Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa
File:                     3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa (raw, json)
Hash identifier:          UdG7kbJM/WVCbUaEpLZG+mOcMv/uiRVonmIjQ54ofpE=
Subject key identifier:   AC:76:84:0B:6B:65:83:DD:99:E0:A8:F4:31:ED:52:08:81:0F:85:57
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       6807AAB2A5A40B814ACA88CC5629604E1D12BA68
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa
Signing time:             Thu 13 Mar 2025 13:07:24 +0000
ROA not before:           Thu 13 Mar 2025 13:02:24 +0000
ROA not after:            Thu 12 Mar 2026 13:07:24 +0000
asID:                     271110
IP address blocks:        160.20.176.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:07:aa:b2:a5:a4:0b:81:4a:ca:88:cc:56:29:60:4e:1d:12:ba:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Mar 13 13:02:24 2025 GMT
            Not After : Mar 12 13:07:24 2026 GMT
        Subject: CN=AC76840B6B6583DD99E0A8F431ED5208810F8557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:6e:cb:b7:7c:db:70:91:db:86:f7:b0:c7:
                    21:70:ff:bd:3b:5a:cf:e4:8e:b3:f0:c1:eb:9a:1e:
                    67:50:1e:b6:74:ae:db:ae:3c:14:01:7a:c3:1f:5c:
                    7f:2f:ef:f7:4f:b8:2d:80:31:d7:5a:0b:92:6c:7b:
                    2e:84:7e:8c:fb:90:fc:ca:07:ea:a7:31:fb:92:ee:
                    96:9e:f8:1f:68:d2:83:ec:87:e4:02:fa:77:86:c3:
                    f0:90:ce:cf:9f:21:17:ec:5f:56:e6:31:8a:f0:f2:
                    16:2c:36:9f:92:d9:8f:8d:82:29:f0:27:67:1f:6e:
                    3f:45:44:d5:94:7f:09:5f:2b:e2:b5:63:7e:86:1a:
                    d3:df:87:19:99:d9:3f:f7:33:df:f3:cf:c1:c1:9e:
                    16:2e:2c:cc:0a:9d:6a:fa:88:c7:34:b8:13:f8:c3:
                    19:9f:f2:17:8c:f7:90:07:6b:ae:66:de:55:18:8c:
                    c2:f6:d4:41:94:82:57:f3:5b:28:b5:5c:10:26:5e:
                    f0:47:75:3c:8e:a9:f0:47:29:40:42:92:03:00:12:
                    67:51:64:81:d6:5b:f0:28:f6:3e:0e:c1:9e:5f:1c:
                    b4:43:18:d1:19:7c:2b:51:40:a5:cd:6e:6d:34:b5:
                    80:b8:ed:0d:b1:0a:00:1d:29:ac:c5:b3:06:8a:79:
                    d1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:76:84:0B:6B:65:83:DD:99:E0:A8:F4:31:ED:52:08:81:0F:85:57
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:5f:dd:2f:28:bb:d3:0d:c1:75:41:90:75:33:27:5f:cf:89:
         04:3f:da:d5:02:e9:44:e0:08:1a:5f:37:91:7f:c5:eb:2d:a4:
         3d:8e:9e:9b:f9:e4:81:1f:75:05:ea:80:07:4a:12:6c:cc:b2:
