Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e332e302f32342d3234203d3e20323632323936.roa
File:                     3137302e38312e332e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          rgsPi2kP2AhBOt8Mj98FAmBTB6jRi5d95loAFzzh9uw=
Subject key identifier:   7B:CF:65:2B:D6:17:08:CE:62:1A:A6:2A:5B:2F:28:65:DE:32:89:19
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       296907E5CEB727390457390501AC0E49D77AB41D
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e332e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:30 +0000
ROA not before:           Mon 31 Mar 2025 17:52:30 +0000
ROA not after:            Mon 30 Mar 2026 17:57:30 +0000
asID:                     262296
IP address blocks:        170.81.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:69:07:e5:ce:b7:27:39:04:57:39:05:01:ac:0e:49:d7:7a:b4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:30 2025 GMT
            Not After : Mar 30 17:57:30 2026 GMT
        Subject: CN=7BCF652BD61708CE621AA62A5B2F2865DE328919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:f0:7f:90:41:c4:59:a5:a8:2c:fe:25:0f:
                    a4:8b:db:fc:82:01:90:cc:38:91:49:b1:9a:fa:cf:
                    6e:97:bf:d0:5e:a1:41:a6:38:22:02:83:2e:91:d2:
                    e6:f8:1e:71:a2:f7:5f:98:66:f6:43:73:c1:ce:07:
                    db:51:b1:02:7e:cb:ee:31:2d:a8:10:4c:f1:3b:51:
                    d1:b6:29:19:99:b7:91:e5:2a:5a:82:34:43:99:ba:
                    53:54:e5:f3:8c:99:89:3b:24:e4:27:9c:15:54:c7:
                    8a:bd:98:17:76:84:b1:d4:80:22:5b:c1:88:d5:44:
                    b8:98:7d:8f:21:8e:ed:3b:5b:d8:b9:56:36:f2:e1:
                    66:6c:95:d6:5e:8d:7f:25:b0:a3:4c:f8:a1:21:3e:
                    cb:ba:76:28:64:9a:d8:3e:3d:c8:df:fb:78:36:00:
                    49:d8:3b:e1:23:14:21:17:06:7b:ed:6d:9d:4c:6c:
                    fd:99:86:a9:fd:4e:10:02:41:58:ba:81:d3:f8:6e:
                    7c:4a:04:f3:f8:bc:8d:8b:67:31:bf:86:85:ea:7d:
                    65:6b:01:0d:a0:14:c7:19:60:61:8c:63:90:62:c5:
                    93:f5:5b:f4:39:ff:fe:3d:7c:18:76:db:f3:17:32:
                    06:a3:3e:59:98:dc:76:fe:e2:a1:5b:e3:8c:af:f4:
                    53:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CF:65:2B:D6:17:08:CE:62:1A:A6:2A:5B:2F:28:65:DE:32:89:19
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e332e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:59:db:5f:60:97:10:ef:7e:05:b4:8b:eb:8d:bf:e1:9f:d3:
         ac:3e:28:79:62:99:1a:ee:99:a6:d4:88:6b:2f:9c:ab:7d:b3:
         13:02:1b:19:c7:05:c2:09:04:86:3d:4a:26:0b:cc:0b:9e:d7:
         93:09:78:5e:b1:a7:19:6c:54:c9:f8:fe:7e:db:f6:04:2a:60:
         7c:d1:20:6f:5a:05:61:7a:a6:4d:75:5b:fc:ae:4b:7e:7e:2b:
         c7:0d:12:3b:48:53:4a:4f:98:59:b7:f6:5b:56:ea:fe:8a:0f:
         f1:d3:ed:d2:84:6b:fb:78:a3:b7:d4:a6:e0:6d:aa:b1:ca:82:
         0d:12:91:a7:3b:68:5c:fc:b5:3e:57:8e:00:14:14:24:94:a2:
         ee:e2:51:ba:96:fe:17:dd:47:c2:d0:27:59:8c:c3:14:94:8d:
         a9:f1:b3:c4:d3:0b:29:04:e6:dd:06:7b:58:cd:e8:9b:4b:25:
         03:f3:9b:0e:ed:ce:0b:94:b5:be:7b:bf:d9:af:a6:13:5b:35:
         f6:e1:00:a7:0f:42:b7:a9:bb:c4:e2:fc:c8:b8:09:13:04:78:
         51:0c:45:42:ae:2d:6a:88:eb:82:d4:c2:40:57:13:05:06:2a:
         7d:ca:1a:5d:33:3e:9e:33:a3:a6:5a:71:3f:01:25:ef:d7:2f:
         3f:0a:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:34 2025 by rpki-client on console.sobornost.net