Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132322e302f32332d3233203d3e20323730343339.roa
File:                     3230302e31312e3132322e302f32332d3233203d3e20323730343339.roa (raw, json)
Hash identifier:          JGDll/bHjaAujK2xHfAgmuCksRBYPekTGQDB9YYcxLE=
Subject key identifier:   38:DF:B2:82:77:EA:8D:F3:59:04:8B:1D:F5:84:27:5B:99:39:77:97
Certificate issuer:       /CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC
Certificate serial:       122A966532BAC52B25697495358A24A75BB908A2
Authority key identifier: 14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132322e302f32332d3233203d3e20323730343339.roa
Signing time:             Tue 08 Apr 2025 14:51:14 +0000
ROA not before:           Tue 08 Apr 2025 14:46:14 +0000
ROA not after:            Tue 07 Apr 2026 14:51:14 +0000
asID:                     270439
IP address blocks:        200.11.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.crl
                          rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2a:96:65:32:ba:c5:2b:25:69:74:95:35:8a:24:a7:5b:b9:08:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC
        Validity
            Not Before: Apr  8 14:46:14 2025 GMT
            Not After : Apr  7 14:51:14 2026 GMT
        Subject: CN=38DFB28277EA8DF359048B1DF584275B99397797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:7b:45:51:b0:5c:13:e3:1a:36:60:03:86:
                    ac:6a:6a:5b:c1:12:22:6f:e0:99:f4:84:aa:2f:c0:
                    0e:52:a9:a3:2c:7f:56:71:3d:85:2c:37:c4:4d:4f:
                    59:13:b6:2c:f2:74:cf:8c:2d:fd:3e:86:ee:ab:ef:
                    a9:a6:d8:53:58:95:6f:e1:41:df:56:96:46:a4:79:
                    a8:d8:6c:4c:e1:62:30:55:cc:df:b5:f0:3f:74:b5:
                    dc:81:98:7a:cd:4a:17:d9:27:55:97:06:70:13:21:
                    f8:6d:71:29:95:08:da:d1:f3:f2:01:96:71:fb:57:
                    81:b6:1b:4f:ff:1c:6a:f9:d0:67:ae:2e:4d:59:72:
                    03:d4:ad:6d:53:1e:c7:05:c2:f4:d3:b7:47:1a:c2:
                    25:31:e0:e4:44:02:e2:9d:5d:9d:b2:55:69:b4:96:
                    84:0e:59:af:d9:9b:88:9f:fa:ab:26:f5:45:2d:34:
                    8b:b9:71:42:e7:97:43:d3:e6:81:ec:c4:be:4e:7f:
                    56:b3:b4:f3:d9:90:3c:f9:08:d1:24:6c:5b:65:b3:
                    1f:0a:9c:28:de:ab:50:d4:ac:02:1d:7d:89:bd:02:
                    d5:38:b5:be:f7:1a:b9:88:99:10:2d:5d:32:a3:69:
                    d8:bd:ef:3e:a7:bb:8c:bc:b7:e4:93:8a:17:66:4e:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DF:B2:82:77:EA:8D:F3:59:04:8B:1D:F5:84:27:5B:99:39:77:97
            X509v3 Authority Key Identifier:
                keyid:14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132322e302f32332d3233203d3e20323730343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:24:fc:3e:11:fa:b8:fd:a9:ae:d1:3f:5e:f4:29:f1:99:6b:
         b8:fe:ca:0f:74:54:d2:33:8e:3b:d7:c8:d6:98:fd:e0:e5:1d:
         a0:c3:c7:3a:ad:e6:da:92:92:ed:97:5b:51:d2:96:f0:81:12:
         9e:e0:a1:f7:03:9e:eb:50:1c:79:78:0c:7c:91:42:c2:d1:a3:
         83:97:72:3e:99:53:a9:07:dc:36:f5:79:83:4b:4b:17:51:49:
         3d:c0:7a:15:5c:4b:5f:9d:51:8a:97:f3:32:14:1c:78:cf:2e:
         1f:3c:5e:5f:fe:06:48:1e:c1:d5:18:c3:b1:4a:75:b9:1c:66:
         ee:12:a5:d8:c5:30:85:e8:b5:02:54:65:74:1a:d3:44:a1:e4:
         4f:b2:d6:f9:64:83:3d:31:da:e9:7d:c5:b1:7f:94:ec:37:c2:
         c3:2b:68:3d:66:d7:c7:9a:7b:fa:7d:81:58:5c:ed:2c:a0:5c:
         25:0b:6f:f4:ac:83:5c:e1:5a:c1:db:77:5e:97:99:2e:3f:98:
         d2:74:a7:5b:7f:bd:c1:53:f6:3a:71:01:a6:37:fa:2c:bb:fe:
         b5:9f:19:bc:5a:33:c5:34:90:75:d7:b0:fc:28:80:e9:ef:c2:
         e6:e5:02:a4:5d:77:10:75:94:5d:a0:a2:7a:ae:cd:20:13:53:
         a6:09:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:19 2025 by rpki-client on console.sobornost.net