Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/34352e3233302e3132322e302f32342d3234203d3e20323637313537.roa
File:                     34352e3233302e3132322e302f32342d3234203d3e20323637313537.roa (raw, json)
Hash identifier:          uH8NZxg0+u+6BOmlTJWX2xy7pr6N78k/vo0q0+GCtww=
Subject key identifier:   0D:2B:44:EE:B2:0A:0C:EB:9D:D5:3C:69:4D:22:D9:EB:D8:87:77:78
Certificate issuer:       /CN=2136E155D06409C9B152A82F24B3CCCDF3692097
Certificate serial:       308B815ECD5FD5C4BAB4759D21270E0D5A8E71B8
Authority key identifier: 21:36:E1:55:D0:64:09:C9:B1:52:A8:2F:24:B3:CC:CD:F3:69:20:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2136E155D06409C9B152A82F24B3CCCDF3692097.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/34352e3233302e3132322e302f32342d3234203d3e20323637313537.roa
Signing time:             Fri 11 Apr 2025 14:59:05 +0000
ROA not before:           Fri 11 Apr 2025 14:54:05 +0000
ROA not after:            Fri 10 Apr 2026 14:59:05 +0000
asID:                     267157
IP address blocks:        45.230.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.crl
                          rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2136E155D06409C9B152A82F24B3CCCDF3692097.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 20:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8b:81:5e:cd:5f:d5:c4:ba:b4:75:9d:21:27:0e:0d:5a:8e:71:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2136E155D06409C9B152A82F24B3CCCDF3692097
        Validity
            Not Before: Apr 11 14:54:05 2025 GMT
            Not After : Apr 10 14:59:05 2026 GMT
        Subject: CN=0D2B44EEB20A0CEB9DD53C694D22D9EBD8877778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:4c:8e:13:bf:f8:ba:f8:62:c2:ca:a3:fc:41:
                    9e:a8:bd:40:38:e8:ac:83:91:6a:ac:9e:ac:de:a6:
                    dc:6b:63:65:23:38:50:4a:c9:8d:bd:2f:57:f8:54:
                    d8:bb:c7:49:41:a7:cc:1a:8e:bc:3a:d5:4a:14:00:
                    6b:23:38:fd:4d:ef:be:ed:38:86:02:c4:7a:ef:b1:
                    9d:00:55:ea:b6:71:2a:2f:12:1a:2d:86:b3:b7:66:
                    d6:60:e6:04:16:16:27:c7:5c:db:b8:cd:fd:b6:12:
                    05:55:2b:3d:95:8f:de:e1:e7:2b:e0:9c:ea:9d:71:
                    fe:e5:3e:7d:1b:45:4c:c0:b2:69:8c:25:1d:a9:2b:
                    93:c5:5d:55:a8:53:12:b5:cb:69:c4:e1:7c:14:e3:
                    2b:a7:e2:c7:91:ef:f5:1f:22:1d:4d:75:45:7c:a9:
                    ce:5c:79:0a:69:65:08:fa:00:81:7f:c4:2f:1d:ed:
                    03:e2:c7:b2:c5:54:48:af:9a:9b:f8:e0:69:f5:e8:
                    c0:7b:a3:d1:5f:b7:fb:2f:53:61:da:cf:88:0c:5f:
                    d4:01:45:cb:e8:04:b0:50:5b:7f:32:f4:86:84:c5:
                    a1:a1:65:53:8e:9d:b6:6b:05:bd:01:6b:01:2a:f4:
                    06:f3:93:f3:82:df:f9:fd:ce:69:69:91:5a:9e:17:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2B:44:EE:B2:0A:0C:EB:9D:D5:3C:69:4D:22:D9:EB:D8:87:77:78
            X509v3 Authority Key Identifier:
                keyid:21:36:E1:55:D0:64:09:C9:B1:52:A8:2F:24:B3:CC:CD:F3:69:20:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2136E155D06409C9B152A82F24B3CCCDF3692097.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/34352e3233302e3132322e302f32342d3234203d3e20323637313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:af:85:34:e1:90:f3:26:e6:13:4e:c2:e0:cb:10:30:2c:62:
         ba:07:e4:b1:bf:d7:06:d9:4f:b8:7c:32:f0:93:d8:45:63:56:
         99:3b:6f:f9:bf:59:3f:ac:a0:7f:85:b3:67:f1:2c:67:05:9f:
         e5:52:33:7b:ba:57:f9:dd:0b:10:41:a3:34:d5:e3:60:87:e7:
         01:a9:c3:5f:a4:82:15:f1:0f:1d:4b:05:c6:60:fb:c2:ac:cd:
         50:40:30:32:21:3e:3e:ee:0d:3a:aa:39:1c:00:e8:c2:b8:65:
         02:4e:ec:32:29:25:60:1e:1b:a4:e4:7e:93:93:be:2a:3f:f1:
         b6:1e:c3:6f:aa:f5:4e:e0:cb:7e:b3:e2:e6:0c:a8:59:c8:3d:
         b6:12:1b:54:42:f4:ea:82:80:88:18:1b:5b:fe:72:e6:dd:c6:
         74:a1:6f:0b:32:6c:22:a5:bc:26:74:cd:7c:11:90:65:b5:1b:
         37:cf:30:33:83:95:87:08:a9:bd:31:67:26:ad:25:c9:61:3d:
         13:70:a9:a3:7b:d8:5a:35:22:57:5d:5c:c3:31:20:5c:1a:cf:
         ce:fb:9e:7a:db:1e:6e:a7:e3:f6:7a:97:19:5b:72:2c:23:45:
         98:21:f0:f1:59:28:1b:e1:98:35:0c:f3:ce:6d:2a:86:60:d0:
         6e:8a:4b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:04:27 2025 by rpki-client