Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G7jtjarJkq2ZvEUi4KVvt2yx8RLtdSb3WeFnY7MdybmG/0/34352e3136352e3230312e302f32342d3234203d3e20323637393338.roa
File:                     34352e3136352e3230312e302f32342d3234203d3e20323637393338.roa (raw, json)
Hash identifier:          aP46RxLnf8y5QAJz0stz7G0NpaCE09k5ShK7VntpvjU=
Subject key identifier:   11:A7:98:D2:42:B4:6F:84:25:42:DA:16:65:CC:E0:76:CF:88:B8:00
Certificate issuer:       /CN=05E1580C9D87ADC6390CE4795838432A0F5675E0
Certificate serial:       1ECBFCA0F306F83596359BD491996FA3ED095610
Authority key identifier: 05:E1:58:0C:9D:87:AD:C6:39:0C:E4:79:58:38:43:2A:0F:56:75:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05E1580C9D87ADC6390CE4795838432A0F5675E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G7jtjarJkq2ZvEUi4KVvt2yx8RLtdSb3WeFnY7MdybmG/0/34352e3136352e3230312e302f32342d3234203d3e20323637393338.roa
Signing time:             Thu 24 Apr 2025 19:04:08 +0000
ROA not before:           Thu 24 Apr 2025 18:59:08 +0000
ROA not after:            Thu 23 Apr 2026 19:04:08 +0000
asID:                     267938
IP address blocks:        45.165.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G7jtjarJkq2ZvEUi4KVvt2yx8RLtdSb3WeFnY7MdybmG/0/05E1580C9D87ADC6390CE4795838432A0F5675E0.crl
                          rsync://rpki-repo.registro.br/repo/G7jtjarJkq2ZvEUi4KVvt2yx8RLtdSb3WeFnY7MdybmG/0/05E1580C9D87ADC6390CE4795838432A0F5675E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05E1580C9D87ADC6390CE4795838432A0F5675E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 17:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cb:fc:a0:f3:06:f8:35:96:35:9b:d4:91:99:6f:a3:ed:09:56:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05E1580C9D87ADC6390CE4795838432A0F5675E0
        Validity
            Not Before: Apr 24 18:59:08 2025 GMT
            Not After : Apr 23 19:04:08 2026 GMT
        Subject: CN=11A798D242B46F842542DA1665CCE076CF88B800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:36:a4:c4:e6:e6:2d:ce:69:11:5c:ef:68:
                    14:14:58:a0:3c:d0:4e:c2:eb:d1:85:af:da:84:cb:
                    5a:1a:8c:82:9c:5a:b7:72:bf:b3:69:55:65:6a:78:
                    25:cb:41:4d:4d:d0:f3:ca:ab:cd:3e:24:13:8a:ed:
                    67:d2:1c:3a:56:08:25:05:fb:e3:ac:f1:22:d7:1f:
                    4c:25:42:ea:47:52:c6:10:0d:01:99:89:e6:ec:c6:
                    b2:e6:77:47:c6:cd:96:6d:d3:fe:79:b2:85:6e:99:
                    78:68:02:57:f2:d0:9a:72:06:49:85:f3:71:1b:a0:
                    5f:68:95:8c:2d:8b:ed:0f:d8:d0:cf:5e:84:9f:40:
                    5f:82:ff:f2:67:3a:9d:96:be:a7:7c:45:5b:c0:81:
                    6c:af:e1:e9:7f:a1:fb:2d:94:a5:1a:c7:a0:5e:63:
                    e0:11:fe:4e:ed:89:45:9f:6d:35:7f:9c:dc:c8:a6:
                    32:e5:b8:b8:56:4c:3f:25:4e:c7:1b:52:a2:03:2c:
                    da:01:92:66:47:9b:07:ad:4c:46:8e:01:04:d0:fb:
                    14:3f:d7:c9:43:8c:03:f5:f4:83:62:d9:ab:41:bb:
                    b0:9e:19:b1:b6:6d:ef:0f:52:54:7e:57:09:49:b2:
                    e4:47:66:a0:0a:b0:a9:dc:51:89:c0:35:30:79:4e:
                    c4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A7:98:D2:42:B4:6F:84:25:42:DA:16:65:CC:E0:76:CF:88:B8:00
            X509v3 Authority Key Identifier:
                keyid:05:E1:58:0C:9D:87:AD:C6:39:0C:E4:79:58:38:43:2A:0F:56:75:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G7jtjarJkq2ZvEUi4KVvt2yx8RLtdSb3WeFnY7MdybmG/0/05E1580C9D87ADC6390CE4795838432A0F5675E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05E1580C9D87ADC6390CE4795838432A0F5675E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G7jtjarJkq2ZvEUi4KVvt2yx8RLtdSb3WeFnY7MdybmG/0/34352e3136352e3230312e302f32342d3234203d3e20323637393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:42:04:aa:0d:80:78:ec:a4:ca:0d:f3:4a:9c:80:0f:ee:2e:
         91:31:9a:51:53:ff:a7:c0:5b:9f:3b:16:fb:e5:93:a9:de:ad:
         ac:8e:50:e4:98:8e:63:f3:60:60:52:1d:67:63:a3:2f:ba:21:
         c2:f5:a0:48:f3:54:3f:84:39:a1:e6:02:36:5b:3c:ae:66:83:
         28:50:b4:b9:1f:88:57:02:80:1e:f3:8d:51:22:37:3a:de:c2:
         8a:55:08:6c:5c:e3:64:ff:df:ef:1f:88:de:a4:1e:c0:34:ee:
         dd:e7:e4:83:3f:3f:db:79:ed:d5:72:04:27:1f:50:09:e2:00:
         4f:18:1c:26:5d:4a:35:ce:66:6a:cd:2c:64:0a:b0:86:16:1a:
         e8:3f:7a:f6:89:28:02:e4:4e:14:80:0d:e2:4c:96:cb:e0:3e:
         9e:d1:ae:6e:fc:b5:25:39:de:e4:b7:ff:7f:b9:85:7c:7b:bb:
         d1:8e:db:65:90:20:9d:50:bd:b2:7d:c1:aa:9a:ce:42:15:a1:
         16:08:42:e1:7c:ba:c8:fa:11:11:71:c6:ab:b8:53:1a:fe:95:
         f6:47:f3:90:11:9f:a5:f0:63:d7:58:10:a7:79:78:88:e0:2d:
         92:9d:e4:07:3a:f0:c6:fb:8f:2c:33:7e:ba:59:7f:69:fd:e3:
         73:64:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:18:51 2025 by rpki-client