Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa
File:                     3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa (raw, json)
Hash identifier:          ShAk2PRu0Kb2SbPYZuCN7aU2BdYoejKW5JwXhyYwMXY=
Subject key identifier:   EE:FA:B4:80:92:B4:79:D4:1A:A9:9D:E9:30:D4:AA:4D:CE:B4:57:59
Certificate issuer:       /CN=65E1DB5984802637A5800225A87C14E97A15601B
Certificate serial:       4AA4882CDCBC96C7AD37AC2490085D80B2FA8965
Authority key identifier: 65:E1:DB:59:84:80:26:37:A5:80:02:25:A8:7C:14:E9:7A:15:60:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa
Signing time:             Thu 06 Mar 2025 18:43:40 +0000
ROA not before:           Thu 06 Mar 2025 18:38:40 +0000
ROA not after:            Thu 05 Mar 2026 18:43:40 +0000
asID:                     265397
IP address blocks:        168.194.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.crl
                          rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a4:88:2c:dc:bc:96:c7:ad:37:ac:24:90:08:5d:80:b2:fa:89:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65E1DB5984802637A5800225A87C14E97A15601B
        Validity
            Not Before: Mar  6 18:38:40 2025 GMT
            Not After : Mar  5 18:43:40 2026 GMT
        Subject: CN=EEFAB48092B479D41AA99DE930D4AA4DCEB45759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:de:f8:e4:60:9b:16:3f:f3:34:eb:32:9a:0f:
                    91:c4:c5:e4:0a:56:cf:4a:9d:c8:a6:5b:bd:ff:8a:
                    8d:3b:a4:6a:38:76:dc:85:b7:7f:e8:a2:2f:8b:fe:
                    4b:24:36:68:b2:34:15:43:a9:cf:ef:b3:93:da:de:
                    51:57:0a:09:ce:4c:90:d4:82:8d:19:cc:fe:48:1d:
                    bb:4d:ce:b0:a9:db:3d:02:84:50:df:2e:bc:50:49:
                    e6:95:c5:ac:f6:c3:b4:c6:3c:18:0c:92:3d:4f:b4:
                    ea:25:79:e5:2c:8b:b5:a5:03:25:15:aa:c1:ca:32:
                    7a:99:1e:97:e8:99:ae:84:35:60:70:3a:73:9e:b4:
                    73:2f:4e:ad:6e:1d:c5:7a:df:2e:56:c8:67:fe:66:
                    44:cf:a8:69:20:0d:d9:ca:21:ad:52:81:ba:91:76:
                    d8:c7:8f:fe:ad:50:34:3f:e6:69:50:c2:23:04:1b:
                    86:43:7e:99:6d:39:49:f5:49:29:10:41:df:13:aa:
                    21:41:c1:2f:0e:2f:8b:c1:75:30:97:5a:ff:d2:20:
                    1a:cc:23:78:a8:f0:42:5b:de:95:dc:46:d5:6a:3c:
                    67:3f:06:80:2d:4a:2a:df:c1:09:be:e4:26:a8:e8:
                    a2:4d:86:d0:43:35:a8:b0:4e:c3:df:ed:ae:ee:00:
                    4c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FA:B4:80:92:B4:79:D4:1A:A9:9D:E9:30:D4:AA:4D:CE:B4:57:59
            X509v3 Authority Key Identifier:
                keyid:65:E1:DB:59:84:80:26:37:A5:80:02:25:A8:7C:14:E9:7A:15:60:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:29:4f:f6:ce:3a:3d:cf:fd:17:4b:85:48:6d:e3:a2:91:dd:
         e7:55:87:ce:d6:2b:71:6b:21:b9:69:b8:1e:e1:46:00:e3:da:
         af:7a:de:c3:82:26:f9:f7:89:b8:c0:68:cb:61:b6:33:57:35:
         4c:a8:74:ea:ba:77:d4:ba:c3:17:26:8b:6f:aa:8c:c4:cf:e5:
         e0:a8:22:89:6e:a5:bc:9d:e2:af:45:d7:de:4f:c4:62:de:94:
         7c:af:19:98:40:a3:c1:81:7d:69:27:47:3e:70:d9:de:a2:27:
         18:38:b1:cc:2e:67:07:06:09:79:2a:61:ae:eb:4a:aa:b6:54:
         d0:e5:4c:e5:ce:31:2f:fe:5a:56:93:c9:dc:64:96:06:12:fb:
         60:f8:3d:75:d3:88:04:d0:4d:d8:9b:0f:61:b4:fc:9e:86:64:
         da:51:a8:bc:a0:18:69:8c:ad:06:de:fa:39:70:4c:71:91:de:
         f2:08:7a:69:42:fb:98:9f:5c:ca:64:0c:76:aa:cb:69:e5:8c:
         ac:76:9a:04:29:df:01:24:e8:6d:0f:73:b9:94:48:7c:13:be:
         60:77:33:d7:b7:cf:ac:39:d7:2c:ba:e9:8f:2c:e3:d6:c7:e3:
         7b:ff:fd:88:05:54:34:73:06:d4:0b:52:62:d8:93:08:05:84:
         71:cd:ba:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:36 2025 by rpki-client on console.sobornost.net