Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e342e302f32342d3234203d3e20323730383936.roa
File:                     3133312e3130302e342e302f32342d3234203d3e20323730383936.roa (raw, json)
Hash identifier:          z/S9w7TxgzQYaK2vkGVw8/UJZ2gEsoz8DOZv5VQBSco=
Subject key identifier:   A2:3F:18:58:54:B7:E8:83:97:B3:56:81:92:7A:19:07:CB:98:30:39
Certificate issuer:       /CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
Certificate serial:       24E606327FE0D8704BF11EC623CA784B4D2E39E2
Authority key identifier: 16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e342e302f32342d3234203d3e20323730383936.roa
Signing time:             Wed 16 Apr 2025 12:18:33 +0000
ROA not before:           Wed 16 Apr 2025 12:13:33 +0000
ROA not after:            Wed 15 Apr 2026 12:18:33 +0000
asID:                     270896
IP address blocks:        131.100.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl
                          rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e6:06:32:7f:e0:d8:70:4b:f1:1e:c6:23:ca:78:4b:4d:2e:39:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
        Validity
            Not Before: Apr 16 12:13:33 2025 GMT
            Not After : Apr 15 12:18:33 2026 GMT
        Subject: CN=A23F185854B7E88397B35681927A1907CB983039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:53:46:4b:6c:86:ee:ee:79:ea:1e:81:e3:
                    b6:ca:61:20:46:6e:59:73:20:10:df:f5:3a:de:85:
                    1d:c8:f6:63:79:e0:a6:5e:19:f4:ba:9e:b3:b9:b1:
                    81:ce:d5:60:5e:05:aa:47:48:27:1f:e6:f0:f4:79:
                    ba:89:d3:c5:0a:70:f1:3c:03:30:01:93:da:d8:c2:
                    6e:8a:6b:ba:bf:36:f7:ca:db:c7:35:52:cb:de:86:
                    99:07:1e:4e:6c:f6:bc:a7:71:3c:22:51:75:e4:81:
                    e3:47:f3:23:07:d1:dc:e4:e0:87:c3:1e:71:fa:c7:
                    84:85:7a:7a:04:4e:70:e6:d5:68:52:a6:30:3d:0c:
                    a2:52:a2:e2:19:dd:c6:fd:33:d3:d9:98:7e:8f:61:
                    cb:e0:91:68:86:c0:34:8e:a0:58:fb:28:3d:6f:c9:
                    13:58:d9:f5:0d:73:3b:38:e9:81:68:d4:88:9b:3d:
                    dc:08:af:27:c0:c3:58:c2:24:af:37:cf:2a:c1:8f:
                    2c:86:ae:9a:1b:70:87:22:76:51:2f:51:0c:91:c4:
                    21:a6:52:9c:c3:65:ce:7e:10:0f:cb:ee:e6:64:a0:
                    8e:58:50:4f:be:ce:8f:16:5f:7c:63:67:8d:a6:22:
                    cd:b6:b6:f3:c0:3b:16:c0:04:ab:08:b4:89:4b:a8:
                    6e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3F:18:58:54:B7:E8:83:97:B3:56:81:92:7A:19:07:CB:98:30:39
            X509v3 Authority Key Identifier:
                keyid:16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e342e302f32342d3234203d3e20323730383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:54:ab:86:1c:63:e2:eb:66:7c:13:4a:2c:24:f0:19:67:9a:
