Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa
File:                     3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa (raw, json)
Hash identifier:          eI9IlZl/tRp7/siSUwrP+jwi6ppBfWhGBwwz7vclWQQ=
Subject key identifier:   D5:10:AF:81:70:D1:E0:71:51:53:35:8C:F7:65:D8:1E:D2:06:C8:90
Certificate issuer:       /CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
Certificate serial:       78F56B228C850522409CF06872A0367544BD5AAE
Authority key identifier: EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa
Signing time:             Mon 17 Mar 2025 16:50:57 +0000
ROA not before:           Mon 17 Mar 2025 16:45:57 +0000
ROA not after:            Mon 16 Mar 2026 16:50:57 +0000
asID:                     11432
IP address blocks:        200.155.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 14:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f5:6b:22:8c:85:05:22:40:9c:f0:68:72:a0:36:75:44:bd:5a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
        Validity
            Not Before: Mar 17 16:45:57 2025 GMT
            Not After : Mar 16 16:50:57 2026 GMT
        Subject: CN=D510AF8170D1E0715153358CF765D81ED206C890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:6b:6a:0b:0d:c5:3f:6e:2e:ae:4d:eb:64:
                    f7:49:a5:74:af:61:a9:76:86:df:ae:db:4f:7c:57:
                    f6:e9:d9:ae:82:28:91:c6:ed:02:02:c6:c4:b4:63:
                    15:06:3a:e7:c7:70:f3:0a:e7:53:e4:7c:a4:e2:43:
                    06:0e:0b:1d:bd:56:27:e5:0e:ff:bf:31:54:e7:61:
                    60:f4:7e:f0:96:88:ee:9e:c2:ab:58:ac:15:c9:68:
                    c8:15:8f:0f:60:89:8f:0f:47:3e:94:d5:02:7b:c7:
                    76:39:46:47:ff:89:4b:19:45:30:73:32:0c:66:28:
                    96:e3:9e:2b:81:22:50:3f:88:b0:56:dd:e5:88:a5:
                    a6:30:ce:88:01:23:3b:3e:95:91:ff:a6:f7:71:b3:
                    9a:99:68:9f:3f:6e:14:ca:07:aa:ac:17:5e:73:f8:
                    7d:f6:ba:c9:b7:39:08:1a:6e:73:14:87:cd:6c:b4:
                    a5:1c:59:8d:71:47:d6:46:04:96:81:4d:d7:cd:40:
                    a5:6d:3e:4a:80:ca:ad:35:7a:e2:22:87:c5:04:11:
                    47:24:3a:01:3f:be:a9:01:d7:8e:73:af:cd:d4:fe:
                    fe:d6:ab:8a:2a:26:cb:63:35:b1:39:31:44:12:be:
                    59:22:d0:36:ee:e0:a2:b2:cd:97:8c:1a:fb:5f:27:
                    dc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:10:AF:81:70:D1:E0:71:51:53:35:8C:F7:65:D8:1E:D2:06:C8:90
            X509v3 Authority Key Identifier:
                keyid:EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:d9:5d:ae:ee:67:dc:7a:53:9e:c6:25:8a:78:4e:27:d0:6d:
         7c:f5:5f:4f:13:f5:d2:8d:1f:4b:24:6e:5d:d9:88:49:d2:82:
         24:55:49:ff:ff:9a:f2:de:db:7f:c3:56:cf:b1:a4:55:e8:9d:
         a8:1a:a3:86:bd:2e:c9:a9:ac:70:cc:34:4c:49:53:c6:1d:ba:
         8a:8c:c8:ed:f9:b1:41:ee:46:88:23:77:28:a3:58:9e:95:57:
         77:93:25:c8:dc:5f:af:06:b9:ac:65:35:32:4b:d1:7c:ea:18:
         97:22:cf:4f:5e:ca:3b:e2:da:82:5d:30:2c:60:5d:d5:28:21:
         57:51:de:ff:aa:75:ec:d0:1f:ef:b9:ea:27:0e:d1:c6:31:b2:
         2a:e9:fd:b7:f6:7b:a4:f9:79:b1:f9:87:44:73:22:8e:c4:ac:
         9e:45:52:4d:d6:5e:14:ea:81:c6:7d:60:07:98:f8:5b:23:af:
         7a:b9:d4:86:f7:51:ee:9c:78:ba:66:82:42:eb:53:fd:40:c1:
         18:73:b3:6e:90:ab:13:89:34:64:15:12:86:40:e4:df:46:56:
         49:19:85:e2:35:47:69:c0:86:05:fc:63:e7:f7:71:ae:b4:b4:
         42:61:a1:8d:cf:87:36:fb:fd:3f:f3:83:7a:36:b3:c7:26:7f:
         c9:97:ff:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:15 2025 by rpki-client on console.sobornost.net