Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa
File:                     3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa (raw, json)
Hash identifier:          TajlD1JkKealS79dfHjWBGRyBuqJLWR/8Tu5Hkhjqhw=
Subject key identifier:   ED:EB:2B:A6:30:08:54:BF:64:37:68:A1:07:50:0E:A7:B3:09:71:40
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       4096C64274D458F8E05E77EA152AFD83B0D874DD
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     266348
IP address blocks:        170.239.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:96:c6:42:74:d4:58:f8:e0:5e:77:ea:15:2a:fd:83:b0:d8:74:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=EDEB2BA6300854BF643768A107500EA7B3097140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:c8:da:3f:62:85:f1:3d:a8:fc:4a:d4:69:
                    78:f3:61:7e:92:09:13:dc:c0:8f:bb:3e:80:96:22:
                    63:bd:18:03:ae:9b:bf:82:62:cf:c4:83:80:25:6c:
                    5a:37:90:fa:c3:94:31:79:0b:b0:38:6e:94:33:80:
                    71:4b:fe:bc:64:a5:e1:6a:a4:95:b4:96:cb:bb:af:
                    bb:a2:91:01:4c:e1:df:a3:ba:ed:db:35:f2:ac:df:
                    d2:26:1c:2b:43:9c:75:54:32:1d:80:b6:2a:b2:8d:
                    9c:3e:1b:b3:10:73:0b:87:8c:8a:b6:51:5c:27:ee:
                    aa:3b:db:32:82:2a:a3:3e:25:cc:04:e8:55:ad:f7:
                    ec:67:b0:e5:31:5a:07:dc:89:b3:a7:41:12:7e:72:
                    89:91:68:cb:1b:5b:ae:73:34:c3:4f:a9:dc:c3:66:
                    81:34:81:fc:e7:00:2a:97:7f:32:eb:ab:0c:3d:50:
                    66:e4:76:82:3c:f5:06:a6:8a:f1:b9:68:a4:84:b1:
                    5a:ac:ba:81:f5:55:e3:94:dd:9c:3b:b4:c1:12:61:
                    55:27:cf:78:93:62:23:75:e4:c0:a2:41:b0:ef:1c:
                    51:b0:05:fc:e9:aa:93:87:a6:82:9e:7a:22:6c:45:
                    70:fa:af:0d:be:a4:19:82:8a:3d:f9:23:d4:e0:6c:
                    ce:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EB:2B:A6:30:08:54:BF:64:37:68:A1:07:50:0E:A7:B3:09:71:40
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3131302e302f32342d3234203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:41:a2:2a:1f:84:95:98:0b:2a:c5:4b:f0:99:ef:b0:8a:3f:
         83:f2:33:44:e4:52:b3:2c:27:a3:e5:6b:02:a7:bf:7e:03:9b:
         f4:85:fc:10:47:c4:31:59:f1:5b:3f:22:dc:51:d4:cf:0d:20:
         e6:f7:bc:d7:a1:ec:e4:0e:fe:d7:23:67:c0:3f:13:a0:1d:20:
         0d:d3:0e:93:dc:f4:64:72:c6:75:00:5d:c7:ae:ef:9d:78:70:
         d3:11:88:7f:d1:cd:8c:50:95:ed:17:27:1a:f5:5e:e5:23:21:
         9a:ef:f0:83:62:e7:53:3d:e7:ef:38:19:e3:03:90:60:85:1e:
         9b:aa:c1:73:f2:d5:49:c8:93:35:f8:79:69:df:ad:ab:0e:42:
         29:75:c8:da:95:76:6e:12:ec:90:a7:b4:66:8e:8b:58:87:71:
         11:4d:d9:ab:26:3d:f6:36:34:d0:53:42:4d:a1:da:4a:f3:9a:
         b9:2a:c4:b6:3e:ab:52:7b:b3:fd:90:3a:49:72:de:c6:3b:39:
         ed:45:eb:99:b8:62:21:77:ce:b5:84:7f:70:d9:78:ed:d7:8b:
         f6:66:fd:05:d1:cd:62:d8:76:01:db:3f:53:5e:e0:7b:49:1f:
         c0:3b:3e:bb:73:0f:b1:22:be:ca:20:47:af:f9:42:3d:1b:aa:
         79:46:4a:dd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQJbGQnTUWPjgXnfqFSr9g7DYdN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjczNzgyQjk5Nzg3OEE5NDE1RjEzMjIxNEU4RDA5Q0ZB
OTcxNTcyRjAeFw0yNTAzMDUxODU1MDZaFw0yNjAzMDQxOTAwMDZaMDMxMTAvBgNV
BAMTKEVERUIyQkE2MzAwODU0QkY2NDM3NjhBMTA3NTAwRUE3QjMwOTcxNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVcjaP2KF8T2o/ErUaXjzYX6S
CRPcwI+7PoCWImO9GAOum7+CYs/Eg4AlbFo3kPrDlDF5C7A4bpQzgHFL/rxkpeFq
pJW0lsu7r7uikQFM4d+juu3bNfKs39ImHCtDnHVUMh2AtiqyjZw+G7MQcwuHjIq2
UVwn7qo72zKCKqM+JcwE6FWt9+xnsOUxWgfcibOnQRJ+comRaMsbW65zNMNPqdzD
ZoE0gfznACqXfzLrqww9UGbkdoI89QamivG5aKSEsVqsuoH1VeOU3Zw7tMESYVUn
z3iTYiN15MCiQbDvHFGwBfzpqpOHpoKeeiJsRXD6rw2+pBmCij35I9TgbM4lAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7esrpjAIVL9kN2ihB1AOp7MJcUAwHwYDVR0j
BBgwFoAUJzeCuZeHipQV8TIhTo0Jz6lxVy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDF6b2t5WFZmQWNoaGlNR3VjQ3o5OE1YaXE2Tjk5MVFqWWJWOG9HemFp
WkUvMS8yNzM3ODJCOTk3ODc4QTk0MTVGMTMyMjE0RThEMDlDRkE5NzE1NzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3Mzc4MkI5OTc4NzhBOTQx
NUYxMzIyMTRFOEQwOUNGQTk3MTU3MkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQxem9reVhWZkFjaGhpTUd1Y0N6OThNWGlxNk45OTFRalliVjhvR3phaVpFLzEv
MzEzNzMwMmUzMjMzMzkyZTMxMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrvbjANBgkqhkiG9w0BAQsFAAOCAQEAokGi
Kh+ElZgLKsVL8JnvsIo/g/IzRORSsywno+VrAqe/fgOb9IX8EEfEMVnxWz8i3FHU
zw0g5ve816Hs5A7+1yNnwD8ToB0gDdMOk9z0ZHLGdQBdx67vnXhw0xGIf9HNjFCV
7RcnGvVe5SMhmu/wg2LnUz3n7zgZ4wOQYIUem6rBc/LVSciTNfh5ad+tqw5CKXXI
2pV2bhLskKe0Zo6LWIdxEU3ZqyY99jY00FNCTaHaSvOauSrEtj6rUnuz/ZA6SXLe
xjs57UXrmbhiIXfOtYR/cNl47deL9mb9BdHNYth2Ads/U17ge0kfwDs+u3MPsSK+
yiBHr/lCPRuqeUZK3Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:25 2025 by rpki-client on console.sobornost.net