Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa
File:                     3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa (raw, json)
Hash identifier:          5aLFe5PMe4Rz5yuLsGAX0oZ5wxKailorPEs9fIhu3E0=
Subject key identifier:   CD:74:3F:DE:48:6E:D1:2C:F3:54:65:FB:89:5C:6E:B3:96:9F:F3:1E
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       01C7DBA17751920ADF21517271E3D37ED2FD7033
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     265477
IP address blocks:        168.197.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c7:db:a1:77:51:92:0a:df:21:51:72:71:e3:d3:7e:d2:fd:70:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject: CN=CD743FDE486ED12CF35465FB895C6EB3969FF31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c1:89:3b:7b:00:ee:8f:06:3b:5d:d9:31:63:
                    27:69:53:26:99:6c:c2:2f:57:16:91:7d:e9:07:c8:
                    d3:3d:ad:b4:4f:e9:42:75:1a:4e:15:c3:85:5e:5d:
                    91:8a:6a:71:63:1d:da:d2:f1:0f:da:6a:3a:11:1b:
                    b1:06:8b:0f:56:41:62:1a:2f:64:e8:5c:f7:56:9b:
                    f9:c4:f6:58:32:27:89:63:fe:ef:28:2b:36:98:cc:
                    77:18:31:8e:e2:c4:a3:71:2d:1d:8d:69:ce:c7:11:
                    60:f3:f2:9b:ff:18:61:66:dc:b0:bb:a0:4b:24:98:
                    90:3d:07:98:b6:ee:ac:af:95:21:cb:e1:e4:b8:97:
                    37:97:32:5a:81:42:1d:5b:30:f9:eb:35:1d:26:13:
                    4b:2e:9b:25:61:3b:03:d1:1b:92:cf:3b:f0:3a:86:
                    b3:96:1d:76:53:7d:ec:d9:f8:76:0b:67:6b:30:82:
                    76:4f:14:06:9f:4f:72:a8:cc:e7:19:c8:84:f4:fe:
                    69:2f:10:e0:95:53:5a:7a:db:53:5c:5c:94:a0:80:
                    1c:9b:47:d0:74:40:ec:37:6f:89:31:a0:24:5c:30:
                    ac:d7:b6:25:ac:50:33:a0:98:f1:0e:36:80:7f:dd:
                    b7:40:cb:b7:1f:7d:ab:c1:46:70:36:8d:62:18:e4:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:74:3F:DE:48:6E:D1:2C:F3:54:65:FB:89:5C:6E:B3:96:9F:F3:1E
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:8d:0a:57:44:40:f2:a6:86:74:e9:63:ab:f8:cd:e3:82:e6:
         54:ff:50:b3:4f:d5:b7:7c:a0:9c:a3:8b:0f:cc:e7:c3:4c:5f:
         27:83:58:07:c8:1c:94:e5:c1:a1:0a:65:3f:c1:c8:22:c9:65:
         35:83:b7:f8:a1:6f:6c:50:84:01:6d:ec:c7:67:4f:f7:58:0c:
         16:47:a6:14:75:f1:e7:c9:7b:f6:8f:0f:32:75:25:b9:c8:43:
         01:c2:34:64:9d:7f:01:ec:10:05:b5:b4:c3:29:74:86:ed:e1:
         06:81:a4:7d:b1:2e:0e:9a:99:35:d5:9a:16:15:b7:83:97:37:
         cf:40:b4:d7:f5:7e:51:00:6c:a2:36:fa:58:de:d9:be:32:cd:
         45:e8:49:77:a1:2a:b3:39:b7:3e:02:c3:05:15:f5:3c:c2:58:
         d7:66:94:c5:ff:29:db:72:c0:fb:67:2a:ff:cd:6c:17:24:d5:
         b5:16:86:f2:fd:b1:87:2f:01:60:a7:d2:7c:0d:0f:45:87:e4:
         d3:fe:09:7f:b1:44:c1:f2:d1:a1:7f:39:1c:e0:3a:65:ee:94:
         70:c4:7e:53:09:be:98:a8:21:b7:f5:d5:a5:18:c5:3b:22:91:
         dd:de:da:25:39:02:28:32:90:a0:e4:a0:cb:9f:39:fa:48:f5:
         24:48:b9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:43 2025 by rpki-client on console.sobornost.net