Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa
File:                     3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa (raw, json)
Hash identifier:          0Dq3Ki1JiDs2pZFgbcQ0OK6nwyLP4M5uBeqZwDmHdjs=
Subject key identifier:   CC:28:80:FF:F5:E3:84:A1:5D:E7:AA:C9:EC:8A:D5:00:95:5D:B8:8A
Certificate issuer:       /CN=B6CC812D59F4308FCB1D2239555678B476218767
Certificate serial:       5A186E85CD1E2224446ACA03D769E3276B19C84B
Authority key identifier: B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa
Signing time:             Wed 05 Mar 2025 21:14:50 +0000
ROA not before:           Wed 05 Mar 2025 21:09:50 +0000
ROA not after:            Wed 04 Mar 2026 21:14:50 +0000
asID:                     271311
IP address blocks:        181.232.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl
                          rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:18:6e:85:cd:1e:22:24:44:6a:ca:03:d7:69:e3:27:6b:19:c8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CC812D59F4308FCB1D2239555678B476218767
        Validity
            Not Before: Mar  5 21:09:50 2025 GMT
            Not After : Mar  4 21:14:50 2026 GMT
        Subject: CN=CC2880FFF5E384A15DE7AAC9EC8AD500955DB88A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:e3:6f:8b:2f:d9:50:ca:95:28:5f:60:bc:
                    7a:25:97:ea:3b:f9:d2:d4:08:0d:50:28:57:5b:86:
                    2f:8f:e2:55:f0:ca:05:99:9a:44:d1:80:15:a4:61:
                    e6:9a:41:68:6b:33:e8:06:02:df:c5:52:9a:61:5b:
                    3f:0b:bb:28:40:39:cc:b5:28:f5:8e:d9:0c:fd:43:
                    dd:64:dd:81:d5:aa:c0:63:cf:00:ed:c8:e8:0b:84:
                    0e:ef:5d:bb:86:7b:1d:2b:91:b6:bb:ef:8a:7b:5c:
                    3f:66:09:ac:7b:91:db:6e:fc:59:eb:78:ba:6f:11:
                    65:bc:3a:91:ad:44:ce:c8:e7:db:84:c3:43:2f:ad:
                    aa:9a:35:0c:3d:cd:d7:20:f1:32:50:23:6b:31:d3:
                    3c:97:84:b2:46:48:82:88:95:d5:c1:25:a1:85:98:
                    e8:4c:1b:a9:f6:09:46:88:68:10:47:9e:b6:6e:80:
                    bd:e3:98:01:04:45:57:1a:70:bb:b7:ad:ea:6f:0b:
                    df:1c:a4:76:53:27:53:8b:88:5e:eb:85:69:27:d8:
                    48:81:ce:8d:8d:1e:7f:c7:75:03:52:e5:8f:39:d4:
                    30:5c:6b:6b:2a:42:7b:7d:c4:52:3a:06:69:05:e6:
                    30:17:12:a1:60:dc:20:c0:c3:62:5b:2c:6d:7a:71:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:28:80:FF:F5:E3:84:A1:5D:E7:AA:C9:EC:8A:D5:00:95:5D:B8:8A
            X509v3 Authority Key Identifier:
                keyid:B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:4d:e2:a4:6d:95:28:5d:6a:d5:c6:85:87:39:07:11:4c:38:
         23:67:48:d8:08:55:d6:bc:7f:66:52:5a:e8:03:93:96:aa:20:
         4e:aa:67:4d:fe:8a:53:d4:d4:ab:d7:33:e8:6d:3c:da:06:e2:
         9b:65:d4:18:28:7f:a7:4e:29:d5:96:a3:31:cf:fd:28:0d:47:
         d4:6a:6c:3c:d9:31:c3:83:2b:d0:6c:94:61:ca:fe:cf:f6:fa:
         f0:bd:16:5a:8f:3b:e8:88:3c:73:24:85:36:38:d4:a9:89:c2:
         b8:09:c4:4c:d3:44:31:0e:c2:f6:92:7c:d4:cc:c9:db:9e:34:
         13:e1:43:fc:ad:1a:04:e3:76:29:9c:fe:48:7d:a4:d0:59:36:
         27:14:c3:ca:95:41:cb:12:12:f3:50:cc:e3:a9:32:3d:6e:2a:
         a5:f8:76:bb:66:9c:0d:58:4e:4e:c4:62:2a:4f:00:45:51:a6:
         ca:fc:d1:af:7c:b7:f1:9d:ce:47:25:1a:d1:30:a4:53:63:c0:
         73:dd:2e:0e:45:f6:c4:9a:75:ab:9f:1d:6c:8f:65:6b:02:84:
         eb:40:1b:18:4a:a7:75:81:6c:f2:f5:a3:4d:b1:8f:3f:a3:de:
         43:86:bc:32:8b:6e:a0:d8:ea:73:93:95:43:72:fc:fb:9f:cc:
         23:98:9d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:12 2025 by rpki-client on console.sobornost.net