2:30:66:e5:0f:3d:f0:41:45:58:72:1a:
                    f5:b1:d3:0c:90:a7:b3:8e:bf:c0:78:a6:ec:50:c3:
                    43:02:ba:b2:63:9d:e6:15:63:54:78:2b:78:03:c4:
                    cc:cd:30:83:12:a0:e5:97:e1:57:f2:72:b6:e4:60:
                    99:b1:0f:b0:98:ab:a1:a7:f2:31:ae:9d:ee:04:a0:
                    a8:76:6e:31:ad:17:ca:85:b2:92:35:3c:87:1c:74:
                    c6:fe:57:6b:23:bf:ee:2e:44:a7:b6:f3:1c:b6:ac:
                    ee:f4:53:71:ad:21:1d:9c:76:27:eb:f2:66:39:71:
                    26:26:d8:2e:14:52:ca:4e:60:52:35:52:bd:6b:10:
                    41:c0:6e:e5:2c:ff:53:11:a2:77:3c:e4:01:de:01:
                    8c:01:e2:f7:af:84:3f:c9:a5:e2:fa:ee:fc:da:db:
                    02:87:a4:ff:d3:e1:28:78:17:04:04:24:eb:87:fd:
                    66:74:67:36:de:d8:50:aa:1d:e7:ca:2f:25:f6:67:
                    64:4b:ce:bf:e1:94:83:f5:a9:28:e7:0c:a4:46:ad:
                    f4:32:97:d5:4c:23:94:1d:53:67:07:ee:38:76:39:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:38:8D:3A:52:0C:97:A9:1B:B1:25:83:13:73:A9:4D:3D:C1:1E:2C
            X509v3 Authority Key Identifier:
                keyid:45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31372e302f32342d3234203d3e20323638303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:3e:97:f4:6c:84:c4:96:2e:2b:6c:90:00:40:45:40:04:77:
         d5:a4:d5:e8:8f:d9:2d:97:bf:00:9b:10:65:52:b0:03:44:d7:
         eb:ff:a8:2c:82:d9:4a:e4:44:38:a8:6c:d0:e8:47:9d:f2:5e:
         7d:4d:9c:95:9b:e5:11:e7:33:28:47:81:b8:33:86:2a:fa:f3:
         7a:5f:3b:4b:cf:21:f8:c0:cf:99:0e:ae:a7:16:fc:ef:21:ac:
         43:b7:fb:17:ca:5a:99:2e:84:ef:1a:a3:53:34:99:f9:75:4c:
         44:37:cd:35:c4:37:41:6b:ea:6c:22:6e:4e:3d:2c:c8:4d:ee:
         93:e2:5a:d6:c9:05:3e:d4:dd:fd:46:b2:29:7d:3b:25:c8:b8:
         9c:e1:6f:c9:f9:59:7f:16:cb:bc:43:53:9c:d7:62:8e:e6:eb:
         bd:3d:00:14:4e:e5:a7:57:b8:ea:50:aa:9e:20:30:b7:81:21:
         d9:71:c4:a3:64:8b:58:b3:24:db:48:79:b2:75:7a:05:fb:93:
         35:98:33:46:22:05:da:2d:45:b0:47:32:20:0d:fe:1f:78:24:
         c8:3a:8f:d2:ec:5f:ce:ce:33:09:f9:fc:67:6e:1b:d7:dc:5e:
         cb:c6:33:83:bc:33:c8:ac:79:6f:e8:05:60:55:f0:3d:56:ef:
         7b:2b:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:59 2025 by rpki-client