Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa
File:                     3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa (raw, json)
Hash identifier:          hlFlLqJAOElEN/yYD+fvQlEyZt6gC9CmwjlahWkfIAU=
Subject key identifier:   52:45:8C:F6:46:77:72:27:C7:BB:4A:BD:D6:62:72:D1:A5:5D:B5:56
Certificate issuer:       /CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
Certificate serial:       102D0FE751E2566856958C2ED834911B4D6088E3
Authority key identifier: 37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa
Signing time:             Thu 06 Mar 2025 07:45:47 +0000
ROA not before:           Thu 06 Mar 2025 07:40:47 +0000
ROA not after:            Thu 05 Mar 2026 07:45:47 +0000
asID:                     265189
IP address blocks:        167.250.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl
                          rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2d:0f:e7:51:e2:56:68:56:95:8c:2e:d8:34:91:1b:4d:60:88:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
        Validity
            Not Before: Mar  6 07:40:47 2025 GMT
            Not After : Mar  5 07:45:47 2026 GMT
        Subject: CN=52458CF646777227C7BB4ABDD66272D1A55DB556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:86:35:bf:b9:e3:b1:88:b1:e0:bf:16:b8:
                    c6:2b:9c:e2:c8:f5:35:31:3b:89:39:be:fa:34:00:
                    fe:c7:17:1b:88:ea:75:e5:f4:3b:a3:ff:99:ae:b6:
                    f8:e5:24:77:f7:19:e0:37:7f:bc:4d:a0:24:3a:36:
                    ee:09:14:1b:6b:bf:7e:05:a6:69:b3:01:18:14:14:
                    23:f1:93:e1:71:5d:4a:7a:68:43:04:8e:61:08:b1:
                    90:24:4b:69:86:90:86:13:e6:b8:74:ce:b2:68:56:
                    bf:7c:d2:f3:10:0b:43:cc:3e:21:f5:80:e6:dd:76:
                    3a:e5:47:25:46:f6:71:07:6f:a7:82:a2:82:f9:77:
                    48:6f:ba:b3:f3:fe:07:6b:8f:1d:93:fe:63:25:8f:
                    8f:01:5a:5e:56:7a:76:be:97:b2:6e:0f:d1:0d:b3:
                    2f:51:c1:cd:ce:b2:50:45:d6:e0:fc:13:10:ff:6a:
                    33:00:87:a9:05:4a:5d:47:20:c9:24:e4:ed:60:6f:
                    88:29:0b:32:8e:1d:fb:90:18:ab:52:46:fc:3a:f9:
                    19:a7:26:4f:96:ed:90:da:b9:0c:a3:3d:9c:0b:f6:
                    48:70:f5:77:23:47:9b:d3:5d:39:36:84:e9:f3:fb:
                    03:a0:c5:47:c8:df:b7:73:88:ce:eb:e2:65:a4:08:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:45:8C:F6:46:77:72:27:C7:BB:4A:BD:D6:62:72:D1:A5:5D:B5:56
            X509v3 Authority Key Identifier:
                keyid:37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:5b:d7:4c:d2:47:f0:d2:70:d4:c8:0b:1c:98:60:9e:0e:00:
