Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa
File:                     3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa (raw, json)
Hash identifier:          JVu8beyHKjU9ufH+KvindaEB+yOIp4s8pyXSuRmYUGk=
Subject key identifier:   B4:2E:B4:EC:6B:DC:BA:4F:16:10:6A:FE:57:46:1A:28:58:44:4C:C8
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       7F1A31D1DD66A1633B5F4CDC5393B317D25452E5
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa
Signing time:             Wed 05 Mar 2025 20:33:11 +0000
ROA not before:           Wed 05 Mar 2025 20:28:11 +0000
ROA not after:            Wed 04 Mar 2026 20:33:11 +0000
asID:                     271680
IP address blocks:        187.111.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1a:31:d1:dd:66:a1:63:3b:5f:4c:dc:53:93:b3:17:d2:54:52:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Mar  5 20:28:11 2025 GMT
            Not After : Mar  4 20:33:11 2026 GMT
        Subject: CN=B42EB4EC6BDCBA4F16106AFE57461A2858444CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:86:5f:ef:ea:e4:1e:e8:00:f4:9b:e7:f8:7c:
                    fb:f4:0c:3a:32:b3:97:60:4e:4f:9c:32:5b:c4:77:
                    ec:81:54:45:ac:8e:2c:a6:61:bf:e6:5f:e5:67:9d:
                    10:97:98:00:28:0c:4b:d4:25:ab:78:87:f4:4d:fd:
                    68:a6:d7:4d:73:0f:17:15:54:92:0f:6f:4d:ca:ed:
                    9c:76:36:48:b0:dd:d1:69:00:b6:57:e2:79:9c:80:
                    88:8a:09:a1:f9:81:04:65:4f:2c:3a:ba:85:ec:71:
                    d4:2d:ef:2b:58:2a:a7:ce:86:7a:52:03:ef:92:f3:
                    ab:41:20:0c:ea:1d:a5:0f:f0:54:06:11:6e:33:a3:
                    ac:47:d3:9f:c0:77:de:26:cd:41:71:d9:02:3a:74:
                    e0:bc:9e:7c:91:a0:91:9f:30:f8:81:a8:63:c5:9f:
                    8c:b1:84:4c:07:85:c8:b2:63:ca:51:cf:0a:da:f2:
                    55:44:7a:6e:a3:17:41:3e:28:d0:bd:c6:19:61:d0:
                    f4:96:62:ac:71:08:8b:e5:95:12:14:52:e5:53:18:
                    85:61:4b:9e:ea:bc:df:67:7c:63:f3:58:df:50:82:
                    da:51:33:16:bb:f1:15:7b:e0:4e:d5:0a:a5:cb:a8:
                    8e:57:67:af:6b:bc:bb:51:e2:a6:97:b9:1e:8b:3c:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2E:B4:EC:6B:DC:BA:4F:16:10:6A:FE:57:46:1A:28:58:44:4C:C8
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:1a:ec:d2:4e:a6:ef:d3:b3:f8:ab:d7:fc:87:84:6b:a9:87:
         31:56:e1:6e:d5:3d:f7:e7:15:b9:69:40:92:80:16:c4:ac:72:
         9a:26:88:0f:f7:80:b8:f4:70:34:17:b8:5c:fb:0f:36:51:7b:
         fb:92:6e:dd:07:57:da:df:b9:53:84:5e:e0:3a:d5:0a:3b:0f:
         d2:64:a1:09:64:10:9d:32:90:f3:00:23:8a:e8:96:92:85:87:
         f8:17:91:ba:56:7a:a5:07:03:4d:d5:e1:6f:33:04:5c:ed:82:
         30:70:b2:31:bd:0f:59:f4:28:ec:4c:88:94:e4:42:cf:9e:e4:
         74:f3:c7:69:15:3b:2f:e8:b5:7d:95:37:c5:48:20:9f:0a:6a:
         23:64:2e:ff:a5:34:30:66:9e:59:ec:24:8c:6c:da:cd:ac:9e:
         25:1e:60:20:57:90:d7:cf:26:a6:27:75:3e:a2:01:38:80:26:
         1c:b0:4d:27:53:8e:21:fe:09:b8:28:f6:5d:25:b2:67:e5:8c:
         f2:90:b2:64:90:d5:c4:40:ae:e1:a3:03:52:e0:cb:01:9b:eb:
         c2:98:ed:d5:27:8c:62:7f:11:a8:3d:6d:fe:65:4f:a1:86:13:
         69:74:f3:09:f9:e3:4c:e0:7c:41:64:66:ec:5b:ad:bd:a8:5d:
         c1:6d:e7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:29 2025 by rpki-client on console.sobornost.net