Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/3137302e38332e3132382e302f32322d3234203d3e203631383132.roa
File:                     3137302e38332e3132382e302f32322d3234203d3e203631383132.roa (raw, json)
Hash identifier:          +j3WMwV/2NxbsL9VEgWaiA9Vc0I6O5E82YW+EKzRPAU=
Subject key identifier:   33:B0:3C:04:8E:8B:55:F2:09:6C:B2:07:B3:15:99:61:34:BE:35:21
Certificate issuer:       /CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD
Certificate serial:       704CB6402534763AEC2B2E864B6D9EA69B6349D8
Authority key identifier: 30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/3137302e38332e3132382e302f32322d3234203d3e203631383132.roa
Signing time:             Thu 06 Mar 2025 12:55:35 +0000
ROA not before:           Thu 06 Mar 2025 12:50:35 +0000
ROA not after:            Thu 05 Mar 2026 12:55:35 +0000
asID:                     61812
IP address blocks:        170.83.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl
                          rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4c:b6:40:25:34:76:3a:ec:2b:2e:86:4b:6d:9e:a6:9b:63:49:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD
        Validity
            Not Before: Mar  6 12:50:35 2025 GMT
            Not After : Mar  5 12:55:35 2026 GMT
        Subject: CN=33B03C048E8B55F2096CB207B315996134BE3521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2c:4f:63:57:89:62:ed:43:00:84:84:fe:58:
                    b5:75:09:f4:c2:69:ed:eb:8d:4b:bd:15:e7:3f:64:
                    a1:8e:3a:33:c3:ba:4b:e7:ee:fd:42:5d:42:f7:0b:
                    35:91:ff:7f:b8:db:f9:36:e7:bc:0c:6c:3f:b2:71:
                    d3:41:6c:ca:8b:4f:eb:04:3c:6c:a1:4a:7d:df:27:
                    22:e8:7e:cc:51:e2:c1:57:0b:7e:f7:20:1f:80:0d:
                    e8:7c:e3:16:18:6d:44:d8:f8:d0:0c:4d:c2:68:5b:
                    dd:01:f1:aa:c3:77:be:c8:f9:92:f6:15:ed:01:8a:
                    6d:6a:e2:ca:c6:46:82:b6:ae:ee:47:84:93:d0:ba:
                    0b:c2:21:f2:f3:d1:0c:11:74:57:50:e5:a8:05:08:
                    85:ac:db:cf:9c:46:94:16:ad:fb:78:ce:24:eb:42:
                    c7:21:6e:89:c5:dd:d9:72:b9:ba:ac:1c:0f:b1:6e:
                    d2:d4:fb:cb:bd:0a:4b:a2:d4:21:fa:a5:6f:40:d0:
                    09:d0:7b:84:2d:8c:ae:c8:6a:ca:b3:dd:12:5d:b2:
                    b7:5a:53:9d:aa:a8:55:27:7f:08:85:4c:ed:66:82:
                    a8:a5:73:a5:7f:86:80:ab:15:9c:3b:22:55:68:be:
                    8d:55:e7:fc:28:06:bb:de:53:47:6a:c5:b1:4a:bb:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B0:3C:04:8E:8B:55:F2:09:6C:B2:07:B3:15:99:61:34:BE:35:21
            X509v3 Authority Key Identifier:
                keyid:30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/3137302e38332e3132382e302f32322d3234203d3e203631383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:97:ce:bf:ae:f0:1c:2a:84:7f:3d:93:22:8d:76:70:14:37:
         39:a9:a2:50:95:03:33:a4:38:d1:fc:bb:12:fb:d5:4f:73:03:
         a8:aa:e6:40:27:c5:6c:b2:87:ec:74:3d:b0:65:ab:05:72:23:
         51:90:50:09:32:37:e2:32:c0:e3:c0:6a:c7:5b:5e:9f:0c:7d:
         a0:a9:13:61:92:ca:27:12:7e:6b:89:94:e8:e9:98:d5:fa:c4:
         a1:38:e8:28:b1:17:c3:14:8d:3a:da:e4:7e:ce:69:6f:88:9b:
         19:23:db:cf:53:13:b2:ba:2f:b2:6d:ab:e0:90:cb:68:d5:f6:
         a8:4b:2a:18:65:bf:3f:0e:93:e2:4d:20:a3:0e:75:08:bd:7b:
         e9:c9:a6:c5:35:8c:7e:87:79:4d:f4:57:a6:6e:92:38:92:9c:
         41:31:f7:ae:37:2e:8a:8c:33:04:95:58:3b:38:0b:0a:00:6f:
         3d:1f:54:db:f2:2b:40:42:0d:7e:b2:27:a3:26:7d:d0:0a:5d:
         fe:97:58:7d:1c:a7:43:d1:ae:72:53:5c:cc:ad:7e:95:e9:9b:
         33:de:a8:e1:d0:af:ad:66:11:81:24:a5:43:2e:fb:ea:6a:dd:
         15:b4:34:01:ad:fb:66:a7:7e:fb:54:fc:40:1c:82:fc:67:c9:
         38:c1:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:36 2025 by rpki-client on console.sobornost.net