Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234372e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3234372e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          6SOaPHCvDtgwhYMNZ/J6MmiALHk2UryKGNrNNZeIpFc=
Subject key identifier:   39:5A:70:8C:C4:68:C1:AC:AA:44:EF:96:4A:1E:AD:A4:F7:E9:60:83
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       760306E83596046794B09DE79040AD8BD1B06935
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234372e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:16 +0000
ROA not before:           Wed 09 Apr 2025 18:43:16 +0000
ROA not after:            Wed 08 Apr 2026 18:48:16 +0000
asID:                     28252
IP address blocks:        179.189.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 20:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:03:06:e8:35:96:04:67:94:b0:9d:e7:90:40:ad:8b:d1:b0:69:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:16 2025 GMT
            Not After : Apr  8 18:48:16 2026 GMT
        Subject: CN=395A708CC468C1ACAA44EF964A1EADA4F7E96083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:31:56:33:17:5f:f4:2a:33:61:a9:77:3a:b5:
                    4f:4e:fb:de:99:7f:d8:70:a1:09:5a:88:66:d2:98:
                    8c:f1:07:78:1a:2b:ef:af:dd:1b:26:2c:ee:f2:95:
                    25:ee:78:6a:9a:c4:d5:0b:db:50:63:8c:83:8b:96:
                    77:66:79:2e:0f:c6:b9:d9:fa:b5:dc:d8:5d:d3:3f:
                    30:70:b8:d7:20:b0:11:c1:78:c0:43:20:93:20:7e:
                    0e:f8:40:cc:a5:ee:00:d9:f5:7d:10:8c:d2:a1:e3:
                    6e:3f:90:b1:d7:f8:2c:2a:7a:90:86:a8:0f:72:0b:
                    dd:9a:96:44:01:3c:d9:a8:11:5b:5f:cf:a4:14:d1:
                    ad:51:0d:c8:ba:56:d9:f6:8f:d5:d1:9b:dd:60:cb:
                    8d:07:0d:88:bc:a7:0e:de:d0:a5:9c:10:66:84:db:
                    99:43:f9:43:88:0c:13:6a:f1:72:1b:3b:26:01:1f:
                    17:f3:82:ea:e7:54:7e:14:23:47:ff:96:c4:49:30:
                    50:5e:96:ee:e5:6c:43:7f:d3:56:e3:b4:0d:54:56:
                    7c:27:a7:2c:05:b6:1b:a2:f4:24:bc:a0:91:32:e6:
                    bf:42:65:05:c2:33:5c:ab:7f:27:83:96:d7:d5:ed:
                    a2:fe:7c:1b:9f:ed:50:24:55:42:b6:10:c7:b1:f4:
                    39:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5A:70:8C:C4:68:C1:AC:AA:44:EF:96:4A:1E:AD:A4:F7:E9:60:83
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234372e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:dd:19:a1:a4:8c:8c:16:5e:e1:d6:19:fa:8b:f3:4f:bf:c4:
         9f:f7:e2:66:19:a1:be:e2:7f:e3:a2:3b:47:37:ab:0e:43:7a:
         dc:8d:16:13:59:97:66:67:77:b5:32:aa:fb:86:70:be:a3:d9:
         7e:3f:35:8c:0d:cc:79:3e:46:7d:1c:90:65:44:50:62:b7:d5:
         35:01:33:72:b9:38:f9:d6:11:a8:de:3d:4f:d6:8f:6a:e5:80:
         f1:3c:75:43:10:8f:17:c5:26:78:08:49:fb:3c:68:02:05:46:
         68:eb:80:07:99:72:9d:85:20:f4:70:49:a2:12:c0:49:d4:cd:
         ba:5e:37:c6:ca:71:e3:1a:da:3c:ca:d0:14:32:de:a0:4a:1c:
         92:85:e7:d8:90:af:a3:ca:33:ca:35:23:90:9e:80:5d:40:44:
         45:8c:8a:12:7c:e6:56:02:48:5f:58:e0:5f:9d:ba:19:b1:4f:
         09:08:63:98:57:a0:70:6a:10:7a:d9:5c:49:82:2a:81:00:8f:
         bb:4e:d5:44:43:39:b8:ed:9a:b0:fd:21:f6:cb:63:7b:04:ab:
         05:54:33:c6:cf:7d:4b:6e:33:a8:d3:aa:f0:81:5c:0c:ab:3b:
         c0:b4:7f:4b:80:2b:65:07:3d:40:7a:55:94:b8:f6:39:ca:72:
         ce:15:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:40:43 2025 by rpki-client on console.sobornost.net