Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa
File:                     3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa (raw, json)
Hash identifier:          9iwzjQCjV+FV7bNXwtjbyRYasZB4IxBhIx8fl0LDIQc=
Subject key identifier:   41:52:4F:18:26:FD:C1:AC:37:11:5A:83:96:23:52:34:36:89:15:B3
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       7A9570F8316E368B4C2AF5DE5387357C5E1E7846
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa
Signing time:             Wed 09 Apr 2025 12:33:19 +0000
ROA not before:           Wed 09 Apr 2025 12:28:19 +0000
ROA not after:            Wed 08 Apr 2026 12:33:19 +0000
asID:                     264939
IP address blocks:        168.228.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:95:70:f8:31:6e:36:8b:4c:2a:f5:de:53:87:35:7c:5e:1e:78:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: Apr  9 12:28:19 2025 GMT
            Not After : Apr  8 12:33:19 2026 GMT
        Subject: CN=41524F1826FDC1AC37115A8396235234368915B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:32:12:28:4e:92:e5:9e:9a:a1:32:90:59:
                    a7:8a:d7:9e:ea:51:c9:46:5d:cf:44:c3:6a:78:83:
                    bc:97:48:6b:04:2b:c2:35:af:f6:e0:8f:ab:4f:05:
                    ab:fb:ba:ee:05:76:2a:de:ec:3e:05:ca:3a:42:88:
                    a2:8d:9c:25:e8:3c:51:9a:a8:a1:5f:12:46:0e:2e:
                    f1:0a:1d:8e:40:e2:f5:f2:08:34:98:9e:4b:fd:bc:
                    c2:17:ba:9a:9e:a3:0b:71:24:3c:f4:bd:bc:2f:a4:
                    08:21:1e:b2:e7:9d:3d:dc:7c:90:62:8f:ba:6f:54:
                    a1:13:b9:0e:85:cb:30:41:21:53:cd:3f:28:c0:f7:
                    07:5e:f8:5e:83:9f:0e:7f:06:06:27:5a:c0:f2:8d:
                    f1:06:bf:4c:39:08:57:32:3f:13:ce:b6:65:55:46:
                    98:70:3f:52:25:77:7f:f2:d8:ee:38:bf:29:9c:5d:
                    a0:94:40:7c:dc:10:81:4b:17:99:f0:e5:a8:d2:06:
                    6b:8b:b2:36:b3:eb:5d:82:10:b3:b0:b3:4b:ac:f9:
                    08:5d:1e:d7:65:1f:7d:9b:73:c7:42:92:84:02:e6:
                    f1:59:6d:a6:60:ca:a6:39:4a:39:8d:e9:47:4b:6c:
                    25:44:a4:c9:d3:0c:ef:26:28:87:c2:35:8a:f7:ea:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:52:4F:18:26:FD:C1:AC:37:11:5A:83:96:23:52:34:36:89:15:B3
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:ac:80:eb:03:7f:10:b5:9c:1f:cc:7a:4e:54:69:43:fa:4b:
         01:1e:49:8c:e7:ad:2b:a8:9c:ad:2b:c4:db:56:e5:c2:c3:ac:
         a6:f5:88:85:7f:d7:83:57:5a:0e:ce:64:81:cb:22:bb:ef:75:
         be:a6:cc:b3:9b:b0:d5:8b:d7:8e:9d:9d:86:bb:85:d7:1f:83:
         83:50:51:60:05:f6:46:23:43:70:f7:14:63:33:4d:d5:0e:b0:
         cf:e0:c5:de:87:80:f7:32:c9:21:17:e1:2c:26:d5:47:4f:16:
         32:e8:e7:d3:72:6c:0c:37:88:83:df:85:72:b4:8a:6d:db:72:
         3c:78:39:49:2c:ff:69:3a:3b:76:c9:2c:07:bc:84:c9:8a:e5:
         43:55:7a:aa:9b:8d:07:35:1f:2b:9c:30:ca:0f:f2:b7:8b:40:
         38:b6:d7:23:02:c3:e0:b8:83:0c:6c:8c:07:ab:0f:3f:8d:6d:
         81:63:f7:38:27:89:47:04:ec:aa:c7:83:c1:25:a1:10:96:32:
         c6:1a:7a:e6:f8:0c:16:cd:76:54:94:f1:a3:3f:b2:67:18:7d:
         61:64:d6:ae:54:28:d9:91:1f:70:ba:de:b9:50:51:39:49:20:
         9b:6c:a7:86:bf:25:8b:a5:bc:b0:60:88:7e:0f:89:a0:f0:49:
         7e:63:a7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:36 2025 by rpki-client on console.sobornost.net