Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31362e302f32342d3234203d3e20323636343337.roa
File:                     3137302e38322e31362e302f32342d3234203d3e20323636343337.roa (raw, json)
Hash identifier:          yHMuiT0+yw+TGS8PFIoSopN4epagD6DqOn+RCUS9Nyo=
Subject key identifier:   1F:75:AE:BC:6F:D1:5A:5F:92:57:AE:ED:08:D5:3F:81:14:17:B1:FD
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       2D7EA0005E9F1A96807E2D28B13F956F8FAFD96F
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31362e302f32342d3234203d3e20323636343337.roa
Signing time:             Thu 06 Mar 2025 17:28:17 +0000
ROA not before:           Thu 06 Mar 2025 17:23:17 +0000
ROA not after:            Thu 05 Mar 2026 17:28:17 +0000
asID:                     266437
IP address blocks:        170.82.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7e:a0:00:5e:9f:1a:96:80:7e:2d:28:b1:3f:95:6f:8f:af:d9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Mar  6 17:23:17 2025 GMT
            Not After : Mar  5 17:28:17 2026 GMT
        Subject: CN=1F75AEBC6FD15A5F9257AEED08D53F811417B1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:d9:bc:2c:d2:91:37:9b:5e:d0:37:7f:02:
                    c0:dd:18:ae:dd:ee:7a:08:33:50:7f:f6:d0:fd:32:
                    71:38:78:07:1c:c5:65:54:88:32:90:59:74:df:d5:
                    d5:cb:e4:4e:3c:1b:38:07:b1:53:62:38:b6:a1:5b:
                    e5:98:fa:81:d7:ea:9b:6b:d8:42:53:cc:29:53:42:
                    d3:ca:82:d4:2b:44:78:a2:0e:95:a5:7e:31:e6:14:
                    e6:85:3e:51:71:95:08:fa:8a:b5:1d:98:c0:6b:65:
                    7d:10:e8:d8:7d:6b:d6:5c:71:8e:28:d5:f4:73:a5:
                    a3:4c:8c:00:b5:b3:e6:ba:aa:4a:2f:37:23:fc:b2:
                    96:e9:46:30:84:c2:a8:a8:83:bd:6a:2b:f7:d0:7e:
                    b7:ae:c0:38:ca:e3:96:25:4a:56:b6:f3:90:2f:b4:
                    d5:06:bf:cf:dd:f4:05:19:5e:92:a5:77:b1:55:aa:
                    42:c8:ed:dc:e0:b1:90:e2:5c:fb:13:44:c3:ab:82:
                    c4:b9:e7:f2:de:70:c3:d2:88:8d:3b:f8:2e:66:50:
                    0e:54:b4:bb:e8:d1:55:ac:b9:63:23:d0:d0:80:03:
                    d8:86:b5:6c:c7:2a:c8:54:28:87:18:27:74:e4:81:
                    4e:45:ee:9a:8e:ca:59:07:1c:d4:b9:2c:ea:b1:c6:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:75:AE:BC:6F:D1:5A:5F:92:57:AE:ED:08:D5:3F:81:14:17:B1:FD
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31362e302f32342d3234203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:1e:1e:6c:90:52:0d:fe:b5:e8:21:fc:95:c4:f7:0e:91:f3:
         79:3a:a4:c3:77:7f:da:fc:f7:55:b1:24:6f:87:01:4c:b1:00:
         7c:2a:09:19:19:5e:33:e7:0c:75:cb:a4:c7:41:c1:79:83:2b:
         54:a3:90:b4:b0:2e:ed:8d:56:af:24:0c:5f:cb:3a:e9:82:12:
         f7:02:80:be:1b:cd:06:a8:34:d2:9d:01:c4:97:93:e7:e7:a6:
         f5:8a:6d:86:9f:85:2f:4a:11:e7:26:6d:9c:0a:f5:93:31:f2:
         9a:b7:35:71:fb:e7:cf:24:d5:9a:84:09:10:b2:62:05:1d:00:
         3e:37:27:ea:7a:b0:b5:2c:91:35:66:4d:96:52:f6:2f:c7:b8:
         5f:b6:1f:c5:0a:1b:90:f5:d2:87:8f:3b:af:44:b6:d6:29:6f:
         96:f3:33:5b:7b:30:62:5a:69:b7:82:9d:23:f2:76:a1:9b:61:
         e9:94:f6:f1:45:a5:75:c3:ee:4a:42:59:fe:8e:96:77:7d:94:
         73:10:1b:74:1a:c4:a0:fa:7f:eb:ae:70:8d:48:f1:0e:89:a1:
         83:ca:a9:96:6e:4c:da:08:ec:73:3f:35:fd:4a:01:53:f1:3b:
         a7:7b:f6:9e:37:99:c7:cc:6a:74:0d:25:a6:b8:89:ab:77:e0:
         fb:19:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:06 2025 by rpki-client on console.sobornost.net