Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa
File:                     34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa (raw, json)
Hash identifier:          Kgc6lepf54SQs0P5cfSSwA50mFBjZkxshswJcKadY8k=
Subject key identifier:   F1:87:F5:FE:59:E7:6A:A2:46:2D:BD:6F:6A:AE:F3:9E:83:4C:14:23
Certificate issuer:       /CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
Certificate serial:       529507E071EDC107D4C67A60F139389F0FD43768
Authority key identifier: 65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa
Signing time:             Sat 01 Feb 2025 21:53:47 +0000
ROA not before:           Sat 01 Feb 2025 21:48:47 +0000
ROA not after:            Sat 31 Jan 2026 21:53:47 +0000
asID:                     267229
IP address blocks:        45.231.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl
                          rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:95:07:e0:71:ed:c1:07:d4:c6:7a:60:f1:39:38:9f:0f:d4:37:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
        Validity
            Not Before: Feb  1 21:48:47 2025 GMT
            Not After : Jan 31 21:53:47 2026 GMT
        Subject: CN=F187F5FE59E76AA2462DBD6F6AAEF39E834C1423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:31:82:92:61:b1:4d:f2:56:ce:92:81:98:
                    00:4f:2d:09:e3:99:b0:e3:d2:2c:1c:85:4d:56:0e:
                    da:8a:25:6e:2a:de:89:7f:2d:47:9d:bb:f8:78:70:
                    4e:9f:c6:b6:32:28:82:c5:31:36:08:db:4b:58:43:
                    d0:b0:1f:78:39:f3:36:ca:9e:90:79:55:16:ec:65:
                    85:d4:06:90:d6:57:ae:9a:d2:62:95:91:69:24:95:
                    d5:48:31:93:e6:3a:31:2b:80:ee:7a:52:ea:16:36:
                    8e:20:db:87:03:c4:27:9c:fd:0d:5f:3d:32:fd:ca:
                    bb:1a:34:69:4f:90:6c:f7:7e:8c:e2:25:a2:90:4c:
                    90:2e:e3:bf:ab:c5:03:f2:80:f2:f8:eb:ad:58:7e:
                    c7:fa:70:46:bb:9a:aa:bd:8f:f7:b6:5d:8e:6b:16:
                    d2:ef:d8:f1:63:cb:1c:f9:bb:fd:29:ec:ba:3e:14:
                    4c:2d:0e:3b:c5:a7:ed:e5:76:af:ee:df:56:7c:2e:
                    4e:c2:b8:cc:28:99:f6:74:c9:c8:c9:8c:a8:de:45:
                    c0:4e:aa:39:58:ee:fd:f3:5d:67:8b:d3:b8:c7:f4:
                    17:44:6d:11:8f:75:6b:3b:e7:1f:fa:be:c5:04:ee:
                    53:df:5b:15:59:01:cd:37:aa:d5:83:ec:72:8a:9f:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:87:F5:FE:59:E7:6A:A2:46:2D:BD:6F:6A:AE:F3:9E:83:4C:14:23
            X509v3 Authority Key Identifier:
                keyid:65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:60:46:f1:58:34:75:db:5e:c4:2c:ad:db:d2:a8:55:2c:
         6d:ed:30:1b:23:6e:a0:82:2a:79:73:55:09:37:d9:8e:f2:15:
         e4:96:8b:b5:2c:f7:c4:d4:f2:3d:17:c1:6f:10:32:76:2d:30:
         d1:62:58:38:ba:d9:81:f5:6d:11:e2:27:b4:2c:03:cb:57:83:
         b7:de:fb:3a:c1:81:a0:fd:f1:20:9c:66:3c:1e:b9:0b:41:25:
         bd:fc:b4:95:2e:a4:da:06:03:16:fa:d7:c0:77:4d:ff:0f:24:
         ce:07:4a:75:d6:4e:34:a0:55:93:a8:8f:49:ca:bd:aa:5f:7f:
         ad:12:a2:67:af:4d:84:a4:95:be:f9:fb:cd:2c:1f:93:27:49:
         27:78:92:3f:bb:cd:c2:af:de:ee:13:5a:d0:ef:2e:79:c1:46:
         7c:ac:3c:99:48:c6:9e:50:8f:61:dd:84:b3:93:e4:b3:fa:bc:
         3a:ca:b6:a5:70:32:dd:a7:89:2f:c6:ca:7c:52:8d:ea:4b:e2:
         21:50:1c:a9:6d:53:ca:03:44:94:34:fa:3f:65:28:9e:75:4a:
         98:61:b5:65:65:3e:1c:02:ef:6b:4c:cc:8b:92:27:d1:8f:c6:
         98:3d:c1:d7:a9:f6:d0:cd:11:22:18:4e:34:7b:a8:11:3e:0f:
         4d:74:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:52 2025 by rpki-client