Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3231312e302f32342d3234203d3e203631363134.roa
File:                     3136382e3232372e3231312e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          7grZ6Qivn02b695NtTWtvk1RKGj3vUU2V83bNynVbQw=
Subject key identifier:   83:8F:A6:80:5A:EE:54:73:D1:F9:BB:9C:AE:E2:DF:12:53:33:30:E0
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       698C4997692B25E40B034B00CFCA885293014239
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3231312e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     61614
IP address blocks:        168.227.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8c:49:97:69:2b:25:e4:0b:03:4b:00:cf:ca:88:52:93:01:42:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:ab:ac:73:a8:79:41:d3:1f:aa:32:c4:ac:
                    38:80:3d:f7:9e:1d:04:18:1c:77:da:2d:cd:0b:5c:
                    c8:cd:eb:6a:18:67:ae:04:b1:c7:02:5b:fe:da:ab:
                    65:94:79:4b:ca:ae:49:43:7b:0e:08:b5:c9:9c:e9:
                    20:f2:ff:fa:cd:a0:1f:71:d4:f8:12:54:cf:5c:59:
                    ec:fe:0c:54:3b:88:24:a0:8d:a9:9a:35:88:61:6c:
                    1a:40:90:ad:60:75:86:67:75:4a:a8:3d:83:49:5f:
                    2f:52:3c:a7:c8:bb:7f:94:5f:af:3f:23:b1:b2:55:
                    16:ed:95:9c:69:26:91:e5:3e:82:db:3e:2a:cd:e4:
                    90:bf:6d:d0:30:24:4b:62:78:16:fd:37:a5:ed:a8:
                    b2:7f:c2:b4:68:3f:f4:d1:d9:5b:e6:79:ec:4b:77:
                    e7:ff:fa:24:7b:c0:04:f8:85:2c:c7:75:9a:d2:23:
                    00:b1:73:1d:5b:01:47:c9:c4:8f:57:0e:83:21:8b:
                    75:2e:36:e6:d6:b4:fc:7e:f9:d6:13:a8:f7:1f:9c:
                    a1:c1:09:fa:b4:7c:55:42:8a:1d:d9:fa:b6:4f:7c:
                    18:73:ff:ab:60:e9:8c:19:8e:f7:1d:d8:27:ce:14:
                    1e:fe:2c:4f:de:b0:b5:ad:94:4b:f1:0d:1e:0d:bd:
                    30:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8F:A6:80:5A:EE:54:73:D1:F9:BB:9C:AE:E2:DF:12:53:33:30:E0
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3231312e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:53:4c:6d:f2:15:16:02:81:21:29:6c:28:39:bc:75:e0:
         56:2f:a5:1a:d5:f7:59:6c:0b:02:03:24:b3:ca:dc:21:22:7b:
         69:44:c8:0d:88:23:33:09:ca:90:64:61:1d:ac:dd:12:8d:5b:
         e1:0a:48:90:be:6c:dd:e8:30:8b:ee:58:43:22:09:ac:3f:60:
         ed:66:27:84:70:d0:af:ff:f5:6e:79:9d:6c:f8:0b:a0:e3:e2:
         ce:1d:bc:d9:c7:48:e4:ca:16:4a:b6:d2:42:47:79:31:6f:dd:
         13:77:6c:3b:d1:ce:36:87:f3:e4:8b:76:fa:f5:54:36:76:13:
         e1:35:9c:25:72:ad:16:35:92:df:db:87:10:21:71:6b:e6:e8:
         52:6a:98:34:64:5c:0b:ca:53:29:d2:57:e2:cf:aa:3e:c2:8c:
         40:8c:62:74:36:7f:9e:33:e1:62:a5:9f:70:0c:f6:41:d2:85:
         60:ac:12:6c:e3:35:21:64:ee:bf:85:41:16:f4:ff:90:2d:a7:
         0a:21:ef:43:bc:a1:9b:cb:e1:13:e7:4e:1b:0c:ab:a2:11:61:
         a0:8f:61:c9:b9:a8:a3:34:7d:d7:8b:f6:d9:29:56:63:a2:93:
         39:2f:99:f7:5d:c6:c4:59:5a:b4:13:8c:98:11:ef:80:b9:e7:
         ba:54:55:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:34 2025 by rpki-client on console.sobornost.net