Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3135302e302f32342d3234203d3e20323639313932.roa
File:                     34352e3138312e3135302e302f32342d3234203d3e20323639313932.roa (raw, json)
Hash identifier:          XcYRnUA3ecclniz0nBtg7w07y3lx9wiNWDXdcQ9YpNY=
Subject key identifier:   06:A2:87:56:AF:8A:3C:F9:10:20:3E:52:C6:FE:1A:4C:72:7C:0D:FD
Certificate issuer:       /CN=19DB591368FFC9C033D175BED1136000D4C84821
Certificate serial:       3D551C7497BAB38913789DAAB6E40F059FD849E3
Authority key identifier: 19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3135302e302f32342d3234203d3e20323639313932.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     269192
IP address blocks:        45.181.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl
                          rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 07:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:55:1c:74:97:ba:b3:89:13:78:9d:aa:b6:e4:0f:05:9f:d8:49:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19DB591368FFC9C033D175BED1136000D4C84821
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject: CN=06A28756AF8A3CF910203E52C6FE1A4C727C0DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:c2:96:9d:f3:ff:1e:1a:51:3f:13:65:e2:
                    33:f8:43:46:54:5a:1e:c5:6d:4e:fe:dd:c9:de:44:
                    4d:79:79:99:5d:6c:44:2a:0b:79:63:37:f7:3b:c9:
                    4b:73:17:df:65:45:99:77:5a:83:a8:d4:d5:9c:db:
                    99:7c:fe:b7:d4:09:fb:10:54:11:be:d8:02:2c:02:
                    70:2f:a3:c1:40:ba:e6:97:d5:06:71:c3:f4:b1:9f:
                    6b:da:7e:84:cf:ed:98:df:1e:1b:94:ed:a7:c7:93:
                    37:8c:1a:c1:3b:93:64:6b:54:cc:b6:aa:d6:92:e0:
                    7e:07:b7:d4:53:93:43:50:a1:93:f5:ac:7c:b9:d4:
                    d5:6e:57:55:e9:9c:59:91:a3:5b:51:43:cc:b4:1c:
                    63:88:92:d5:8b:36:3d:3e:00:23:f0:65:8e:e6:39:
                    3a:b4:ac:31:00:5d:a4:d0:49:e4:e3:c2:4a:8c:0e:
                    1b:66:54:60:db:ac:34:a6:f0:ae:fd:3b:bb:9f:f8:
                    ed:87:0e:ac:3e:54:e3:9d:06:95:b6:2e:e5:72:65:
                    7e:3c:f6:e8:d9:55:63:5a:3e:1a:b0:f7:49:ae:db:
                    5b:03:b9:38:96:d2:23:f3:15:7e:fa:a9:44:bb:df:
                    2c:cf:9b:3d:e8:3d:a7:d2:26:a0:a7:d8:dc:76:ac:
                    b3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A2:87:56:AF:8A:3C:F9:10:20:3E:52:C6:FE:1A:4C:72:7C:0D:FD
            X509v3 Authority Key Identifier:
                keyid:19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3135302e302f32342d3234203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:6c:84:7c:88:73:2c:92:de:ed:d2:cd:c9:7f:8f:39:7e:
         b2:15:e3:fd:6e:78:b0:90:45:60:3b:55:0b:36:e1:ce:0a:42:
         59:2f:f4:d2:c3:36:b7:d6:7e:66:6a:e3:51:f1:9b:8d:0f:66:
         b4:59:30:3f:76:37:41:a3:6b:02:1a:33:35:1d:b3:8d:ad:25:
         f5:1a:ae:92:f7:14:11:9c:2b:fc:df:a7:12:c7:9f:85:28:2f:
         53:a7:48:55:01:be:19:d0:e4:a1:a0:c6:d3:bc:e1:d9:4b:90:
         99:fb:60:5d:ba:a8:33:4c:67:d1:7e:63:29:2a:33:8c:2c:1d:
         4b:89:ee:26:ac:cc:48:33:64:be:1f:a8:b3:52:fb:e0:9d:5d:
         0a:f4:c9:56:a9:a2:f5:e7:d6:cc:1b:24:14:41:3a:fc:bc:bf:
         b4:e6:ce:a0:77:6f:53:73:d4:b7:90:f2:84:d8:15:bd:cd:e4:
         d4:a5:70:46:62:8b:a6:97:d7:ea:75:97:e2:98:99:65:a3:0d:
         0b:a3:ec:92:13:99:68:ee:cc:eb:2e:1b:4f:29:37:a9:62:c0:
         8e:83:4f:01:7c:16:d3:9b:53:5f:4f:e7:a2:89:6f:b5:cc:f4:
         7a:6a:1d:c8:85:51:cc:28:94:9b:df:05:be:d7:ba:dc:7e:b0:
         57:92:80:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:01:26 2025 by rpki-client