Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa
File:                     3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa (raw, json)
Hash identifier:          g19LYQXp6mzNXJgpiLJtMjT9m4+EvOZxxZn8tIle/bY=
Subject key identifier:   8F:E1:9A:91:15:FC:60:17:00:9C:0F:18:A3:CD:F9:A5:4E:E9:65:A2
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       6D833A83DD5031F436617AF903113E5BF5B2CFB5
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa
Signing time:             Sat 19 Apr 2025 20:40:39 +0000
ROA not before:           Sat 19 Apr 2025 20:35:39 +0000
ROA not after:            Sat 18 Apr 2026 20:40:39 +0000
asID:                     266178
IP address blocks:        192.144.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:83:3a:83:dd:50:31:f4:36:61:7a:f9:03:11:3e:5b:f5:b2:cf:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Apr 19 20:35:39 2025 GMT
            Not After : Apr 18 20:40:39 2026 GMT
        Subject: CN=8FE19A9115FC6017009C0F18A3CDF9A54EE965A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:82:c1:d1:b0:5c:6b:75:52:7c:ad:cb:ed:
                    d4:f1:15:f5:e5:5e:5c:d8:78:8f:60:73:56:b9:72:
                    bc:59:da:b2:10:df:dc:65:60:b5:b2:4f:c4:cf:c2:
                    06:76:6f:55:b1:11:32:1a:ea:ac:d7:66:e0:cd:39:
                    0a:e5:30:28:0d:59:04:6c:32:ed:44:0e:20:0e:87:
                    8e:66:27:4c:1f:84:0f:01:68:4b:5c:83:49:37:d8:
                    c0:66:19:df:86:20:db:3d:9a:fb:cb:cc:e9:8a:ee:
                    c1:80:0e:51:85:4f:e4:d3:00:60:2b:05:d2:11:92:
                    b2:d2:d6:f3:24:c5:45:f1:28:13:ba:66:27:35:d5:
                    4d:7a:b9:c8:80:3c:e7:99:74:a4:ae:85:a6:cd:ed:
                    52:82:a6:49:91:c6:2b:67:a8:6e:3b:df:11:40:5a:
                    2b:fa:02:45:f0:d6:81:db:ca:3e:30:56:fb:41:b2:
                    dc:79:33:88:24:10:36:09:c1:09:b1:f4:7f:14:8e:
                    67:e3:24:94:25:9b:88:9f:73:ef:79:07:71:4e:1e:
                    28:d7:94:81:82:5e:19:8d:c4:3c:e3:c3:a3:bb:15:
                    82:08:23:e0:e5:eb:26:f1:33:ac:83:2c:a8:26:a6:
                    01:e4:05:34:13:70:9f:f7:21:95:bf:04:d7:6d:a8:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E1:9A:91:15:FC:60:17:00:9C:0F:18:A3:CD:F9:A5:4E:E9:65:A2
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:6b:cf:01:60:fb:8c:eb:86:cd:cb:35:e9:cc:0b:ef:77:69:
         1f:32:6e:37:31:e0:05:9d:eb:74:19:99:03:41:08:d7:7a:cc:
         ea:f3:9b:2a:a9:85:1f:7c:7c:d8:a5:1d:8b:d8:2e:03:29:28:
         7f:49:5f:66:f8:5f:0d:a5:98:cb:24:c5:0a:aa:46:7f:b2:e5:
         78:23:16:4b:5f:f2:c9:de:9f:c6:c8:eb:91:fd:c3:47:25:4d:
         b8:15:37:c7:cc:5d:0a:ba:3c:56:da:2c:11:f2:80:0a:ef:c3:
         16:23:c2:28:1e:d7:05:ba:ed:e5:5c:92:cf:eb:38:15:3e:45:
         de:37:7e:02:2a:12:1e:95:38:a8:9d:4a:cd:12:ab:4d:9e:6e:
         6d:e5:60:7f:2d:f1:f5:e2:4a:74:a3:40:91:1d:f5:61:c3:ae:
         5e:8c:50:ba:5f:a3:41:af:09:35:40:b5:d0:1f:c3:d5:55:dc:
         b4:b1:0c:60:85:ab:6b:c9:b6:eb:3e:2c:d2:72:4d:19:b7:f1:
         af:8e:8c:2c:33:d0:e2:5e:5d:3d:44:db:7c:3a:17:65:23:84:
         df:c1:81:3c:5a:fd:26:8d:61:dc:14:81:34:5d:18:43:e6:d1:
         7e:f7:57:71:81:ad:04:20:be:f6:47:96:e9:78:00:9d:45:f5:
         83:d4:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:26 2025 by rpki-client on console.sobornost.net