         19:83:79:db:41:c4:a8:95:aa:b6:3a:ad:1b:00:e1:8a:2d:47:
         c2:5d:d1:dc:41:e6:c4:0f:85:bb:e7:67:13:4d:f6:f0:fa:4a:
         74:db:d7:95:eb:1d:b2:82:99:44:c6:a8:a3:77:20:ce:07:3c:
         fe:cc:98:ce:4e:23:35:49:f6:af:c0:24:5e:f7:14:03:92:9b:
         4c:9a:1f:92:9e:3d:2f:c8:d6:2e:0b:ef:e0:43:01:ed:92:f2:
         3a:a4:52:2e:84:84:f6:46:2a:94:19:3f:b7:86:a5:3b:b5:47:
         cb:33:fd:48:68:ec:4e:2c:7b:a0:62:46:e2:1e:af:b0:56:aa:
         ed:d4:8a:1b:d7:7f:32:fa:c9:a4:71:6c:a7:17:6b:21:3a:1d:
         30:d0:25:a2:78:61:91:2d:4c:73:73:8c:f3:f5:2e:66:0d:7d:
         60:1a:20:62:51:0e:6b:ed:da:a1:5f:7c:ee:a6:61:c6:19:ed:
         d8:58:29:5b:d1:ee:ed:0e:cc:5c:7a:67:ae:98:1d:61:b2:a0:
         b7:d1:e1:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaAeqsqWkC4FKyojMVilgTh0SumgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMzMEQ5MjUyRDQ4RjZBQzUyQTgwMEZGM0MyRTY1NEM1
ODM3REEwNTAeFw0yNTAzMTMxMzAyMjRaFw0yNjAzMTIxMzA3MjRaMDMxMTAvBgNV
BAMTKEFDNzY4NDBCNkI2NTgzREQ5OUUwQThGNDMxRUQ1MjA4ODEwRjg1NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqS27Lt3zbcJHbhvewxyFw/707
Ws/kjrPwweuaHmdQHrZ0rtuuPBQBesMfXH8v7/dPuC2AMddaC5Jsey6Efoz7kPzK
B+qnMfuS7pae+B9o0oPsh+QC+neGw/CQzs+fIRfsX1bmMYrw8hYsNp+S2Y+Nginw
J2cfbj9FRNWUfwlfK+K1Y36GGtPfhxmZ2T/3M9/zz8HBnhYuLMwKnWr6iMc0uBP4
wxmf8heM95AHa65m3lUYjML21EGUglfzWyi1XBAmXvBHdTyOqfBHKUBCkgMAEmdR
ZIHWW/Ao9j4OwZ5fHLRDGNEZfCtRQKXNbm00tYC47Q2xCgAdKazFswaKedFnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrHaEC2tlg92Z4Kj0Me1SCIEPhVcwHwYDVR0j
BBgwFoAUAzDZJS1I9qxSqAD/PC5lTFg32gUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW9tVXRDYVVSRjNhdHVIdXhDNnNEVnNTNUVhRFVxY0daZVg4aFNvQXVx
bWkvMC8wMzMwRDkyNTJENDhGNkFDNTJBODAwRkYzQzJFNjU0QzU4MzdEQTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMzBEOTI1MkQ0OEY2QUM1
MkE4MDBGRjNDMkU2NTRDNTgzN0RBMDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVvbVV0Q2FVUkYzYXR1SHV4QzZzRFZzUzVFYURVcWNHWmVYOGhTb0F1cW1pLzAv
MzEzNjMwMmUzMjMwMmUzMTM3MzYyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM3
MzEzMTMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKgFLAwDQYJKoZIhvcNAQELBQADggEBAANf3S8o
u9MNwXVBkHUzJ1/PiQQ/2tUC6UTgCBpfN5F/xestpD2Onpv55IEfdQXqgAdKEmzM
shmDedtBxKiVqrY6rRsA4YotR8Jd0dxB5sQPhbvnZxNN9vD6SnTb15XrHbKCmUTG
qKN3IM4HPP7MmM5OIzVJ9q/AJF73FAOSm0yaH5KePS/I1i4L7+BDAe2S8jqkUi6E
hPZGKpQZP7eGpTu1R8sz/Uho7E4se6BiRuIer7BWqu3UihvXfzL6yaRxbKcXayE6
HTDQJaJ4YZEtTHNzjPP1LmYNfWAaIGJRDmvt2qFffO6mYcYZ7dhYKVvR7u0OzFx6
Z66YHWGyoLfR4bw=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:56 2025 by rpki-client on console.sobornost.net