Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137302e302f32342d3234203d3e20323730393638.roa
File:                     3138312e3232352e3137302e302f32342d3234203d3e20323730393638.roa (raw, json)
Hash identifier:          xlUJ29UdaGSqbnO7FXV2BheDjyF9XDhrXvYSpvSjZF8=
Subject key identifier:   9A:C5:31:B6:F1:24:25:12:75:60:4D:A3:51:0E:2F:02:3C:17:EF:0D
Certificate issuer:       /CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
Certificate serial:       45507A692356173906C9EA7A65B1409032D1902B
Authority key identifier: BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137302e302f32342d3234203d3e20323730393638.roa
Signing time:             Mon 14 Apr 2025 21:14:24 +0000
ROA not before:           Mon 14 Apr 2025 21:09:24 +0000
ROA not after:            Mon 13 Apr 2026 21:14:24 +0000
asID:                     270968
IP address blocks:        181.225.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl
                          rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 18:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:50:7a:69:23:56:17:39:06:c9:ea:7a:65:b1:40:90:32:d1:90:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
        Validity
            Not Before: Apr 14 21:09:24 2025 GMT
            Not After : Apr 13 21:14:24 2026 GMT
        Subject: CN=9AC531B6F124251275604DA3510E2F023C17EF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:96:a9:33:76:62:50:a7:ca:73:cc:d8:b3:
                    98:be:76:09:2c:bd:80:7c:c7:e4:03:19:4d:82:72:
                    cc:0a:f6:e8:18:2a:d9:65:34:66:18:34:82:38:bc:
                    cf:fc:51:78:fe:0d:e8:07:d5:27:4a:ac:a1:de:2a:
                    83:a8:94:18:7c:32:a2:ad:71:cf:42:ec:ec:b4:7e:
                    d9:be:2c:1e:91:49:7b:2b:30:dd:b7:7d:9a:5a:0e:
                    ed:dd:dc:ca:58:b1:62:c6:d5:a2:81:52:87:fb:2f:
                    fa:05:c4:40:c9:7d:53:55:35:db:87:c7:bb:45:06:
                    28:d5:aa:33:da:84:a8:d6:a8:d7:6c:c6:69:ec:90:
                    d2:01:98:17:37:33:f6:c8:5a:7b:1f:e5:86:4d:ad:
                    fe:9e:4d:cf:7c:f4:b5:97:63:da:4a:74:3c:1b:9a:
                    12:da:81:bc:5c:38:bc:fa:1f:54:27:24:ec:da:4b:
                    d8:68:31:b4:28:bb:3a:32:6a:43:91:08:61:ba:22:
                    ea:68:bb:e5:04:8a:e3:ba:08:89:2a:a5:8f:22:e2:
                    a9:6f:14:d2:4a:eb:55:2d:a0:7e:98:5b:3f:a2:9e:
                    1e:73:91:c6:e0:76:cb:7f:e9:2d:e0:9b:fa:1d:a8:
                    6e:87:45:c3:bf:c4:56:be:cc:59:fa:09:da:62:8a:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C5:31:B6:F1:24:25:12:75:60:4D:A3:51:0E:2F:02:3C:17:EF:0D
            X509v3 Authority Key Identifier:
                keyid:BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137302e302f32342d3234203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:a1:89:f1:a2:14:0c:56:a5:15:1b:89:78:b8:ac:6a:4c:cb:
         98:23:22:40:4a:62:0a:a1:4a:c4:b6:f0:5f:36:d7:f1:34:24:
         de:c0:6c:1b:e3:51:1e:38:5c:e8:59:dd:ef:eb:4f:d1:0b:15:
         7b:46:dc:df:d6:f7:02:4c:01:f6:c0:90:8b:81:9a:bb:51:12:
         84:f7:6a:64:e9:09:9a:82:38:69:bb:49:22:dc:d5:d1:69:5d:
         26:1f:ca:14:5f:1a:61:74:08:d8:80:fd:fd:85:fc:da:f7:17:
         50:51:84:56:c2:52:85:0f:07:0b:fe:1c:8c:5b:04:80:e1:32:
         14:d9:2b:ed:2f:1e:9f:87:da:99:b4:9e:bf:1c:73:a3:1f:e1:
         9e:cf:5c:ea:a1:b2:ed:36:71:95:26:2f:da:e6:90:a1:bc:3d:
         24:a2:d3:67:47:76:50:ac:39:4f:47:d2:17:cd:38:58:29:cf:
         d0:e7:b1:55:f7:95:02:6e:b8:3a:c8:f6:0d:b8:fc:37:e3:39:
         6a:bd:f1:cd:a4:95:a2:8b:c0:07:15:52:07:c5:12:61:da:f1:
         5e:23:aa:01:f3:3a:c1:29:63:c3:37:18:b8:ae:f2:93:7e:62:
         4a:28:df:c8:b2:68:e1:bf:fd:e1:46:ee:df:ea:f4:ff:43:d4:
         2d:d2:ec:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:09 2025 by rpki-client on console.sobornost.net