Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa
File:                     3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa (raw, json)
Hash identifier:          UyldARDGvGm/XD7rbiw9gECmuFn0wDSn0Px7jIBy8Bk=
Subject key identifier:   6E:0D:76:23:C6:8F:81:2B:76:52:E9:58:E3:8A:6D:FC:8A:D7:8E:C6
Certificate issuer:       /CN=44D163BB7C285498620FF487902FE788F88F4349
Certificate serial:       0738BCD27457456BB7888E58221F28A0ED5B1F18
Authority key identifier: 44:D1:63:BB:7C:28:54:98:62:0F:F4:87:90:2F:E7:88:F8:8F:43:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa
Signing time:             Thu 06 Mar 2025 17:49:29 +0000
ROA not before:           Thu 06 Mar 2025 17:44:29 +0000
ROA not after:            Thu 05 Mar 2026 17:49:29 +0000
asID:                     270845
IP address blocks:        190.115.216.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl
                          rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:38:bc:d2:74:57:45:6b:b7:88:8e:58:22:1f:28:a0:ed:5b:1f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D163BB7C285498620FF487902FE788F88F4349
        Validity
            Not Before: Mar  6 17:44:29 2025 GMT
            Not After : Mar  5 17:49:29 2026 GMT
        Subject: CN=6E0D7623C68F812B7652E958E38A6DFC8AD78EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:54:5d:b5:a4:27:6e:c9:d6:7d:49:2c:e6:
                    90:d8:3d:69:f4:e6:25:a9:1f:da:a8:d0:4d:8e:f8:
                    39:ef:ae:91:14:71:f0:1a:81:7d:14:46:97:1b:07:
                    b1:c5:50:be:ce:c3:30:43:91:cc:da:86:97:76:78:
                    ea:a0:71:1b:c5:d0:ce:b6:63:e8:dd:fa:47:34:08:
                    4a:3d:87:37:35:8f:c6:9c:29:03:e5:50:5d:82:14:
                    c8:41:7d:a8:ee:a0:55:5c:b7:a5:3d:de:0b:70:d1:
                    85:6e:ee:d9:90:0c:a0:c7:21:db:b3:3d:ba:bf:ad:
                    a5:2d:df:f3:32:40:ed:26:8f:a2:27:ef:7d:48:44:
                    03:1d:6e:97:17:82:5e:52:00:ec:49:7d:2d:5e:94:
                    ac:bd:4d:13:c0:4c:5c:12:92:31:43:ba:af:57:22:
                    bf:da:9c:14:b3:0e:5b:1d:39:5f:54:d1:6d:2b:d5:
                    4d:85:ff:28:f7:d9:73:90:ad:de:9f:ba:91:07:82:
                    6d:4c:a7:22:99:ce:db:71:34:a6:92:c5:94:a9:d5:
                    6c:a9:ec:03:5c:df:75:bc:a1:68:64:1a:ae:56:2e:
                    b8:36:a2:e5:e2:a9:af:6f:3b:92:d6:a4:54:6d:3e:
                    37:65:ee:7a:ec:9b:97:e3:79:54:57:ff:48:49:f8:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0D:76:23:C6:8F:81:2B:76:52:E9:58:E3:8A:6D:FC:8A:D7:8E:C6
            X509v3 Authority Key Identifier:
                keyid:44:D1:63:BB:7C:28:54:98:62:0F:F4:87:90:2F:E7:88:F8:8F:43:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:6f:f4:79:39:ae:3a:7a:2d:ad:87:41:69:29:54:ac:17:66:
         fa:62:1e:64:0c:03:c4:44:9c:3c:95:67:7f:32:c3:74:04:c1:
         d1:e7:4c:83:0d:59:d2:f0:58:94:e1:af:21:aa:dc:c9:d8:53:
         52:3d:c7:7c:e5:cd:1f:8d:7f:74:c0:27:46:52:a1:fd:cb:00:
         14:2b:11:aa:f9:56:67:4d:10:33:3f:b8:fa:b1:71:ae:84:f0:
         c5:3e:f8:96:2d:f2:c4:da:1e:6a:17:5a:02:d3:2b:03:5b:4b:
         6c:0f:93:f7:cb:86:d5:0f:a5:2f:24:dc:8c:21:34:98:f7:92:
         b0:cf:87:54:2c:1d:58:96:20:9e:6e:db:3c:ba:8c:2f:b4:8f:
         d5:ff:5e:d5:79:60:e4:6c:54:ce:d6:6f:6e:c2:31:2e:06:61:
         55:3b:a8:7a:50:c3:48:ec:43:87:73:14:db:f4:b7:29:76:b9:
         01:d8:32:12:db:c8:d4:87:1b:bd:90:68:eb:70:65:1c:9c:cd:
         96:ef:60:68:57:c2:7a:03:12:7d:f5:15:a1:db:47:e0:f3:1b:
         9f:51:b5:5b:40:39:1b:43:f6:9d:ef:86:78:98:86:cd:d6:df:
         4e:1c:96:b8:a8:5f:bb:50:53:8c:3e:74:42:f1:7f:c6:5e:12:
         3f:eb:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:12 2025 by rpki-client on console.sobornost.net