Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa
File:                     3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (raw, json)
Hash identifier:          qVCWPsUBXgWtAHmD8XGCmeUMG5WOH75SlsNjlNdMjgg=
Subject key identifier:   2B:9F:A4:2D:84:48:58:75:98:C0:95:31:81:29:D1:51:F2:D3:16:2F
Certificate issuer:       /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Certificate serial:       0FE0EDD9E02A0F5274622CB8ECB013532BF8CCE1
Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa
Signing time:             Wed 05 Mar 2025 20:05:57 +0000
ROA not before:           Wed 05 Mar 2025 20:00:57 +0000
ROA not after:            Wed 04 Mar 2026 20:05:57 +0000
asID:                     271453
IP address blocks:        181.174.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
                          rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 00:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e0:ed:d9:e0:2a:0f:52:74:62:2c:b8:ec:b0:13:53:2b:f8:cc:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
        Validity
            Not Before: Mar  5 20:00:57 2025 GMT
            Not After : Mar  4 20:05:57 2026 GMT
        Subject: CN=2B9FA42D8448587598C095318129D151F2D3162F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:b6:f2:20:74:2e:e8:64:9a:de:54:62:62:
                    6f:1b:67:a8:2a:88:36:86:4d:e8:b6:2a:c4:70:cd:
                    19:da:ab:d1:da:aa:cb:76:1b:24:61:d4:8c:0b:72:
                    f7:30:5c:fa:46:74:7c:bc:8e:1b:8a:31:70:50:bf:
                    e3:14:bc:0d:39:04:6a:79:e9:c4:7d:d0:21:b8:6e:
                    b0:d8:60:a4:d4:1e:34:ec:9e:57:02:90:16:25:29:
                    96:6a:06:5c:3d:dc:45:8d:4d:45:80:f6:37:45:01:
                    21:54:a1:3f:01:e4:66:43:28:7b:93:db:0b:2b:19:
                    f2:68:0a:76:be:8f:e2:62:3a:34:66:af:b4:6a:12:
                    5d:3d:0c:f3:34:a8:b6:30:00:0a:d1:58:9c:27:2d:
                    aa:07:a1:8f:6b:b9:b2:cc:8a:8a:f7:16:94:fc:5c:
                    d0:1b:36:c3:f6:2f:fa:56:06:de:c6:78:4e:e4:c5:
                    b0:69:7c:60:ce:43:f2:c9:ce:09:ee:66:69:f2:dd:
                    c9:a1:b8:26:19:d3:98:e9:1c:40:4a:72:e6:03:58:
                    b5:d8:fa:43:2b:be:29:2d:3b:11:5c:52:1d:64:f9:
                    d4:ef:e5:58:27:64:fe:35:12:27:57:b9:e2:e1:66:
                    3f:89:f6:4e:9f:01:7c:86:d6:b0:2c:f5:cd:cc:ba:
                    e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9F:A4:2D:84:48:58:75:98:C0:95:31:81:29:D1:51:F2:D3:16:2F
            X509v3 Authority Key Identifier:
                keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:72:c1:64:4c:68:49:f8:c0:2f:04:cb:a7:a1:ea:2e:dc:a8:
         15:c3:21:93:ae:86:94:ba:a1:89:10:bc:c5:46:44:9d:49:2f:
         48:71:bf:87:64:be:04:26:e3:02:f0:ff:47:88:7c:79:33:47:
         79:f6:bd:15:d9:ae:92:7f:c7:ad:33:5a:bd:72:d4:37:a1:14:
         9a:a4:aa:a4:2d:27:6d:a5:25:7c:83:70:6b:a5:22:80:86:a5:
         e0:53:87:9c:5d:3a:42:65:b8:fc:ba:fd:91:d1:75:d8:c4:30:
         45:c1:c0:01:26:b2:4c:37:aa:87:72:f4:f3:49:ff:9e:64:38:
         aa:d5:31:46:06:c6:d3:d9:d8:8f:91:33:64:e8:32:9e:ba:27:
         90:8d:b2:20:5d:f4:37:43:1a:66:3e:3d:1e:33:b4:ce:e1:b7:
         c5:86:41:19:7c:c4:41:68:a2:93:44:b7:10:fa:57:77:11:ce:
         04:82:6e:fb:b5:c5:92:fb:eb:1d:d4:f8:d3:ca:bc:09:8f:fa:
         0c:c0:c5:ca:7b:c9:db:77:5c:bd:09:5b:5f:03:72:84:aa:5f:
         eb:bc:e5:1d:ad:d7:24:91:c2:08:00:02:7a:e2:d4:9d:5d:8c:
         53:99:58:1e:6f:52:ae:0a:55:33:21:8d:ea:dc:4d:54:a3:ef:
         92:0a:63:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:54 2025 by rpki-client on console.sobornost.net