Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136382e302f32322d3232203d3e20323730393638.roa
File:                     3138312e3232352e3136382e302f32322d3232203d3e20323730393638.roa (raw, json)
Hash identifier:          Ia2cn/HoORASdXRmdXge5UGDjM8GyUGin6VPfNOs9nc=
Subject key identifier:   B7:C9:FE:10:EE:A1:76:E3:9E:EC:68:E3:3B:D7:CC:2D:2B:5B:C5:41
Certificate issuer:       /CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
Certificate serial:       2A863EFF200D55C95F7D3E972C227E452CDB7267
Authority key identifier: BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136382e302f32322d3232203d3e20323730393638.roa
Signing time:             Thu 10 Apr 2025 15:35:35 +0000
ROA not before:           Thu 10 Apr 2025 15:30:35 +0000
ROA not after:            Thu 09 Apr 2026 15:35:35 +0000
asID:                     270968
IP address blocks:        181.225.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl
                          rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:86:3e:ff:20:0d:55:c9:5f:7d:3e:97:2c:22:7e:45:2c:db:72:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
        Validity
            Not Before: Apr 10 15:30:35 2025 GMT
            Not After : Apr  9 15:35:35 2026 GMT
        Subject: CN=B7C9FE10EEA176E39EEC68E33BD7CC2D2B5BC541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:ef:17:e2:ff:b1:28:39:bb:83:95:f0:87:
                    90:1c:f5:d7:b9:e3:3b:ad:97:e4:b9:b8:61:33:96:
                    85:22:ca:9e:74:2a:83:0d:9d:b4:62:0f:80:a7:3d:
                    ff:4a:59:56:da:4e:06:a7:b4:6f:40:73:32:c0:cb:
                    64:92:d6:53:57:ea:11:c7:7c:8d:6c:c0:d9:58:64:
                    1e:80:09:83:54:c1:84:81:ec:1e:50:e8:76:44:ec:
                    21:52:e4:48:29:29:40:56:c3:20:88:53:8c:da:06:
                    6f:23:be:d9:8b:fb:a4:59:8f:7e:98:09:1e:50:a9:
                    93:7e:a9:fe:b9:2c:1d:4d:0c:18:18:23:95:ab:78:
                    10:d8:bb:5a:ef:09:71:fe:e0:22:f5:88:91:6b:26:
                    fd:34:7e:05:b6:03:6c:f0:da:51:fa:bf:c2:ea:0e:
                    fb:3f:e4:71:2e:1b:a7:a0:cb:d6:85:27:3e:04:73:
                    9d:16:f4:35:7e:f7:31:aa:2c:13:cd:43:1e:7a:04:
                    43:c6:b2:99:da:20:82:2d:c8:75:a7:d3:6e:6b:a2:
                    e7:f1:b3:2d:ed:94:2f:71:55:7b:e7:c4:a4:26:56:
                    40:51:5f:fc:ee:92:06:91:9c:cc:67:ea:d4:fb:e8:
                    e3:43:d7:75:70:c0:51:39:d5:11:39:d1:8a:48:95:
                    14:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C9:FE:10:EE:A1:76:E3:9E:EC:68:E3:3B:D7:CC:2D:2B:5B:C5:41
            X509v3 Authority Key Identifier:
                keyid:BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136382e302f32322d3232203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:a8:3f:17:d0:88:c3:2e:e7:90:e8:aa:19:ac:bc:2b:4c:ec:
         f3:ef:e7:39:d8:82:58:79:94:fe:db:75:18:94:d8:9a:6d:ad:
         a2:8f:0f:be:3a:66:cd:7d:df:53:e1:45:ff:01:e6:15:ef:6b:
         12:d9:2e:7e:b7:31:de:e4:a7:d8:a5:26:a4:09:2d:63:4c:83:
         d0:07:2f:26:9d:e3:f7:20:ed:b7:68:8d:f5:20:cc:98:4d:e3:
         25:e9:4c:36:21:2c:5b:9a:00:e7:4d:4a:27:b3:10:1d:1f:51:
         4f:1e:9a:8c:59:34:49:c2:b6:7a:de:a3:ea:ae:c8:74:83:74:
         31:51:e8:66:55:53:ae:7e:7b:a4:e7:06:82:a6:67:d6:24:3c:
         7a:15:2c:61:d0:00:a8:0a:05:74:58:4b:e5:70:e9:d2:1a:08:
         9b:ed:1e:68:24:05:54:e4:2f:51:7d:df:c6:98:46:18:79:2a:
         d2:79:e2:e6:f4:24:73:6b:62:83:78:7d:1d:82:41:cd:72:89:
         fd:0f:e0:ce:19:14:81:ca:8d:cb:fa:67:96:cf:46:cf:b6:1c:
         1e:c5:45:70:36:78:0f:2f:ff:ce:09:06:1a:9b:67:af:25:ed:
         d5:59:22:b8:36:54:28:64:bc:77:50:48:de:7c:c6:67:ce:5a:
         d0:b4:51:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:04 2025 by rpki-client on console.sobornost.net