Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3138312e3233322e3232342e302f32332d3234203d3e20323634313230.roa
File:                     3138312e3233322e3232342e302f32332d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          KQ4w4HsCnS6muTAhBvT26hKjOMoO/6iO//Sml7Vi/vM=
Subject key identifier:   4A:C8:93:9F:01:92:A9:71:8B:7C:01:B9:1D:DC:D3:67:ED:9F:57:6B
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       7A4D0E03A98401AE3612C25261376959DFEF0E2A
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3138312e3233322e3232342e302f32332d3234203d3e20323634313230.roa
Signing time:             Wed 23 Apr 2025 07:58:41 +0000
ROA not before:           Wed 23 Apr 2025 07:53:41 +0000
ROA not after:            Wed 22 Apr 2026 07:58:41 +0000
asID:                     264120
IP address blocks:        181.232.224.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 14:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4d:0e:03:a9:84:01:ae:36:12:c2:52:61:37:69:59:df:ef:0e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Apr 23 07:53:41 2025 GMT
            Not After : Apr 22 07:58:41 2026 GMT
        Subject: CN=4AC8939F0192A9718B7C01B91DDCD367ED9F576B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:4c:f7:29:94:8c:14:ea:2c:a1:55:61:2f:
                    29:a4:2a:94:50:6b:ff:b5:d2:82:72:64:b2:db:3c:
                    8e:ab:b1:b1:b4:b6:b8:d8:2f:46:05:19:bf:c0:9e:
                    dd:85:5b:68:56:aa:f0:75:8d:5d:a4:18:46:a1:81:
                    62:31:aa:9c:cf:b0:1d:41:35:ef:e9:8a:3a:87:a9:
                    58:1c:49:9b:a1:8b:ae:94:34:d1:27:0f:d1:b4:dc:
                    cd:ad:79:df:1e:9e:5c:e1:26:c9:f8:08:7d:c6:fd:
                    e7:a2:97:5a:3d:80:b2:04:6e:c5:1e:18:c8:18:56:
                    20:de:67:66:77:63:95:83:fe:fa:e7:d7:c3:64:14:
                    5a:9b:be:78:69:ba:63:08:ed:63:76:87:aa:bf:8b:
                    7e:7d:b9:b8:4e:f9:6a:da:ee:fa:55:49:ed:e1:61:
                    9c:97:dc:0e:ef:e8:7e:2c:3b:29:b7:46:06:23:62:
                    39:91:90:eb:25:2c:40:b2:0a:34:cb:42:25:4b:22:
                    9d:e3:4d:f4:d3:e1:a5:98:fa:12:5f:b8:dd:11:f0:
                    9d:95:35:af:35:79:db:38:8a:ca:36:59:b9:cc:5f:
                    42:33:e1:1d:04:2a:7d:e1:f0:65:e8:b0:e1:98:03:
                    7f:4e:c2:84:b2:e5:5a:db:64:26:c9:19:5b:c5:c3:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C8:93:9F:01:92:A9:71:8B:7C:01:B9:1D:DC:D3:67:ED:9F:57:6B
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3138312e3233322e3232342e302f32332d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:44:98:60:9f:c1:52:be:9c:56:c8:61:81:6e:da:f3:8d:d0:
         47:77:11:92:8d:28:80:c2:77:79:c9:85:7b:47:ea:5b:2c:df:
         e9:c3:2a:5d:a6:0b:02:e1:48:4a:14:d8:6f:ae:7a:9d:e0:b8:
         6f:b1:e9:88:97:33:19:02:76:0c:14:a5:51:e9:48:17:e5:54:
         3f:6a:14:3e:61:f8:95:d4:f9:72:b1:2f:0c:f2:a9:3b:e0:cc:
         90:d9:0f:28:00:85:f9:56:70:a4:6a:bd:b4:c6:22:4e:75:d4:
         ab:32:21:28:fd:76:ba:e4:ef:cf:14:0d:78:b4:c9:69:81:88:
         67:c2:a1:62:b6:7c:18:be:8b:56:b7:dc:07:3c:49:a2:15:bf:
         69:44:a7:bf:f2:33:b9:d6:4e:b9:e2:c6:1c:ce:5b:8b:59:42:
         03:06:c0:c0:00:b5:3e:2e:cf:d6:d7:97:39:59:4b:75:09:96:
         35:66:35:e8:64:4a:94:8d:02:b2:fd:75:cd:02:3f:3d:1b:84:
         de:ca:18:1c:2d:4d:91:d0:ce:b3:97:1c:c2:58:78:85:e7:89:
         14:59:9e:9a:94:79:c4:7b:17:06:88:05:f4:80:6f:7b:90:ef:
         66:93:83:12:c4:b6:b5:e4:63:52:94:be:a5:90:4f:fa:07:cd:
         c0:37:5c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:06 2025 by rpki-client on console.sobornost.net