Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e35342e36342e302f31382d3234203d3e203232363839.roa
File:                     3230312e35342e36342e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          QfhamlxdrAs+XGzJ2v6BFZ/961ujj1iLYqGuUAgydkE=
Subject key identifier:   6C:09:3A:0B:70:6E:A9:F7:FE:C1:0D:AD:87:96:A9:CE:DC:5C:86:EE
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       285BF2A2E8C3030646878DFE59A1ED2DC12006E0
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e35342e36342e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 07 Mar 2025 02:18:07 +0000
ROA not before:           Fri 07 Mar 2025 02:13:07 +0000
ROA not after:            Fri 06 Mar 2026 02:18:07 +0000
asID:                     22689
IP address blocks:        201.54.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5b:f2:a2:e8:c3:03:06:46:87:8d:fe:59:a1:ed:2d:c1:20:06:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Mar  7 02:13:07 2025 GMT
            Not After : Mar  6 02:18:07 2026 GMT
        Subject: CN=6C093A0B706EA9F7FEC10DAD8796A9CEDC5C86EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:08:15:54:ae:4b:d8:50:03:53:6f:de:38:
                    5e:28:17:1e:cd:b2:08:6e:9e:81:1a:fc:97:4f:4c:
                    57:bb:0a:98:8a:d6:1e:dd:b1:79:1d:14:c0:d6:4f:
                    15:fd:71:97:16:0c:c5:34:11:fe:9f:7f:96:74:c2:
                    b9:dd:be:93:45:5a:60:0a:b1:5f:b4:3b:0b:61:16:
                    27:c7:ef:07:e2:bc:50:3f:4c:73:15:a9:e9:52:c2:
                    20:fc:59:8a:df:57:76:53:dc:d0:67:4c:16:85:41:
                    18:07:fe:02:01:2e:76:5a:87:f5:9e:c8:d9:c5:4c:
                    15:4f:fa:bb:cf:52:c3:b3:95:37:27:03:fa:60:be:
                    38:8c:a4:0c:72:96:cb:60:ef:bc:99:62:c5:b5:db:
                    90:3b:38:0d:0f:3f:ab:81:ba:11:a5:c5:c3:cf:b8:
                    41:24:a1:43:c6:97:f6:8f:8f:ed:34:c4:42:f8:f2:
                    29:12:69:41:b7:db:1c:2f:fb:36:14:51:7e:65:d6:
                    d1:45:5a:fb:2e:e7:f8:bb:8c:ba:9a:59:8c:70:76:
                    62:ef:51:b3:88:2e:81:d4:99:d1:85:a5:aa:41:9a:
                    f7:fd:84:ce:24:e9:d9:e6:e3:58:14:0f:76:34:08:
                    4c:5b:0b:8f:6f:55:21:37:e2:db:e8:f7:94:03:6e:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:09:3A:0B:70:6E:A9:F7:FE:C1:0D:AD:87:96:A9:CE:DC:5C:86:EE
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e35342e36342e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         68:16:dc:ea:fb:95:57:3a:0b:44:52:b1:0d:fd:e5:0f:e7:33:
         f3:4a:d4:7b:fa:06:43:01:19:9b:49:99:ff:28:a7:2b:b6:d0:
         8e:da:79:f6:25:5d:53:52:0f:a1:fe:7e:8a:0d:d4:f6:e9:f9:
         18:21:1c:3a:8f:07:ea:9c:52:af:6f:f3:d9:e2:4a:25:da:64:
         0f:46:c2:e4:d9:cc:51:8f:57:35:c2:e7:b4:64:38:22:67:a1:
         2b:89:1d:0b:33:c2:82:aa:20:64:a4:20:1c:22:c4:9e:93:72:
         6d:1f:5f:3c:33:ac:fe:1f:4f:5d:d0:42:db:49:b1:68:9f:af:
         01:cf:5a:96:4d:b1:0c:9e:2f:48:ca:c8:3d:b5:2b:8b:3c:01:
         27:82:7e:d7:a2:19:03:e8:89:30:41:64:34:0c:2f:29:44:0a:
         c5:bb:b8:56:4d:67:4b:07:31:2c:01:86:42:e4:d9:f9:25:56:
         30:17:f0:c8:01:9e:63:b6:a7:63:b8:2e:6b:42:59:2d:ea:8d:
         5d:5f:bf:ff:0f:b3:05:7c:98:8c:52:9e:81:6e:09:16:52:6e:
         cb:df:03:db:2a:b3:4e:e9:c9:31:f4:ef:9b:fa:c7:b0:bb:b2:
         0d:e6:52:c0:67:55:44:63:f6:a8:8d:ee:44:aa:24:32:00:5c:
         3b:7f:ad:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:31 2025 by rpki-client on console.sobornost.net