         51:55:a9:cb:ae:79:07:14:7f:e3:23:00:a2:6a:cb:da:cc:be:
         e2:b6:f3:73:7b:58:62:6d:68:f8:fa:45:c7:25:e5:97:ca:21:
         a8:38:cf:aa:02:2a:34:43:6b:ea:4d:c2:1c:db:6c:95:39:b4:
         a3:09:20:5b:3b:51:20:be:74:9d:e7:b3:8e:44:e3:1f:8f:63:
         db:08:be:23:80:9a:a3:ec:50:2e:87:01:3f:6a:04:f0:53:37:
         d7:ff:04:4b:37:2b:a8:a7:ad:ec:24:a3:05:9b:57:0a:e8:7a:
         dd:38:d2:0e:9d:bc:20:b1:96:26:5b:66:3c:da:be:ab:b8:69:
         43:db:b2:f9:05:b9:91:7f:0a:b4:d3:85:8d:76:5f:6a:d3:9f:
         46:3d:da:be:87:34:34:20:2e:c5:0a:45:f8:8d:5e:82:42:36:
         95:c0:70:ae:48:db:8d:7e:d9:b7:e2:db:af:98:f9:1e:47:7d:
         e1:24:3f:2e:7a:d0:a2:f0:15:66:bb:d2:79:e5:7c:ab:79:c4:
         f3:53:57:c6:5e:42:f7:af:fd:07:c4:f1:ff:9d:b6:e2:5b:d4:
         c2:aa:0f:f8:1b:9d:76:b3:da:77:0d:60:cd:c3:ec:05:25:1f:
         a3:70:49:d4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJOYGMn/g2HBL8R7GI8p4S00uOeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0MkVEMTk2MkRENUM4NENFRjU2RkUwMzFGMzY4MkU5
MEE2QkZCNDAeFw0yNTA0MTYxMjEzMzNaFw0yNjA0MTUxMjE4MzNaMDMxMTAvBgNV
BAMTKEEyM0YxODU4NTRCN0U4ODM5N0IzNTY4MTkyN0ExOTA3Q0I5ODMwMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYUlNGS2yG7u556h6B47bKYSBG
bllzIBDf9TrehR3I9mN54KZeGfS6nrO5sYHO1WBeBapHSCcf5vD0ebqJ08UKcPE8
AzABk9rYwm6Ka7q/NvfK28c1UsvehpkHHk5s9ryncTwiUXXkgeNH8yMH0dzk4IfD
HnH6x4SFenoETnDm1WhSpjA9DKJSouIZ3cb9M9PZmH6PYcvgkWiGwDSOoFj7KD1v
yRNY2fUNczs46YFo1IibPdwIryfAw1jCJK83zyrBjyyGrpobcIcidlEvUQyRxCGm
UpzDZc5+EA/L7uZkoI5YUE++zo8WX3xjZ42mIs22tvPAOxbABKsItIlLqG5tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoj8YWFS36IOXs1aBknoZB8uYMDkwHwYDVR0j
BBgwFoAUFkLtGWLdXITO9W/gMfNoLpCmv7QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnJXOFdYY2JkRENXdHdnMmtuZG1pdXphWkdyNnUxSFRtdXV3ak5FaWtZ
M2QvMC8xNjQyRUQxOTYyREQ1Qzg0Q0VGNTZGRTAzMUYzNjgyRTkwQTZCRkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NDJFRDE5NjJERDVDODRD
RUY1NkZFMDMxRjM2ODJFOTBBNkJGQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJyVzhXWGNiZERDV3R3ZzJrbmRtaXV6YVpHcjZ1MUhUbXV1d2pORWlrWTNkLzAv
MzEzMzMxMmUzMTMwMzAyZTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzgzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAg2QEMA0GCSqGSIb3DQEBCwUAA4IBAQB3VKuGHGPi
62Z8E0osJPAZZ5pRVanLrnkHFH/jIwCiasvazL7itvNze1hibWj4+kXHJeWXyiGo
OM+qAio0Q2vqTcIc22yVObSjCSBbO1EgvnSd57OOROMfj2PbCL4jgJqj7FAuhwE/
agTwUzfX/wRLNyuop63sJKMFm1cK6HrdONIOnbwgsZYmW2Y82r6ruGlD27L5BbmR
fwq004WNdl9q059GPdq+hzQ0IC7FCkX4jV6CQjaVwHCuSNuNftm34tuvmPkeR33h
JD8uetCi8BVmu9J55XyrecTzU1fGXkL3r/0HxPH/nbbiW9TCqg/4G512s9p3DWDN
w+wFJR+jcEnU
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:27 2025 by rpki-client on console.sobornost.net