Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136342e302f32322d3232203d3e20323731333131.roa
File:                     3138312e3233322e3136342e302f32322d3232203d3e20323731333131.roa (raw, json)
Hash identifier:          ZXpBki1Is3NDhXfKcI7ak9WrhRJRhIxCZfcm31o3dD0=
Subject key identifier:   3E:16:95:48:DA:BD:FD:9D:D5:C4:AD:75:26:BC:07:EC:A9:CD:8A:01
Certificate issuer:       /CN=B6CC812D59F4308FCB1D2239555678B476218767
Certificate serial:       3E8E310CAABC6D22D731B8BA89C8CC10075CCCC4
Authority key identifier: B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136342e302f32322d3232203d3e20323731333131.roa
Signing time:             Wed 05 Mar 2025 21:14:50 +0000
ROA not before:           Wed 05 Mar 2025 21:09:50 +0000
ROA not after:            Wed 04 Mar 2026 21:14:50 +0000
asID:                     271311
IP address blocks:        181.232.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl
                          rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8e:31:0c:aa:bc:6d:22:d7:31:b8:ba:89:c8:cc:10:07:5c:cc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CC812D59F4308FCB1D2239555678B476218767
        Validity
            Not Before: Mar  5 21:09:50 2025 GMT
            Not After : Mar  4 21:14:50 2026 GMT
        Subject: CN=3E169548DABDFD9DD5C4AD7526BC07ECA9CD8A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:98:1b:31:54:9c:33:8b:b6:1c:0d:0d:c6:
                    d2:7f:7f:df:3e:45:84:39:a1:9d:ec:20:c1:d0:94:
                    b1:43:f4:81:87:20:a6:01:89:13:31:b1:e9:ee:aa:
                    28:07:c6:1d:aa:16:71:f6:b8:54:01:8c:f3:50:af:
                    23:29:9a:65:c6:6d:2d:52:6a:35:ef:c8:8f:99:d0:
                    5a:bc:17:10:d7:bc:ed:7f:49:c2:39:94:64:93:f7:
                    06:44:53:82:a0:d1:89:c9:28:6a:f7:47:9e:4e:0c:
                    78:c8:f4:19:02:81:83:54:37:bb:37:98:3f:d9:cd:
                    05:6c:e8:41:fe:02:1f:8d:3f:7d:9f:80:04:2d:ff:
                    c4:71:29:05:dd:c2:27:67:8a:e1:be:2c:bb:c8:6a:
                    67:94:81:7c:3d:c3:98:45:6f:8b:27:76:a6:7d:dc:
                    c7:56:08:39:40:06:10:e9:e8:38:3f:13:4b:18:a9:
                    ee:69:ce:98:1e:b3:a0:01:93:19:0a:83:a7:98:18:
                    9d:87:dd:70:a7:5e:4e:d6:8a:24:dd:5a:88:83:a0:
                    b4:98:cb:7d:4a:16:6d:9b:90:8a:02:0c:1d:6b:fa:
                    47:71:82:3b:26:84:95:52:53:86:b3:9a:fd:42:2a:
                    f2:1f:d2:74:a0:cc:04:72:bc:f7:5f:2f:16:20:8f:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:16:95:48:DA:BD:FD:9D:D5:C4:AD:75:26:BC:07:EC:A9:CD:8A:01
            X509v3 Authority Key Identifier:
                keyid:B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136342e302f32322d3232203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:08:5d:05:86:df:87:12:84:bd:a8:40:31:81:65:0f:20:93:
         fb:f9:04:9c:d3:98:30:41:7f:aa:dc:f0:91:8d:44:f2:b5:93:
         0e:7e:2b:c6:10:cf:9d:6a:0c:3e:e9:ce:2b:ca:19:93:0e:7a:
         03:c7:60:a8:9b:cc:23:75:7d:6f:d3:b1:48:e7:bd:a2:af:ba:
         ff:3a:04:b6:6b:63:2e:26:9e:9f:89:2f:7a:7c:62:a1:5f:af:
         a3:1a:c0:c3:ee:74:ae:e7:7f:5d:d4:c3:d9:ac:75:81:4f:5a:
         0f:87:52:7d:e0:ec:26:f4:f6:9b:ad:56:1d:ce:7a:e5:ce:63:
         8e:32:24:10:b9:44:76:43:18:19:74:6e:78:f7:7a:e1:64:fd:
         14:7c:84:1d:6e:15:07:c9:6b:2c:0e:f9:ed:3b:37:1a:99:8c:
         b1:7a:48:db:3f:69:a1:8e:b9:9b:b8:05:cd:6b:1b:2e:ce:96:
         ca:5f:b2:e0:8b:51:b6:55:0a:77:ff:5c:d5:a1:e7:00:7d:68:
         09:ad:4c:0a:89:d9:f8:0f:16:eb:0b:d2:26:72:34:04:90:a7:
         99:42:fb:71:68:fb:e4:5e:1b:33:ce:e7:15:84:7c:f5:8e:5a:
         3c:1d:fd:37:b5:52:d9:59:d0:c8:ed:d1:46:36:ea:2d:09:1b:
         9b:66:00:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:48 2025 by rpki-client on console.sobornost.net