Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32332d3233203d3e20323632323936.roa
File:                     3137302e38312e322e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          OY980rcwIFAXOnaWlbRcBUa/BpfKB9kpgE5kO8JK9gY=
Subject key identifier:   AC:78:C2:7A:39:1B:DE:C2:EE:BD:D2:D8:5C:C0:F6:27:7D:EE:4E:1D
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       487F70FF710D974809486EF649DC7C4348C5519C
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32332d3233203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:33 +0000
ROA not before:           Mon 31 Mar 2025 17:52:33 +0000
ROA not after:            Mon 30 Mar 2026 17:57:33 +0000
asID:                     262296
IP address blocks:        170.81.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 12:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7f:70:ff:71:0d:97:48:09:48:6e:f6:49:dc:7c:43:48:c5:51:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:33 2025 GMT
            Not After : Mar 30 17:57:33 2026 GMT
        Subject: CN=AC78C27A391BDEC2EEBDD2D85CC0F6277DEE4E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:c3:f5:03:13:15:26:da:ff:ff:9b:ef:5b:
                    b5:13:35:e4:46:a8:a4:d5:4c:0c:2d:e6:95:43:4c:
                    5a:cf:b8:5f:9a:f5:97:d0:ee:a6:09:4c:b2:4f:96:
                    df:8f:d3:e6:d3:87:8c:81:5f:25:c8:4a:54:e3:7a:
                    dd:7f:d4:db:db:c8:26:f7:62:a3:82:d0:26:15:87:
                    e4:e8:7a:42:b8:98:9f:fa:3b:2e:70:04:0b:a7:a5:
                    46:4a:cb:24:24:48:bb:19:45:2e:3d:4e:7a:41:5d:
                    ff:a3:b1:20:49:72:9c:dc:11:fe:a6:11:f7:6a:77:
                    53:c2:05:df:8b:b9:41:0c:c2:d5:9f:ce:3c:20:13:
                    29:56:c3:92:b9:12:c1:33:c3:84:fa:5c:bc:88:e2:
                    1c:5a:6d:5c:94:2a:52:5e:6b:56:03:7b:93:2b:35:
                    23:c9:42:2e:64:1d:34:30:ee:1d:5d:33:93:c0:9a:
                    da:64:01:54:de:68:dd:c5:a0:40:c5:7c:d3:1a:0f:
                    0b:0f:b8:30:15:68:55:a4:b8:ff:81:1e:08:2b:0d:
                    2d:64:8c:23:99:92:61:e9:7d:b0:5b:52:10:2d:14:
                    27:c1:13:8c:d1:24:c6:02:68:59:ef:98:eb:a7:bb:
                    a6:46:04:c6:1a:6d:44:7e:ed:e1:0a:15:0a:c5:f7:
                    6f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:78:C2:7A:39:1B:DE:C2:EE:BD:D2:D8:5C:C0:F6:27:7D:EE:4E:1D
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:44:00:f5:3e:b0:f7:d2:c7:1c:6c:29:59:80:ce:36:c9:ab:
         3f:5f:94:d1:b7:1f:d4:a5:02:35:41:97:d2:ad:79:24:80:fc:
         9a:63:be:de:cc:45:d7:99:ef:21:21:82:5c:fc:b3:40:fa:19:
         a5:4e:91:28:85:c1:1e:cf:7d:16:e9:3a:38:16:54:16:d0:b0:
         ae:9f:05:f1:ca:cb:6e:8b:ec:09:5d:2a:47:7d:89:6f:85:d7:
         63:7d:f0:11:1f:43:ca:a1:56:24:ad:01:a4:52:9b:28:e5:62:
         84:1d:fa:ec:97:f5:10:60:44:67:a5:e1:96:3f:11:62:61:5c:
         55:30:96:87:9b:25:ac:a7:42:fb:5e:e5:e8:7f:1e:f2:61:ab:
         93:c3:64:70:39:8b:b0:0b:3d:78:3c:3f:36:51:73:7e:ce:5c:
         2f:01:eb:f2:a4:30:40:2b:a3:a7:32:49:55:aa:44:1e:85:f0:
         c4:68:09:2c:a8:0b:94:2f:3c:60:4e:2b:64:fc:23:e8:99:f4:
         bb:ae:88:da:3e:7f:13:2b:31:74:7e:8d:6b:b9:00:86:77:50:
         72:4e:a9:b0:ac:4c:be:6e:d5:3d:6e:92:c5:04:fb:96:58:2c:
         f0:5c:77:11:67:c3:72:58:94:48:90:64:e4:fb:b3:c1:c8:11:
         0d:a7:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:13 2025 by rpki-client on console.sobornost.net