Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa
File:                     3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa (raw, json)
Hash identifier:          hnJhIlX1z2pCKEWSn9M5vvHn9RjGgWodCeRfYdgMFDw=
Subject key identifier:   2E:77:EF:C5:B8:97:EF:71:AE:08:EF:55:E6:B2:63:D7:73:83:09:74
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       507DB94555E5187A7A7EBA4EF63022D78973AADD
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa
Signing time:             Wed 05 Mar 2025 23:11:39 +0000
ROA not before:           Wed 05 Mar 2025 23:06:39 +0000
ROA not after:            Wed 04 Mar 2026 23:11:39 +0000
asID:                     270652
IP address blocks:        190.11.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7d:b9:45:55:e5:18:7a:7a:7e:ba:4e:f6:30:22:d7:89:73:aa:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Mar  5 23:06:39 2025 GMT
            Not After : Mar  4 23:11:39 2026 GMT
        Subject: CN=2E77EFC5B897EF71AE08EF55E6B263D773830974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2b:12:23:19:78:6b:d3:b4:3c:05:3d:22:c5:
                    b5:18:50:b4:16:c5:63:86:98:c0:1e:2e:57:9f:5f:
                    4a:99:92:63:dd:1f:0b:7b:87:0c:6b:48:9d:31:07:
                    0b:85:50:44:d2:7e:fd:1c:71:e9:f3:7f:bf:84:a5:
                    04:44:84:8f:c3:3c:f8:c2:04:b3:4d:21:28:e5:24:
                    71:7b:94:b2:de:56:76:41:33:67:b6:95:d6:35:59:
                    04:d6:ba:b4:c6:c8:b0:ad:5c:c7:b0:01:89:f6:e5:
                    4d:b5:42:ea:bc:c0:8f:c2:36:ee:b1:86:ed:e3:f9:
                    2a:c2:dc:e0:f1:3f:5f:96:cd:4f:39:24:11:9f:b6:
                    7c:e4:9a:3a:8b:99:8a:76:21:ad:8c:e9:c1:eb:b3:
                    41:a9:95:4a:15:22:d2:ca:fc:ce:96:dc:03:7b:1a:
                    c5:c0:7d:b1:33:04:65:81:2f:d1:11:1f:42:98:0f:
                    64:38:ce:8c:92:54:dd:ab:0a:fe:f8:a3:4f:07:20:
                    70:d6:9e:d6:97:6f:fb:7a:dc:eb:04:49:4d:ca:96:
                    67:40:44:a5:03:b5:d5:9f:4a:49:56:e2:25:e7:d0:
                    a9:02:b3:f0:52:21:70:5b:fc:39:b2:bd:a7:15:f4:
                    b6:28:93:1b:cf:2b:c8:8d:0d:8f:fc:5f:37:81:51:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:77:EF:C5:B8:97:EF:71:AE:08:EF:55:E6:B2:63:D7:73:83:09:74
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:74:f4:7a:94:79:21:6c:43:6e:bf:10:99:d7:ac:5a:58:9e:
         a6:06:51:5f:54:19:1c:af:cf:f4:a6:58:84:ee:fa:d9:fb:05:
         68:d3:b9:80:6b:27:28:4e:ff:ed:85:13:a6:1e:94:67:f7:ad:
         78:f9:44:ad:60:1e:70:04:74:d4:3c:ae:22:f3:54:3f:69:36:
         78:17:d1:ec:f1:ef:83:75:3a:6c:8a:f7:e4:79:21:a0:44:bf:
         80:2b:7d:d6:75:05:2c:5c:23:0c:7c:6b:d5:aa:d3:73:23:e5:
         2a:8d:45:1b:9a:0a:7b:45:21:a9:82:7c:95:4b:b0:ce:5d:07:
         50:58:8e:44:e8:8e:dc:54:29:66:72:f2:17:63:ba:22:ea:16:
         49:ca:e6:c7:b0:7c:88:8d:68:95:67:42:68:20:85:e6:f4:04:
         c9:f1:0a:c7:39:c6:7d:86:c6:9e:87:90:76:34:72:f2:52:24:
         f7:a9:0c:b1:53:98:0a:15:94:f4:ed:70:87:81:4a:d9:a8:53:
         d2:fd:15:f4:c4:b3:12:1a:90:ec:1c:cf:f7:32:b4:8b:1f:cf:
         9d:b4:34:ac:94:a0:24:26:69:c6:c2:47:bd:64:58:20:ec:55:
         1b:86:78:de:08:ec:83:ba:70:12:a4:87:a9:64:0c:b8:ad:71:
         b6:cf:13:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUH25RVXlGHp6frpO9jAi14lzqt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE0NDc2NURDMEEzRDlEMEVBREE4NDU2MjVDNUU3RjE0
QzU1MjY5MDAeFw0yNTAzMDUyMzA2MzlaFw0yNjAzMDQyMzExMzlaMDMxMTAvBgNV
BAMTKDJFNzdFRkM1Qjg5N0VGNzFBRTA4RUY1NUU2QjI2M0Q3NzM4MzA5NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKxIjGXhr07Q8BT0ixbUYULQW
xWOGmMAeLlefX0qZkmPdHwt7hwxrSJ0xBwuFUETSfv0ccenzf7+EpQREhI/DPPjC
BLNNISjlJHF7lLLeVnZBM2e2ldY1WQTWurTGyLCtXMewAYn25U21Quq8wI/CNu6x
hu3j+SrC3ODxP1+WzU85JBGftnzkmjqLmYp2Ia2M6cHrs0GplUoVItLK/M6W3AN7
GsXAfbEzBGWBL9ERH0KYD2Q4zoySVN2rCv74o08HIHDWntaXb/t63OsESU3KlmdA
RKUDtdWfSklW4iXn0KkCs/BSIXBb/DmyvacV9LYokxvPK8iNDY/8XzeBUcjfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULnfvxbiX73GuCO9V5rJj13ODCXQwHwYDVR0j
BBgwFoAUAUR2XcCj2dDq2oRWJcXn8UxVJpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnpvaUxNWmduVlhaVWRkUjloQ1JVY2tWaWtMaFA4ZWhFVTVoeFJlTFk3
bkMvMS8wMTQ0NzY1REMwQTNEOUQwRUFEQTg0NTYyNUM1RTdGMTRDNTUyNjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxNDQ3NjVEQzBBM0Q5RDBF
QURBODQ1NjI1QzVFN0YxNEM1NTI2OTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ6b2lMTVpnblZYWlVkZFI5aENSVWNrVmlrTGhQOGVoRVU1aHhSZUxZN25DLzEv
MzEzOTMwMmUzMTMxMmUzMjMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+C9AwDQYJKoZIhvcNAQELBQADggEBABd09HqU
eSFsQ26/EJnXrFpYnqYGUV9UGRyvz/SmWITu+tn7BWjTuYBrJyhO/+2FE6YelGf3
rXj5RK1gHnAEdNQ8riLzVD9pNngX0ezx74N1OmyK9+R5IaBEv4ArfdZ1BSxcIwx8
a9Wq03Mj5SqNRRuaCntFIamCfJVLsM5dB1BYjkTojtxUKWZy8hdjuiLqFknK5sew
fIiNaJVnQmggheb0BMnxCsc5xn2Gxp6HkHY0cvJSJPepDLFTmAoVlPTtcIeBStmo
U9L9FfTEsxIakOwcz/cytIsfz520NKyUoCQmacbCR71kWCDsVRuGeN4I7IO6cBKk
h6lkDLitcbbPE64=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:52 2025 by rpki-client on console.sobornost.net