Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38342e302f32322d3232203d3e20323634393936.roa
File:                     3137302e38342e38342e302f32322d3232203d3e20323634393936.roa (raw, json)
Hash identifier:          h7ubK4iD8ob3Qwmot9Gd0zWTeLfkgBWZps93EwBvPVs=
Subject key identifier:   3E:4D:49:4F:5F:6B:A0:34:EA:F0:6B:B3:8F:72:93:9B:36:4C:88:31
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       034AD3FF131135591E88F27F4B4752A70C69D1C8
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38342e302f32322d3232203d3e20323634393936.roa
Signing time:             Thu 06 Mar 2025 08:50:09 +0000
ROA not before:           Thu 06 Mar 2025 08:45:09 +0000
ROA not after:            Thu 05 Mar 2026 08:50:09 +0000
asID:                     264996
IP address blocks:        170.84.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4a:d3:ff:13:11:35:59:1e:88:f2:7f:4b:47:52:a7:0c:69:d1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Mar  6 08:45:09 2025 GMT
            Not After : Mar  5 08:50:09 2026 GMT
        Subject: CN=3E4D494F5F6BA034EAF06BB38F72939B364C8831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:fb:71:45:ad:fc:ad:d6:cb:00:19:c2:e7:
                    26:ef:9b:85:63:79:26:fe:a5:50:e9:85:f7:27:53:
                    04:7e:8b:56:f9:20:be:5b:de:08:3f:02:d7:9a:bc:
                    33:2a:e6:47:77:93:67:2e:dd:c4:14:d0:9c:59:2b:
                    53:56:5a:4e:f1:90:47:3b:88:a1:b2:6f:04:7d:77:
                    fe:4d:07:47:99:a8:35:60:09:d4:3c:19:48:c9:0c:
                    3d:41:e3:b8:9f:01:7a:5e:5f:b9:45:be:2e:14:67:
                    79:6b:7a:72:b5:95:5d:ce:c2:d2:3a:89:7d:40:ea:
                    f8:f6:77:84:53:3d:b8:12:65:b4:9d:21:81:9b:9e:
                    6d:3c:a3:0e:68:4d:9a:d0:4e:6d:9f:e6:24:0f:0a:
                    54:d6:10:22:0d:57:c2:81:79:44:db:96:80:e2:6e:
                    41:86:16:c5:5d:10:3d:a9:82:6d:6b:02:89:fe:cc:
                    2c:b7:bf:c4:a5:7d:18:a3:6e:26:56:4f:8f:67:d1:
                    b8:e2:b4:a3:ff:d3:4b:56:67:ea:bc:76:0a:11:f1:
                    30:2f:a7:cd:ae:05:51:8e:46:8d:65:fe:21:71:a3:
                    2d:ac:06:60:0b:6d:9f:54:ae:4e:55:9f:44:17:19:
                    0c:f3:57:5f:8b:a6:df:ca:e4:11:07:ed:3e:42:07:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4D:49:4F:5F:6B:A0:34:EA:F0:6B:B3:8F:72:93:9B:36:4C:88:31
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38342e302f32322d3232203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:41:2e:23:84:8d:86:95:e1:3f:bc:f8:d2:f9:af:d4:bc:e5:
         26:c6:2a:cc:9c:b2:cb:ef:92:3f:1e:e9:57:4d:fe:df:2c:94:
         91:f3:bf:d5:31:06:cd:22:8d:4a:a6:1e:ba:dd:0c:45:27:39:
         af:38:44:25:af:71:d8:33:a1:81:06:98:f4:61:71:fb:41:e0:
         d1:36:0c:bc:24:94:62:b3:14:41:95:95:0a:2e:b2:73:65:7f:
         37:94:35:91:cb:7c:be:1c:0b:b9:a6:49:e8:e8:ad:e1:a1:59:
         a7:8d:98:0e:ce:a4:82:a5:dc:c1:5b:4b:38:bf:1a:51:9b:a5:
         17:bd:0c:df:ab:e0:64:34:c2:ac:a8:d6:2e:00:d5:5a:31:0d:
         fc:a5:f4:e4:07:16:4a:a6:31:3d:d9:5a:57:6d:d7:bc:94:dd:
         22:67:30:2a:98:d7:10:89:5c:66:c0:ef:39:38:d3:60:bd:6f:
         a9:b8:b9:01:d7:07:f8:84:dd:b8:12:97:c6:32:4e:d1:04:b4:
         b6:16:24:5d:c9:8b:c1:3b:4b:c1:4a:be:fb:3c:16:7c:b8:17:
         86:86:aa:b2:51:62:2d:62:5f:df:36:5c:ce:4d:24:f7:3f:ed:
         eb:a0:45:7f:03:40:98:b5:aa:de:6d:42:94:a6:0b:eb:41:fe:
         1f:b7:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:55 2025 by rpki-client on console.sobornost.net