Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/1/3137302e3234342e382e302f32322d3234203d3e20323636343738.roa
File:                     3137302e3234342e382e302f32322d3234203d3e20323636343738.roa (raw, json)
Hash identifier:          hJrl+gOW7RY6xFQG7zMVrTx1iXexjgH9a9uQhrhotrM=
Subject key identifier:   F2:31:A2:F5:9F:73:04:9A:BA:57:EE:9D:61:C9:3D:BF:AE:78:8F:6F
Certificate issuer:       /CN=7DC7E1FB46ABB794375023FE9181D31FCA1A024F
Certificate serial:       6BF45453AD0BF30F7057F69D449BA3419D7D951D
Authority key identifier: 7D:C7:E1:FB:46:AB:B7:94:37:50:23:FE:91:81:D3:1F:CA:1A:02:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC7E1FB46ABB794375023FE9181D31FCA1A024F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/1/3137302e3234342e382e302f32322d3234203d3e20323636343738.roa
Signing time:             Thu 06 Mar 2025 03:51:49 +0000
ROA not before:           Thu 06 Mar 2025 03:46:49 +0000
ROA not after:            Thu 05 Mar 2026 03:51:49 +0000
asID:                     266478
IP address blocks:        170.244.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/1/7DC7E1FB46ABB794375023FE9181D31FCA1A024F.crl
                          rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/1/7DC7E1FB46ABB794375023FE9181D31FCA1A024F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC7E1FB46ABB794375023FE9181D31FCA1A024F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 14:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f4:54:53:ad:0b:f3:0f:70:57:f6:9d:44:9b:a3:41:9d:7d:95:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DC7E1FB46ABB794375023FE9181D31FCA1A024F
        Validity
            Not Before: Mar  6 03:46:49 2025 GMT
            Not After : Mar  5 03:51:49 2026 GMT
        Subject: CN=F231A2F59F73049ABA57EE9D61C93DBFAE788F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8b:ac:cb:62:2c:62:33:00:c7:76:ae:ba:cc:
                    75:86:47:0f:43:a0:6f:99:1e:8f:6b:42:d7:3d:a7:
                    d4:34:06:50:a9:26:d8:be:71:f8:04:25:0d:a4:62:
                    97:1c:45:9a:4a:fd:ca:14:67:d3:5f:9b:8b:d1:9e:
                    5d:84:10:ae:31:f7:84:2d:95:bf:cf:92:29:d9:69:
                    17:21:d2:51:5d:25:76:c1:6b:31:58:21:d5:78:d0:
                    3d:e1:8b:d0:c0:35:95:1f:9a:90:8d:48:0a:40:c4:
                    ce:b4:c9:e9:73:10:7a:e3:dc:d0:7f:2f:50:81:c1:
                    c4:c1:01:b7:59:86:7b:62:4c:06:69:5c:7d:7c:7b:
                    e2:8e:1a:d6:9d:4f:10:42:73:10:30:8c:f2:79:2c:
                    92:d1:cb:29:a6:55:cd:f3:bf:59:70:fa:bf:71:c3:
                    9e:fe:e0:b6:38:f0:98:5a:8b:91:d1:46:7e:a5:bb:
                    f4:17:9e:4c:f9:78:ff:90:0e:09:20:41:3a:e5:8f:
                    4c:ff:4c:fa:1d:5c:20:07:a9:70:44:37:bf:52:83:
                    56:fb:9a:ad:d9:e3:ba:17:2d:06:13:73:67:0c:a5:
                    d1:d4:7b:57:5d:9c:e0:23:b5:70:2c:01:47:d0:ce:
                    53:56:06:f0:eb:7e:f0:a2:35:c6:ed:5d:9c:81:ce:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:31:A2:F5:9F:73:04:9A:BA:57:EE:9D:61:C9:3D:BF:AE:78:8F:6F
            X509v3 Authority Key Identifier:
                keyid:7D:C7:E1:FB:46:AB:B7:94:37:50:23:FE:91:81:D3:1F:CA:1A:02:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/1/7DC7E1FB46ABB794375023FE9181D31FCA1A024F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DC7E1FB46ABB794375023FE9181D31FCA1A024F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/1/3137302e3234342e382e302f32322d3234203d3e20323636343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:d1:89:cd:3d:10:22:3d:59:72:1b:a4:94:b4:a6:98:9d:76:
         aa:17:7b:eb:bc:6e:36:2d:7a:7d:31:d7:77:14:e7:a9:75:e1:
         6a:00:73:d5:89:a7:f9:eb:d6:f8:14:09:b9:71:8c:72:4a:ba:
         41:b4:86:ab:ff:3a:c7:df:e6:c8:1c:fe:7d:8b:1d:18:9d:f7:
         fd:be:36:1e:ef:68:8f:18:92:a7:d2:32:a5:a4:dd:f9:3a:ac:
         2c:43:ca:5f:36:be:dc:7d:fa:24:fc:18:50:61:ea:cd:c6:7a:
         44:6e:f1:66:7e:94:0a:8e:3c:55:98:24:18:59:75:30:55:5e:
         1e:df:3d:8d:fb:06:93:6b:b1:69:cf:36:42:0b:d3:8e:13:03:
         1b:73:a8:c1:69:16:60:90:58:92:7c:d4:46:ed:ef:25:83:f0:
         a6:97:37:47:d6:5d:22:af:8c:45:aa:23:48:91:c7:17:d4:6a:
         15:cb:29:51:dd:5e:9d:89:d0:e3:6c:ba:e6:28:aa:61:c0:c6:
         2b:c1:76:09:3e:c7:df:25:8c:12:61:d6:7f:ed:8d:04:00:89:
         6e:30:45:60:41:64:98:7d:78:1c:19:a6:7e:5f:88:07:95:87:
         38:22:06:5f:aa:04:2a:f9:0d:54:67:96:98:c5:b6:7d:30:4c:
         2b:e4:22:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:00 2025 by rpki-client on console.sobornost.net