Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136392e302f32342d3234203d3e20323730393638.roa
File:                     3138312e3232352e3136392e302f32342d3234203d3e20323730393638.roa (raw, json)
Hash identifier:          3xGVMl/vsX/EKN9WU8mx1UL23N1Vu6M0OJVBn8B4ynE=
Subject key identifier:   E3:9F:F0:7F:B2:2D:13:8E:34:92:38:97:89:70:99:5D:54:78:C1:E4
Certificate issuer:       /CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
Certificate serial:       547D9065C93E2F2DF57990A3ED1C4BCEF2E738B9
Authority key identifier: BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136392e302f32342d3234203d3e20323730393638.roa
Signing time:             Mon 14 Apr 2025 21:14:24 +0000
ROA not before:           Mon 14 Apr 2025 21:09:24 +0000
ROA not after:            Mon 13 Apr 2026 21:14:24 +0000
asID:                     270968
IP address blocks:        181.225.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl
                          rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7d:90:65:c9:3e:2f:2d:f5:79:90:a3:ed:1c:4b:ce:f2:e7:38:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
        Validity
            Not Before: Apr 14 21:09:24 2025 GMT
            Not After : Apr 13 21:14:24 2026 GMT
        Subject: CN=E39FF07FB22D138E349238978970995D5478C1E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:a0:e2:15:9f:a6:91:81:fa:d2:08:09:38:
                    95:4c:8a:b6:71:34:8c:3e:53:84:d7:96:97:dd:5e:
                    68:ca:ec:47:c1:0b:dc:86:9c:a4:cb:1c:11:59:7d:
                    3c:81:7e:75:20:f6:52:71:e9:23:bc:65:f6:33:b6:
                    4f:67:40:4b:bb:c9:ac:c6:b4:98:31:28:d3:a1:2a:
                    60:93:12:d4:aa:43:2c:85:0a:22:b2:4e:c1:1c:8b:
                    4f:e5:af:15:c4:96:de:57:32:aa:9b:42:2d:f9:ab:
                    23:bd:b6:f8:9d:fc:e6:6f:b3:6a:d7:88:ad:1b:83:
                    06:66:e3:9f:9f:35:86:64:11:80:14:bb:4c:56:c1:
                    0d:54:ac:5f:7b:65:1f:54:ca:ad:10:a9:2d:70:d5:
                    7f:71:c2:b6:be:c2:c0:69:7a:d8:be:2d:6a:93:02:
                    ef:6c:b5:e9:e9:db:63:fb:61:9c:52:0e:6f:c3:d8:
                    5c:9a:34:15:ed:a8:cf:25:91:d2:ca:06:24:f7:04:
                    5e:32:83:d8:c5:59:ba:50:a7:b9:0b:12:67:dd:e2:
                    9c:02:bf:fe:d3:f3:40:76:27:6c:e6:75:60:3d:f8:
                    d3:a8:54:7b:b1:ea:03:db:b6:25:ce:47:45:f1:63:
                    40:76:a3:56:e2:ef:02:fb:a6:8b:5d:ab:76:99:16:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9F:F0:7F:B2:2D:13:8E:34:92:38:97:89:70:99:5D:54:78:C1:E4
            X509v3 Authority Key Identifier:
                keyid:BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136392e302f32342d3234203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:b2:ea:03:a7:c1:b8:62:f2:83:b0:e7:5e:78:d8:75:15:
         a6:bd:fd:24:f2:bc:4a:cc:14:b0:b4:83:41:fa:26:a6:98:2a:
         4e:b9:3d:7c:30:1d:ce:f8:21:b9:21:96:8e:67:e5:cc:a0:49:
         6e:cf:ad:60:e5:3d:3d:f0:e0:37:35:7c:53:5e:72:7e:07:5e:
         18:28:97:2a:34:b4:6e:7b:e1:24:9a:da:ad:4b:4d:fb:d4:68:
         2f:18:e0:05:37:5f:24:e7:87:c3:bf:d7:2e:de:bb:8f:27:85:
         33:cd:03:d8:f8:3c:cf:ff:87:33:7a:49:6d:ea:bb:ba:b1:6a:
         a5:a2:26:50:3c:f2:6e:67:08:a7:c8:d1:d4:52:7a:ba:05:bf:
         5f:71:28:ef:9b:09:1c:06:cf:86:9b:87:78:a9:a5:f6:5f:c6:
         3e:27:82:93:1d:fd:01:1e:ce:8f:5f:92:34:98:f6:de:78:22:
         10:b2:c6:a2:c8:48:fc:f4:df:41:4a:ac:45:08:a2:48:19:52:
         4c:a8:fa:d1:cf:e9:b7:23:34:52:84:ca:25:72:3b:60:ed:0c:
         89:73:da:44:9d:12:c3:f3:e6:b2:f8:a7:d2:0b:ab:7a:63:c3:
         02:03:14:9b:fc:49:e6:8e:3a:2f:21:ef:22:fc:89:d9:0b:25:
         44:5b:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:52 2025 by rpki-client on console.sobornost.net