Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
File:                     3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (raw, json)
Hash identifier:          fp71B+OVFduQtnUnUeQM1x6QOqtaPdWFpcDtAkCRBM4=
Subject key identifier:   50:EE:E4:87:21:06:D2:7A:2C:A6:B8:A8:07:0A:5E:03:16:2E:E5:00
Certificate issuer:       /CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
Certificate serial:       3728CBE626CA763087CA11427C9531F9C884FF76
Authority key identifier: EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
Signing time:             Mon 17 Mar 2025 16:50:58 +0000
ROA not before:           Mon 17 Mar 2025 16:45:58 +0000
ROA not after:            Mon 16 Mar 2026 16:50:58 +0000
asID:                     11432
IP address blocks:        200.194.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:28:cb:e6:26:ca:76:30:87:ca:11:42:7c:95:31:f9:c8:84:ff:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
        Validity
            Not Before: Mar 17 16:45:58 2025 GMT
            Not After : Mar 16 16:50:58 2026 GMT
        Subject: CN=50EEE4872106D27A2CA6B8A8070A5E03162EE500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:19:4d:64:09:9b:67:bd:26:ed:f1:77:33:bb:
                    52:1d:6f:7b:49:5f:34:2c:d0:f0:5e:2c:ca:c0:84:
                    1e:4c:0e:62:01:b7:b0:ac:03:93:02:0a:a0:71:5a:
                    86:7f:28:47:8b:2c:cc:54:2c:f8:83:a5:11:31:a2:
                    ec:65:ab:15:55:83:4f:36:60:98:6d:d0:82:6d:45:
                    d0:a3:d1:49:a3:37:7b:5c:21:b2:8f:cc:e8:6c:05:
                    ca:03:f9:43:35:a1:cc:89:82:62:20:27:eb:34:6c:
                    04:4a:5b:3a:04:41:9f:6f:61:f5:8b:e6:f7:a3:61:
                    22:bc:52:65:f9:4c:65:fa:b0:d6:3b:71:ed:e4:b8:
                    3d:b8:04:7b:ce:2e:8a:42:de:25:c0:22:82:38:92:
                    14:8d:86:a7:2c:55:93:34:2b:88:e6:41:2d:b3:74:
                    2a:62:99:9f:35:35:e1:2a:1d:7d:9f:ff:81:76:7a:
                    44:93:42:4d:3c:1b:cb:b9:31:5d:50:e2:9e:90:54:
                    3b:a8:97:09:50:dc:3d:08:af:0d:2e:2c:c0:b0:64:
                    b5:4f:76:60:cf:d8:4a:6b:5c:eb:49:b5:a0:e2:4e:
                    52:b5:a3:69:0e:cd:52:97:c5:82:43:30:d6:f5:9b:
                    73:85:ef:0c:48:c5:73:1e:c8:82:ea:2f:a7:63:1f:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EE:E4:87:21:06:D2:7A:2C:A6:B8:A8:07:0A:5E:03:16:2E:E5:00
            X509v3 Authority Key Identifier:
                keyid:EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:37:30:c4:2c:7f:5b:b4:89:77:eb:4a:18:ae:77:cd:6e:40:
         1d:fd:41:71:63:47:27:b1:40:f5:e4:28:8b:15:7e:b9:3e:c9:
         0b:0d:97:64:c1:60:a1:7e:55:f3:5e:c1:78:d3:2a:b4:d2:85:
         e7:d0:85:1e:c4:27:56:3b:af:19:fa:87:55:90:39:9b:8b:d5:
         fb:b3:53:3f:a7:00:a7:5c:0a:f4:37:72:7e:51:05:0f:92:13:
         c5:f0:52:49:a2:2d:13:b5:61:3d:cb:f6:3f:a8:24:38:86:5d:
         da:f3:aa:72:bd:b4:7a:88:38:a9:37:f1:95:b5:7b:7e:c4:94:
         7a:0f:c3:39:17:8d:51:c0:82:1b:6a:71:68:cd:44:8b:7c:88:
         b7:c2:6c:c4:99:b3:42:f0:d2:78:c0:a8:72:df:9a:23:fd:79:
         66:39:e2:e0:59:09:bc:b8:99:44:3d:0c:ef:70:32:d6:5d:4a:
         7c:ca:74:e7:e7:8d:1d:f7:42:85:fc:9e:d0:f8:c0:e3:b2:9f:
         55:62:ed:46:f8:34:77:8f:3a:05:e3:47:b3:95:f0:7e:16:10:
         1b:f9:83:d5:68:5c:78:d2:72:56:c1:26:c4:e1:e4:87:5d:59:
         68:74:ed:34:f3:7f:21:38:8d:3b:59:36:4f:9f:9e:67:18:74:
         99:8e:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:22 2025 by rpki-client on console.sobornost.net