         bc:30:e1:f8:ac:3a:81:66:ae:4b:e2:70:2a:45:3a:76:72:2e:
         cd:26:9a:c4:44:de:98:9f:cd:db:b7:ea:d0:5f:d3:2d:5b:90:
         1f:6b:47:d3:d3:51:97:f1:b8:d9:06:1d:cb:ae:98:ce:16:ed:
         86:7f:0b:ba:8b:aa:5f:b8:e1:35:1f:78:9f:45:fd:03:df:c9:
         a6:b1:37:e6:d0:b6:b5:20:5d:6c:0b:8b:de:1e:73:01:3e:e7:
         8d:0d:c9:9c:d7:6c:e1:7c:33:ac:f6:7b:2c:16:4d:c4:5b:51:
         6e:a0:20:23:11:c9:2e:e6:6c:76:9d:cf:9f:da:52:9c:52:ec:
         f8:db:3b:c5:45:cb:4f:a8:06:24:bb:83:79:76:73:53:3a:d5:
         57:18:d8:2d:1e:4f:67:d4:0d:89:8a:9c:f1:ab:f9:95:15:d8:
         c0:b2:e3:dc:5a:ef:a7:05:18:73:d7:a9:b5:ad:c8:a7:eb:c5:
         6f:48:c9:10:c7:ed:e9:ec:5a:ff:11:54:a1:3d:80:17:97:fb:
         2c:f8:2a:4e:23:54:e3:9f:dc:ff:78:9e:a9:3f:6c:2d:0a:5e:
         a4:36:d4:1f:1a:10:b1:d8:74:86:89:d9:92:85:be:e9:6d:0e:
         d7:85:1b:b9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEC0P51HiVmhWlYwu2DSRG01giOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdGNTVFOTEzMkI2NURGOTNBQzdFOEY1NDJCMkEzMTE1
Q0ZFMUE3OTAeFw0yNTAzMDYwNzQwNDdaFw0yNjAzMDUwNzQ1NDdaMDMxMTAvBgNV
BAMTKDUyNDU4Q0Y2NDY3NzcyMjdDN0JCNEFCREQ2NjI3MkQxQTU1REI1NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6E4Y1v7njsYix4L8WuMYrnOLI
9TUxO4k5vvo0AP7HFxuI6nXl9Duj/5mutvjlJHf3GeA3f7xNoCQ6Nu4JFBtrv34F
pmmzARgUFCPxk+FxXUp6aEMEjmEIsZAkS2mGkIYT5rh0zrJoVr980vMQC0PMPiH1
gObddjrlRyVG9nEHb6eCooL5d0hvurPz/gdrjx2T/mMlj48BWl5Wena+l7JuD9EN
sy9Rwc3OslBF1uD8ExD/ajMAh6kFSl1HIMkk5O1gb4gpCzKOHfuQGKtSRvw6+Rmn
Jk+W7ZDauQyjPZwL9khw9XcjR5vTXTk2hOnz+wOgxUfI37dziM7r4mWkCBHJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUkWM9kZ3cifHu0q91mJy0aVdtVYwHwYDVR0j
BBgwFoAUN/VekTK2Xfk6x+j1QrKjEVz+GnkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkJjeFBTVFJNM3VpZzF6c3AzZ3FzOVVic0tlTUU0dGc0eWh5bVRmeXRQ
dGUvMS8zN0Y1NUU5MTMyQjY1REY5M0FDN0U4RjU0MkIyQTMxMTVDRkUxQTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3RjU1RTkxMzJCNjVERjkz
QUM3RThGNTQyQjJBMzExNUNGRTFBNzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCY3hQU1RSTTN1aWcxenNwM2dxczlVYnNLZU1FNHRnNHloeW1UZnl0UHRlLzEv
MzEzNjM3MmUzMjM1MzAyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKn+iwwDQYJKoZIhvcNAQELBQADggEBABlb10zS
R/DScNTICxyYYJ4OALww4fisOoFmrkvicCpFOnZyLs0mmsRE3pifzdu36tBf0y1b
kB9rR9PTUZfxuNkGHcuumM4W7YZ/C7qLql+44TUfeJ9F/QPfyaaxN+bQtrUgXWwL
i94ecwE+540NyZzXbOF8M6z2eywWTcRbUW6gICMRyS7mbHadz5/aUpxS7PjbO8VF
y0+oBiS7g3l2c1M61VcY2C0eT2fUDYmKnPGr+ZUV2MCy49xa76cFGHPXqbWtyKfr
xW9IyRDH7ensWv8RVKE9gBeX+yz4Kk4jVOOf3P94nqk/bC0KXqQ21B8aELHYdIaJ
2ZKFvultDteFG7k=
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:06 2025 by rpki-client on console.sobornost.net