Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa
File:                     3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          lnNrO/15v5Up+xLHUBaI6P5PJDjCUyj1TErHNTpWRcs=
Subject key identifier:   11:C9:6D:E1:C6:A3:A5:37:09:57:80:14:84:F6:46:FF:D9:62:B1:02
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       5DDD0273E49D9C3F03F7B9AC97A822977E661F47
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa
Signing time:             Mon 24 Mar 2025 15:02:32 +0000
ROA not before:           Mon 24 Mar 2025 14:57:32 +0000
ROA not after:            Mon 23 Mar 2026 15:02:32 +0000
asID:                     61942
IP address blocks:        170.233.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:dd:02:73:e4:9d:9c:3f:03:f7:b9:ac:97:a8:22:97:7e:66:1f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Mar 24 14:57:32 2025 GMT
            Not After : Mar 23 15:02:32 2026 GMT
        Subject: CN=11C96DE1C6A3A5370957801484F646FFD962B102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:ac:bd:9e:02:cb:2a:ed:89:4f:7d:58:e0:
                    1a:ce:0e:6e:5c:09:b6:95:64:3c:d6:8a:a3:3d:98:
                    55:4c:93:8d:4c:3f:53:ea:16:4b:85:a5:6c:8d:86:
                    75:6a:4f:b5:64:ce:0a:04:7c:b0:69:93:b7:d4:d0:
                    e2:2e:a6:a7:23:4b:ad:c4:50:2d:ed:42:22:3d:c3:
                    a7:44:80:7b:c3:21:ee:77:a6:af:d4:c3:45:81:83:
                    3d:27:1b:c0:37:07:7f:c3:32:47:d2:64:a0:c1:d5:
                    6b:d0:2e:58:38:65:f4:cb:c7:04:61:64:84:8d:2d:
                    75:ec:6d:f8:74:e9:69:12:5a:df:23:d7:a5:32:a6:
                    57:b6:26:65:d5:20:a1:0f:45:af:94:f3:2a:02:f2:
                    c5:4d:80:1f:46:81:72:15:08:9c:52:8b:27:ec:ad:
                    6d:fa:35:10:c8:c6:a5:3d:8e:f3:2a:88:a5:91:b2:
                    b4:b5:a3:56:29:f4:ad:a9:db:d9:6b:b3:ce:44:c0:
                    6d:8f:80:85:9e:f0:0e:23:89:2b:4c:c5:ff:6a:2b:
                    e2:50:d6:3a:34:46:d9:c7:93:cd:97:fd:25:1a:79:
                    51:14:29:59:93:c6:9a:8c:21:34:d5:e7:f3:e3:19:
                    68:b3:29:5a:8b:4c:ca:02:7d:62:07:16:c8:d2:bc:
                    6f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C9:6D:E1:C6:A3:A5:37:09:57:80:14:84:F6:46:FF:D9:62:B1:02
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:dc:a6:f7:a5:c8:af:28:c5:7d:87:8e:04:14:91:5a:da:4e:
         ff:db:f0:ef:db:26:fc:44:58:85:2c:0b:6b:b8:a4:f5:20:cb:
         43:5e:28:e4:da:39:a7:ef:24:8b:49:12:2c:4b:91:5c:f8:58:
         fb:22:e1:ce:68:f0:3a:43:71:f3:73:71:56:37:61:77:72:52:
         14:ae:a8:82:d3:60:60:e2:32:dd:34:0d:35:4f:dc:96:f3:9a:
         f8:08:5c:90:2b:2e:20:fb:9d:62:61:55:6a:e3:89:28:88:c3:
         4d:98:43:83:69:c7:a1:58:3e:14:67:bb:e5:5e:0c:78:5d:26:
         2d:f8:1d:1c:b9:0f:73:d9:04:56:2a:93:ce:2b:c9:95:21:14:
         b9:ab:59:16:6a:75:a2:5c:50:78:c1:c7:30:78:aa:41:8f:cf:
         9c:67:79:39:39:16:aa:62:84:1d:bb:ac:3f:55:35:9e:6f:3b:
         2a:2e:94:f5:0d:d4:75:12:51:a7:53:61:25:8a:eb:b0:79:d9:
         fa:86:bf:8e:19:04:eb:fc:f6:7a:8b:8d:59:14:db:be:14:79:
         c9:76:ee:3d:9c:d9:87:68:8b:e4:d3:cd:d4:54:fe:33:c5:60:
         9b:ca:8a:5e:43:06:74:1b:0b:6c:d1:94:fa:13:bc:9d:57:54:
         43:d4:79:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:25 2025 by rpki-client on console.sobornost.net