Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132332e302f32342d3234203d3e20323730343339.roa
File:                     3230302e31312e3132332e302f32342d3234203d3e20323730343339.roa (raw, json)
Hash identifier:          Pf1EUy0KFf3L+CLNglc1qJ3TBcJaP92Qs77n1sOU0Og=
Subject key identifier:   2C:02:99:6A:DB:CA:73:15:75:FF:9F:FE:62:CD:AC:FD:E6:4A:E4:19
Certificate issuer:       /CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC
Certificate serial:       6ECD6E44F80657D46DE0177EE43C745A3A85E1B5
Authority key identifier: 14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132332e302f32342d3234203d3e20323730343339.roa
Signing time:             Tue 08 Apr 2025 14:51:14 +0000
ROA not before:           Tue 08 Apr 2025 14:46:14 +0000
ROA not after:            Tue 07 Apr 2026 14:51:14 +0000
asID:                     270439
IP address blocks:        200.11.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.crl
                          rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cd:6e:44:f8:06:57:d4:6d:e0:17:7e:e4:3c:74:5a:3a:85:e1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC
        Validity
            Not Before: Apr  8 14:46:14 2025 GMT
            Not After : Apr  7 14:51:14 2026 GMT
        Subject: CN=2C02996ADBCA731575FF9FFE62CDACFDE64AE419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:e8:94:65:03:dd:72:27:d7:c5:b0:ae:e8:
                    73:18:03:ca:a5:3a:b3:12:10:b4:13:e8:6f:91:74:
                    eb:f1:4c:08:0e:b1:4e:73:e0:f1:82:fa:c9:39:ae:
                    32:02:0b:e1:79:5e:d7:23:d8:8a:e5:d3:55:f5:9c:
                    73:7b:00:cb:c0:95:ff:4c:ba:20:9d:0e:b1:5a:ad:
                    04:48:bb:6e:53:d7:80:bd:11:72:33:34:c6:97:7c:
                    48:4b:c2:f5:27:9f:16:6e:4c:f8:6a:b3:10:2c:95:
                    bd:f6:59:57:d8:c9:09:c3:69:a0:92:c2:e4:be:42:
                    22:2b:28:b7:d6:b6:d7:78:e3:84:3c:82:b6:a7:7d:
                    12:43:ab:24:61:76:34:da:55:9b:a7:63:93:19:ca:
                    76:55:34:26:f0:9c:ac:06:fb:72:6f:c7:50:84:f7:
                    9e:38:c1:75:55:7c:f3:e2:06:3d:94:77:bd:cd:96:
                    31:4d:58:8f:db:93:d5:91:27:29:e2:12:12:22:00:
                    45:25:f4:fa:92:e8:99:90:b7:d2:eb:4f:1d:d5:35:
                    9a:32:ee:e4:ee:15:25:8c:4b:10:96:b3:9d:e2:c9:
                    20:6c:4e:91:c1:87:d5:3b:06:3f:ec:f4:e8:c5:14:
                    2b:43:dc:d0:ea:56:a2:ab:19:7e:9f:a5:c8:48:4e:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:02:99:6A:DB:CA:73:15:75:FF:9F:FE:62:CD:AC:FD:E6:4A:E4:19
            X509v3 Authority Key Identifier:
                keyid:14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132332e302f32342d3234203d3e20323730343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:39:50:2e:9f:3d:8f:2d:da:42:b5:d1:fd:08:a0:c1:73:c1:
         15:e7:46:32:7e:0b:37:93:a5:9b:51:28:90:05:a8:b7:17:65:
         14:c8:7d:90:da:b5:87:70:08:89:5a:47:54:e0:da:df:b3:50:
         30:8a:6b:49:7f:14:61:ff:06:1b:24:30:2f:45:15:24:b0:ae:
         4d:5d:a9:cc:21:4b:e8:6a:82:fe:0d:43:56:38:86:ba:3d:2a:
         ab:a4:bd:a5:ba:85:75:ac:d9:9c:51:67:bb:4d:97:67:60:86:
         cc:42:a2:c2:dd:58:f3:f3:d9:d4:61:e0:28:b1:5b:71:a4:35:
         5e:dd:28:e6:82:33:38:cb:9e:bf:aa:21:14:76:0e:7b:ee:e3:
         f1:56:fe:04:eb:c1:ee:d0:35:6d:f9:a1:1b:18:2a:fe:09:e0:
         ca:4b:f9:3a:12:9c:7d:45:0a:30:56:9f:aa:35:0f:d7:6d:32:
         71:52:f1:95:7f:98:d7:7e:5c:5b:7d:4f:69:f7:e2:c9:de:f0:
         78:06:42:b2:2a:00:d0:59:fa:38:0d:0e:08:cc:7d:57:bb:5a:
         b6:1f:56:90:b7:b3:b2:76:bc:e6:2f:33:92:4e:da:4d:89:6e:
         f3:d5:5e:8f:67:5c:3d:3d:20:82:be:8f:3d:b2:c6:48:2c:6d:
         5a:ef:f5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:19 2025 by rpki-client on console.sobornost.net