Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/3139302e38392e3233342e302f32342d3234203d3e20323730333937.roa
File:                     3139302e38392e3233342e302f32342d3234203d3e20323730333937.roa (raw, json)
Hash identifier:          AXVqrTiPFOmMsleJX3ZFBIf2L9UQxtqcmKMZYUr5YwI=
Subject key identifier:   88:A1:2D:1C:88:03:49:8E:B9:EC:EC:16:15:24:48:C1:68:7A:BF:4D
Certificate issuer:       /CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
Certificate serial:       349E3EDE61380C317A6596C9E67107AD2F55431E
Authority key identifier: 16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/3139302e38392e3233342e302f32342d3234203d3e20323730333937.roa
Signing time:             Mon 14 Apr 2025 21:17:50 +0000
ROA not before:           Mon 14 Apr 2025 21:12:50 +0000
ROA not after:            Mon 13 Apr 2026 21:17:50 +0000
asID:                     270397
IP address blocks:        190.89.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl
                          rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9e:3e:de:61:38:0c:31:7a:65:96:c9:e6:71:07:ad:2f:55:43:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
        Validity
            Not Before: Apr 14 21:12:50 2025 GMT
            Not After : Apr 13 21:17:50 2026 GMT
        Subject: CN=88A12D1C8803498EB9ECEC16152448C1687ABF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:b3:49:7c:c7:8d:18:ca:fe:04:bf:91:ee:
                    7f:a8:6a:09:5e:41:64:7d:23:3b:17:76:bf:da:4f:
                    31:d2:f0:06:fa:7b:29:ef:99:1c:80:8f:8b:95:bb:
                    98:bf:d6:3b:e6:3a:77:cc:ae:28:63:3c:5e:c3:c9:
                    22:dd:01:cf:77:d2:cc:95:04:8f:a4:4f:88:71:4f:
                    fc:9c:6b:58:b8:71:e3:e5:00:12:4f:d2:b7:ad:a1:
                    06:80:b2:88:f4:18:a2:1f:15:d1:14:33:62:3d:3c:
                    5f:33:ef:1f:83:ab:32:ea:a6:10:50:ca:91:0c:68:
                    e0:21:e3:3e:68:ac:e0:bf:a3:68:78:05:6d:e2:fd:
                    05:34:b0:9f:82:0d:51:df:eb:48:18:eb:9f:55:57:
                    3c:35:eb:86:0e:51:50:c0:14:96:c2:ed:d4:e5:b1:
                    d1:1d:06:e4:75:f7:ab:bb:a9:93:03:9a:cc:32:b7:
                    53:66:5c:b8:78:a8:72:06:a3:4d:ad:1f:8b:50:bd:
                    3b:86:4e:ca:25:13:f8:80:3b:f7:cc:84:be:2b:a9:
                    3c:c5:68:54:cb:86:40:91:eb:d1:63:90:a9:c1:32:
                    c9:5d:41:6b:15:ea:8a:8f:5a:d8:8f:84:09:14:70:
                    07:c0:e2:5f:fd:23:8f:c0:26:3e:53:61:13:2a:d3:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A1:2D:1C:88:03:49:8E:B9:EC:EC:16:15:24:48:C1:68:7A:BF:4D
            X509v3 Authority Key Identifier:
                keyid:16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/3139302e38392e3233342e302f32342d3234203d3e20323730333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:07:17:28:2f:10:84:23:33:93:d5:d3:fd:35:7f:4c:c7:88:
         01:8b:86:26:9c:bb:b1:f5:1c:6a:47:a7:d5:8f:23:be:c7:f8:
         28:03:56:ef:4f:ab:6e:33:6e:f0:e0:a0:30:8e:db:f7:b4:ff:
         99:39:da:36:82:22:00:58:04:66:19:54:30:8d:7c:ef:b0:d5:
         c3:13:ef:b0:9b:6d:ed:da:ee:57:a4:b0:45:89:30:7e:e6:22:
         65:80:53:a9:31:59:9a:4b:b1:ce:49:61:57:b1:91:5b:ff:6a:
         58:0a:6f:96:0b:32:53:bd:89:2e:e5:73:90:2d:78:fa:6f:ae:
         78:8b:84:2b:90:79:9a:99:23:06:e3:f7:ef:17:1c:75:45:71:
         af:57:59:53:0c:b8:bd:f9:0b:47:d5:4a:bf:27:7b:f5:59:f8:
         9e:1b:fc:d3:b9:e3:a5:22:0a:a3:bd:16:7e:5a:9f:11:ba:02:
         d7:6f:b4:ac:15:d9:ef:54:d6:ad:58:15:be:83:62:e4:bd:7c:
         ee:7c:35:48:0e:a3:61:60:36:f8:67:bc:5e:2a:0e:7b:ab:b7:
         06:1c:a9:79:92:41:42:50:3a:9c:cc:f8:a3:be:4a:b8:74:79:
         81:e8:fa:48:b4:c6:e3:9b:64:e8:fd:af:f7:3c:e4:89:a1:6b:
         b3:ec:1f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:37 2025 by rpki-client on console.sobornost.net