Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234342e302f32322d3232203d3e203238323532.roa
File:                     3137392e3138392e3234342e302f32322d3232203d3e203238323532.roa (raw, json)
Hash identifier:          ZfNEYeBy9bGuHn9pNuM3WHrPE8jmiVhwtC5fiQD3QBc=
Subject key identifier:   D2:9C:44:F5:FB:4F:D9:BA:89:1A:86:89:A0:FA:D5:BB:9C:11:76:5B
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       4D18188B8F2197F814BD3C114DF7D9524B597651
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234342e302f32322d3232203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:18 +0000
ROA not before:           Wed 09 Apr 2025 18:43:18 +0000
ROA not after:            Wed 08 Apr 2026 18:48:18 +0000
asID:                     28252
IP address blocks:        179.189.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 20:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:18:18:8b:8f:21:97:f8:14:bd:3c:11:4d:f7:d9:52:4b:59:76:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:18 2025 GMT
            Not After : Apr  8 18:48:18 2026 GMT
        Subject: CN=D29C44F5FB4FD9BA891A8689A0FAD5BB9C11765B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:b8:ae:94:be:5d:04:8e:48:28:91:9a:50:
                    e2:04:7c:3f:39:bc:9b:66:96:79:e1:73:4d:5a:40:
                    de:78:f6:e4:94:84:9c:04:3e:ed:87:cc:59:d3:0f:
                    09:d2:1d:1c:03:fd:01:05:55:24:44:ef:f4:83:9d:
                    bd:c5:3c:f6:14:b0:31:72:fb:f9:c2:99:3f:28:03:
                    47:e2:86:51:70:52:9b:2d:23:8e:f6:7e:15:6e:59:
                    f4:88:4a:98:93:fe:f3:1a:44:da:4b:12:6c:7a:f4:
                    67:f1:b2:e6:b0:bf:36:0d:f2:fb:2b:a7:33:57:a9:
                    97:9f:6f:98:13:2a:7c:79:e8:9f:08:1e:a0:76:29:
                    1f:3f:de:82:fb:9c:41:38:7b:ee:22:82:ae:49:e3:
                    45:27:b5:a0:e3:93:71:f4:d9:1c:75:a4:85:18:5f:
                    d8:14:80:f4:d5:be:c0:ba:0c:db:b2:67:aa:f5:85:
                    59:fd:17:ae:8f:31:a7:ce:dd:be:ab:05:06:d2:9b:
                    ea:7e:04:9a:eb:17:f2:ce:c8:82:8b:99:ec:8b:c6:
                    31:87:c3:df:61:e1:9b:51:47:23:86:11:a8:50:40:
                    2e:62:13:68:38:79:45:9f:ae:01:81:aa:46:bd:65:
                    0d:bc:a4:d6:b2:4b:25:4d:63:fa:06:ed:9b:bd:af:
                    49:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9C:44:F5:FB:4F:D9:BA:89:1A:86:89:A0:FA:D5:BB:9C:11:76:5B
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234342e302f32322d3232203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:96:6b:8c:59:c3:4e:f7:c6:90:44:08:8d:b3:b5:aa:81:c4:
         24:35:06:61:91:46:78:7c:4f:1d:ef:58:a2:1e:13:d9:8b:3b:
         b2:0b:1e:9b:72:60:cb:67:1c:10:c7:a8:a7:f9:4a:c6:db:2b:
         0c:5b:8c:01:dc:87:39:b1:61:39:3a:54:6c:23:93:b0:fe:0b:
         b5:88:3a:e9:55:1b:2b:0f:49:0a:26:2f:92:0d:a9:da:f9:54:
         60:4b:f2:d8:86:d5:05:d3:6b:9e:22:b4:fd:5b:44:6d:68:0c:
         dd:81:27:3f:a6:57:05:08:15:15:7c:2e:63:f4:5a:83:d7:6f:
         3c:36:92:4b:aa:34:ee:ba:39:93:9e:a4:f1:3d:dc:e5:e9:a7:
         36:80:bd:92:ff:22:97:3b:f7:a0:97:28:6e:84:b7:81:34:61:
         98:58:7d:20:ef:35:33:8f:0c:3d:34:86:33:f6:8d:3c:72:ac:
         f7:38:ac:62:ec:f5:06:79:99:a2:3d:22:67:9c:db:e9:ae:56:
         7b:12:1f:28:c9:ad:b0:fc:3d:0e:33:b3:0a:17:86:23:14:59:
         70:70:5f:80:23:5c:e3:f5:4e:8b:d3:24:bf:d2:37:b3:ce:d7:
         25:0d:60:86:1f:df:17:c0:48:78:55:67:98:0d:55:fb:78:bb:
         08:3b:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:40:43 2025 by rpki-client on console.sobornost.net