Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234302e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3234302e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          VGkiQBx/B8V9ZFKS0ZAEZZBeqlPBbSrgNTcp+ee01jY=
Subject key identifier:   AF:8B:B4:AE:F4:6D:62:7D:3B:31:42:2F:74:85:1B:6A:FD:F8:5F:5E
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       49FBFF5A266511C7DD8ACE8A1C90CDEA96D1984E
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234302e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:17 +0000
ROA not before:           Wed 09 Apr 2025 18:43:17 +0000
ROA not after:            Wed 08 Apr 2026 18:48:17 +0000
asID:                     28252
IP address blocks:        179.189.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 20:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fb:ff:5a:26:65:11:c7:dd:8a:ce:8a:1c:90:cd:ea:96:d1:98:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:17 2025 GMT
            Not After : Apr  8 18:48:17 2026 GMT
        Subject: CN=AF8BB4AEF46D627D3B31422F74851B6AFDF85F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:58:39:2f:5c:52:f5:82:83:f7:0d:25:56:7e:
                    6a:15:4b:60:be:d8:c6:0b:e9:f1:4b:19:3e:b2:f7:
                    ae:3a:e3:28:a1:02:a4:40:e8:04:53:31:22:1e:16:
                    39:40:bc:e0:ca:58:15:38:38:49:ee:4d:52:9d:a8:
                    a4:2b:03:05:3a:e8:ce:ee:41:ec:1e:5f:a4:9a:bb:
                    84:5c:9a:81:c1:56:86:44:33:76:e0:01:51:5c:68:
                    b1:cd:9a:83:65:b8:f6:3b:ba:b7:29:3d:9f:27:59:
                    f3:11:86:0e:13:31:7f:2e:cc:1a:de:00:68:af:d3:
                    a9:59:10:75:6b:2a:ea:4e:cb:19:9e:35:de:1d:d2:
                    33:e7:4b:24:fa:c1:04:12:64:e7:b7:34:32:b3:f9:
                    6b:65:44:25:2e:58:d2:1a:50:f8:79:8f:bf:73:5f:
                    79:f8:aa:6a:28:63:90:33:a5:4c:d6:34:da:92:ee:
                    9a:7f:76:1e:78:d3:02:bf:a8:4d:75:c3:73:ad:29:
                    34:86:55:8a:d4:1b:aa:da:ea:da:5d:e5:92:d9:dd:
                    5c:a8:84:4c:4b:c4:96:c1:c1:b4:37:c9:f6:14:95:
                    8c:33:07:07:b8:d2:dc:54:12:58:44:04:78:dd:e1:
                    18:b3:cf:b6:24:76:15:fa:d2:94:dc:81:2c:71:25:
                    35:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:B4:AE:F4:6D:62:7D:3B:31:42:2F:74:85:1B:6A:FD:F8:5F:5E
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234302e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:9b:6f:f2:0d:44:d5:2c:73:5a:62:f8:bd:2c:56:b3:f4:16:
         9b:97:51:18:2e:af:6d:cb:ce:9b:6a:3e:64:f6:bc:e1:a5:9b:
         a1:c8:d6:60:87:57:42:49:7e:bd:50:b1:1f:cc:98:c8:9e:44:
         dd:80:74:ec:26:90:62:72:7a:e2:2d:4d:97:84:a3:01:bc:66:
         52:7c:d3:e9:b0:75:82:4f:32:50:dd:16:20:47:13:4e:f0:89:
         52:f2:8a:5c:06:1f:cd:c5:14:e8:d3:7e:ec:0d:39:96:42:61:
         77:f6:02:02:57:e6:08:74:ef:18:ce:ba:72:46:dd:20:70:64:
         0a:f0:6a:69:07:77:55:5a:77:40:c3:e7:c6:e1:07:1d:2e:a7:
         b6:f0:78:10:94:a4:10:05:9d:8c:b0:97:f5:27:18:22:0e:74:
         59:bb:e1:21:d4:28:6d:5e:f9:74:16:8f:92:87:14:df:3d:d6:
         bd:2b:1e:79:dd:d4:ac:e5:7b:ad:dd:29:ad:07:c0:03:73:36:
         e4:41:12:6b:61:84:54:a2:98:50:72:4a:19:47:99:03:a6:f4:
         9a:81:53:5e:26:f1:87:84:a1:c7:8f:78:6c:68:27:72:4d:c1:
         30:04:5b:39:57:30:40:60:df:61:f1:1a:6f:c2:46:f1:3a:2b:
         6a:f1:da:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:40:43 2025 by rpki-client on console.sobornost.net