Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa
File:                     34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa (raw, json)
Hash identifier:          duscJe1I+dFISnbZMdlBq3Cu6EIOS8C0XCoFj4T3DqQ=
Subject key identifier:   7F:6D:C1:86:E0:42:BF:25:2E:97:0D:B1:15:0B:DF:B0:07:04:B5:01
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       10A85CAD6E785848B7DA681A71BE523C943CF968
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa
Signing time:             Thu 06 Mar 2025 13:53:28 +0000
ROA not before:           Thu 06 Mar 2025 13:48:28 +0000
ROA not after:            Thu 05 Mar 2026 13:53:28 +0000
asID:                     267177
IP address blocks:        45.230.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a8:5c:ad:6e:78:58:48:b7:da:68:1a:71:be:52:3c:94:3c:f9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: Mar  6 13:48:28 2025 GMT
            Not After : Mar  5 13:53:28 2026 GMT
        Subject: CN=7F6DC186E042BF252E970DB1150BDFB00704B501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:6e:94:cf:7c:b5:d4:64:a0:eb:8a:a9:28:
                    09:e5:38:29:64:c9:62:45:92:6d:ef:ad:11:25:ce:
                    1c:ba:38:56:ea:24:0b:89:ca:09:be:97:78:30:72:
                    be:6f:24:2d:ec:09:32:ec:29:8f:2e:0e:6c:b8:dc:
                    36:7e:df:d6:bb:93:26:b3:4b:0d:a5:d6:2e:ca:99:
                    e0:5c:2d:2e:aa:78:d8:9a:c9:dc:b6:01:b0:41:ba:
                    c8:f1:46:e8:2f:63:01:b4:c1:3c:7c:57:41:8c:e6:
                    97:05:cd:35:1a:ef:94:bf:85:72:d8:e0:54:b3:ac:
                    55:92:8b:be:cd:2f:70:46:a2:a3:ab:5d:01:d6:d5:
                    2f:09:78:6a:8a:c0:31:36:34:6f:4d:df:9c:b0:8d:
                    41:7c:51:8c:56:f5:b5:b9:f1:44:58:f6:1f:46:af:
                    a8:64:48:43:35:f9:09:40:92:33:3a:dc:30:b3:0d:
                    7e:de:10:0f:36:dd:2f:5a:a1:53:53:8a:9b:56:2d:
                    6b:d2:de:f2:b4:2e:2d:b5:a1:5e:1f:ff:9b:c5:fa:
                    94:c0:41:41:0f:79:2c:42:4b:12:ad:93:a0:ff:46:
                    55:12:27:d0:98:a7:47:8a:af:71:47:11:e0:5d:d3:
                    99:68:2e:4b:13:f0:1c:5f:5d:01:e6:07:a4:8c:aa:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6D:C1:86:E0:42:BF:25:2E:97:0D:B1:15:0B:DF:B0:07:04:B5:01
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233342e302f32342d3234203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:97:c5:40:e4:80:a1:8d:80:a6:ab:4f:7a:c0:b5:6d:18:b5:
         ae:df:07:03:5d:de:04:fb:5a:0c:1e:4f:46:b7:42:40:f9:0b:
         4e:c2:78:1a:66:03:30:02:12:5d:a5:b0:33:06:80:90:13:3b:
         6e:11:78:04:53:29:df:3c:52:59:20:f2:d8:5a:a5:23:75:24:
         f0:49:ea:82:34:de:0a:6a:34:91:4d:52:30:8e:23:5e:18:54:
         82:ba:ee:67:33:cc:71:28:72:b9:2b:1b:06:61:bd:14:77:d6:
         b2:77:b8:50:e3:3d:97:9c:86:34:0c:fb:10:98:64:2b:ec:51:
         95:62:e0:0b:c3:f2:8c:a5:3f:eb:8a:c2:97:b2:56:c4:4a:7c:
         67:f7:00:b3:6b:c9:f0:4b:12:5a:52:b4:a3:b2:85:a9:01:9e:
         b1:98:b1:de:ad:30:c1:91:8d:be:2c:97:95:09:69:5b:c0:3b:
         5d:8d:18:41:2c:99:b5:f4:35:02:be:3a:5d:95:1e:71:f3:60:
         14:fd:62:94:c1:9f:78:df:6e:c0:7c:3d:0c:20:32:87:34:c7:
         12:ee:2f:98:56:57:57:21:01:28:b5:a7:85:92:4a:22:a7:83:
         ae:fc:91:b1:d6:d0:9a:1c:3d:7d:c2:69:a1:e7:02:08:93:81:
         8e:1d:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:02:19 2025 by rpki-client