Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa
File:                     3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa (raw, json)
Hash identifier:          hBgzZnxmEBmYRTuvlGTuu4nN28d1lzU1d0fXQNp/cp8=
Subject key identifier:   27:68:B7:D1:A2:EA:DA:BF:33:1D:54:75:5C:44:C1:80:56:B5:4B:B9
Certificate issuer:       /CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353
Certificate serial:       03836CD2F4EFCA52BD1B0048FF6440B1AFE0A0CC
Authority key identifier: 6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa
Signing time:             Fri 21 Mar 2025 11:07:10 +0000
ROA not before:           Fri 21 Mar 2025 11:02:10 +0000
ROA not after:            Fri 20 Mar 2026 11:07:10 +0000
asID:                     265385
IP address blocks:        170.254.248.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl
                          rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:83:6c:d2:f4:ef:ca:52:bd:1b:00:48:ff:64:40:b1:af:e0:a0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353
        Validity
            Not Before: Mar 21 11:02:10 2025 GMT
            Not After : Mar 20 11:07:10 2026 GMT
        Subject: CN=2768B7D1A2EADABF331D54755C44C18056B54BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8a:2c:b5:03:01:46:0b:98:ab:f3:2d:d1:2c:
                    41:f2:08:81:80:03:90:bf:40:ff:82:b0:c9:5c:8e:
                    b5:07:48:19:32:f8:ae:f6:e6:73:d5:a3:ef:8b:08:
                    bf:e8:a7:9f:93:6e:7c:58:9f:30:56:5f:be:f9:af:
                    18:1a:ed:3f:e2:8f:0d:36:11:36:54:53:ec:cc:9f:
                    dc:96:7d:b8:46:ca:2b:7e:b4:9f:47:5e:fe:20:0d:
                    64:cf:9e:bc:2e:9f:a7:59:f6:0d:0e:fe:49:e3:4f:
                    47:ea:31:d7:47:c1:72:ef:b8:38:00:73:3f:a4:53:
                    e7:2b:c9:77:f2:0f:40:dd:59:52:1a:7f:d0:ae:e5:
                    58:20:5e:9f:7f:e5:c2:e3:97:a9:e7:56:de:ea:4d:
                    6f:30:de:66:af:eb:36:ad:91:45:4f:8a:a7:03:e3:
                    08:7a:d9:2d:0e:93:d2:6b:53:28:b5:4b:94:1d:73:
                    6c:d1:25:9d:7d:8f:90:c5:79:7b:61:a6:e4:c6:55:
                    3c:c2:07:57:68:7a:18:18:62:f0:f4:70:ea:f0:e3:
                    16:10:b5:67:07:03:67:8c:7c:f7:d0:c4:58:0d:ba:
                    35:f8:9b:35:57:a2:52:8c:a4:0f:fa:9d:1a:58:8b:
                    2b:c8:3e:79:e5:ef:5a:fb:48:b7:31:36:d9:fe:51:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:68:B7:D1:A2:EA:DA:BF:33:1D:54:75:5C:44:C1:80:56:B5:4B:B9
            X509v3 Authority Key Identifier:
                keyid:6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:c2:33:bb:32:b5:3c:60:40:1b:5b:7f:59:6b:1f:c4:1f:1f:
         37:cf:8b:20:bf:35:5f:bd:bd:90:8a:19:6c:8d:bf:2c:51:95:
         ea:b8:e5:6e:84:0f:9e:29:2f:ab:d2:29:19:22:81:50:b7:d5:
         07:8e:51:9a:20:a3:2d:7a:f7:c4:07:65:a6:ae:15:06:be:27:
         51:82:3c:fb:e1:b7:a6:59:2e:20:22:87:26:0a:78:df:a7:da:
         50:41:56:8c:57:c3:66:70:e9:43:bb:dd:c7:eb:3f:a5:28:eb:
         4c:da:13:c0:c5:97:6c:4f:82:74:22:d4:fb:4d:f5:20:8e:96:
         8a:1b:82:f7:7c:9e:93:dc:5d:27:56:38:90:a0:bc:c2:17:74:
         b9:1d:c3:f3:c1:93:4c:7f:1b:3f:c2:4a:de:6a:5e:b0:5b:2d:
         91:a3:1f:dc:57:52:2a:02:5a:f7:02:b4:b8:23:0f:f3:a6:ad:
         61:5a:d4:c1:2d:fd:2f:66:13:6c:84:94:51:de:18:46:af:ce:
         d5:0f:d3:37:39:4e:8d:23:bf:8b:4b:f4:60:fd:dc:35:ca:ce:
         df:bf:f8:70:b0:1b:04:ec:3f:1d:a0:30:7d:bc:2d:af:24:0a:
         37:3d:50:f6:6f:2a:c9:f2:0d:ce:ad:63:f9:d5:61:60:b7:94:
         a6:d8:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:01 2025 by rpki-client on console.sobornost.net