Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa
File:                     3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier:          tEXNEcR0bExFaJvTMGEgjkeXmCinKFhAPvS3B/zBS50=
Subject key identifier:   41:72:90:A6:4B:C3:D4:D1:4D:71:CD:93:66:2B:6D:AE:25:DC:A9:1E
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       46F7A3481BC5A53E7CC804427C568A09803B2344
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa
Signing time:             Sat 19 Apr 2025 20:40:39 +0000
ROA not before:           Sat 19 Apr 2025 20:35:39 +0000
ROA not after:            Sat 18 Apr 2026 20:40:39 +0000
asID:                     266178
IP address blocks:        192.144.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f7:a3:48:1b:c5:a5:3e:7c:c8:04:42:7c:56:8a:09:80:3b:23:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Apr 19 20:35:39 2025 GMT
            Not After : Apr 18 20:40:39 2026 GMT
        Subject: CN=417290A64BC3D4D14D71CD93662B6DAE25DCA91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:2f:d8:23:aa:60:a7:58:b7:9e:0d:db:79:
                    75:f4:5d:c1:c4:5d:37:cc:e3:8a:0d:e7:82:2f:2e:
                    6a:c8:93:a5:b7:ba:c0:f1:0e:e3:29:a8:52:82:a8:
                    77:b0:9c:6a:f6:d3:f6:02:92:5f:08:21:61:9c:da:
                    b4:2c:db:99:f2:31:f2:7c:ad:85:34:7a:83:50:91:
                    2d:30:1e:da:13:44:55:fd:6d:1d:81:2e:ea:97:cf:
                    13:6f:f7:95:91:36:9f:99:86:1f:7b:27:f1:5e:0c:
                    aa:81:aa:b5:78:88:0c:ce:3b:c0:95:20:af:f6:7d:
                    b0:5e:23:d1:e8:27:54:c2:d9:f2:ca:9b:4b:86:a1:
                    44:ae:c3:eb:7f:68:6f:51:1f:33:0b:cc:c0:53:e8:
                    6e:5c:69:4b:83:6b:bd:47:00:c6:1b:aa:7a:e6:b5:
                    f9:59:e2:2f:16:7f:69:ec:be:4b:9e:df:f3:e3:70:
                    ed:e8:41:fa:18:7b:7f:df:8a:99:ff:ce:db:d3:37:
                    01:14:8e:b2:ae:a6:dc:0c:27:f7:8c:66:23:b6:b7:
                    82:ed:e4:be:a4:13:c3:d8:32:18:0e:d9:8e:f0:bd:
                    d5:17:ce:a3:ac:de:c9:a2:ca:ad:6e:75:95:59:ae:
                    b4:38:62:0e:4d:e8:04:21:22:7c:19:e2:28:c8:f8:
                    c9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:72:90:A6:4B:C3:D4:D1:4D:71:CD:93:66:2B:6D:AE:25:DC:A9:1E
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:3d:e9:c4:ce:75:87:d3:c3:91:09:1d:de:ca:68:c5:45:db:
         c7:41:f9:4f:af:12:57:dd:a1:94:73:18:db:6b:f8:d5:3f:19:
         35:1d:f3:fc:04:c3:e2:33:19:90:26:64:93:bd:d6:22:a3:8c:
         79:f5:2f:02:43:52:32:fe:d0:8b:10:0a:0a:e4:69:13:e9:c6:
         74:42:29:42:b8:8c:5b:57:21:cd:af:e0:4d:8c:99:66:d5:6a:
         78:4c:94:bc:d0:57:79:26:ef:38:9d:02:d8:dc:54:5a:5e:a1:
         e3:7a:e4:c9:0c:50:21:e2:fc:70:f0:98:1f:a7:9d:af:f4:d4:
         75:7f:fc:36:4c:9e:5f:6b:66:4b:36:e2:18:bc:ac:7e:d5:dd:
         0f:40:06:ee:b9:25:fe:b9:1b:55:90:84:0c:a4:2a:bd:fd:26:
         00:45:99:13:e3:b3:1d:8a:b1:19:aa:65:dd:d7:50:f3:2b:cc:
         be:f0:20:cb:2e:36:80:37:be:7c:b8:a4:31:92:39:e1:37:76:
         8d:07:aa:73:55:51:06:e9:9a:1d:ab:f9:3d:67:57:53:43:3a:
         0d:b4:8c:03:68:ad:dc:5e:2a:5f:9a:74:51:07:84:44:8f:6f:
         7f:ec:31:a6:f8:17:8a:57:fc:99:75:af:5f:a2:41:93:7a:22:
         9b:38:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:26 2025 by rpki-client on console.sobornost.net