Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/3137302e38342e3233362e302f32322d3235203d3e20323634323730.roa
File:                     3137302e38342e3233362e302f32322d3235203d3e20323634323730.roa (raw, json)
Hash identifier:          yzT+NQqGX91mKcMCH68iZ8trlebofBkiOopDNLXVxUc=
Subject key identifier:   33:2B:00:A4:88:4B:65:DB:56:28:3A:8B:CD:04:92:0A:80:BD:86:02
Certificate issuer:       /CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
Certificate serial:       2801CF579B360E183872F1D4C9ECC7B30C1DB60A
Authority key identifier: B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/3137302e38342e3233362e302f32322d3235203d3e20323634323730.roa
Signing time:             Mon 17 Mar 2025 19:50:31 +0000
ROA not before:           Mon 17 Mar 2025 19:45:31 +0000
ROA not after:            Mon 16 Mar 2026 19:50:31 +0000
asID:                     264270
IP address blocks:        170.84.236.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl
                          rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:01:cf:57:9b:36:0e:18:38:72:f1:d4:c9:ec:c7:b3:0c:1d:b6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
        Validity
            Not Before: Mar 17 19:45:31 2025 GMT
            Not After : Mar 16 19:50:31 2026 GMT
        Subject: CN=332B00A4884B65DB56283A8BCD04920A80BD8602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:b4:91:5d:40:39:9b:f8:12:db:05:e2:d1:
                    bb:09:89:25:e8:e6:e4:6f:5c:ef:5a:53:2b:56:c8:
                    7a:8f:57:e6:f1:d9:d9:9b:05:29:02:12:e8:47:ae:
                    14:fc:24:93:36:a3:f8:dc:22:4f:6c:de:60:b4:71:
                    a1:82:24:39:33:30:62:51:68:3a:5a:23:5f:7d:b5:
                    02:60:20:ea:ed:19:42:92:17:a1:c4:f2:44:20:2a:
                    98:88:59:54:da:a3:e2:f0:a9:65:99:7d:38:77:e1:
                    0c:9f:59:94:8c:b1:23:8f:dc:78:b9:5e:8d:0a:ca:
                    97:44:64:ed:48:37:a7:8a:01:9d:79:70:e7:d0:5d:
                    b4:53:22:9d:e0:f6:b8:b4:38:e7:05:23:22:30:10:
                    a7:d5:cf:b1:87:2e:3f:80:c4:28:9c:77:4f:70:f5:
                    44:d1:4a:94:34:b6:5d:af:7c:eb:a4:ae:15:6c:46:
                    a5:e4:15:37:72:3f:ef:86:f6:83:ec:f0:a5:40:6d:
                    af:dc:d5:4c:39:08:00:90:ec:69:dd:44:54:a3:5d:
                    e5:84:1e:23:0e:1f:ed:b4:8e:3e:e0:f4:e4:a8:f9:
                    11:28:ea:17:3b:da:8f:70:df:b7:10:8c:a6:f1:ea:
                    2d:94:ac:1b:a5:02:4d:e8:ac:f5:fb:64:69:6a:f3:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2B:00:A4:88:4B:65:DB:56:28:3A:8B:CD:04:92:0A:80:BD:86:02
            X509v3 Authority Key Identifier:
                keyid:B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/3137302e38342e3233362e302f32322d3235203d3e20323634323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:18:9d:fe:ca:f6:80:e7:0c:a9:c7:b6:d4:2d:0b:b8:20:71:
         d9:0c:d3:35:3b:5e:33:f5:e4:39:5c:d9:32:9d:96:61:f8:df:
         0f:96:72:0b:2a:11:95:62:52:66:6a:8a:89:53:b9:2a:ef:99:
         31:7d:68:67:27:c6:f0:a1:bd:b6:db:de:12:7d:8a:dd:fe:25:
         43:a2:bf:d2:a9:fc:03:7d:b5:58:35:d1:86:ab:92:41:7d:08:
         0a:ad:43:19:56:b1:a3:5e:03:e4:32:0e:ec:24:7c:e8:c2:02:
         26:41:1e:01:2f:93:0c:15:db:1e:8f:55:ee:19:84:59:42:56:
         db:e3:f9:8f:b2:01:8a:b1:5b:4c:8f:c4:cb:1d:0b:aa:d1:38:
         a4:d7:cb:f5:8f:57:d0:3f:fe:76:fe:18:83:90:f0:31:aa:e6:
         77:54:46:3c:0c:b9:30:99:72:da:3f:d6:f4:2a:be:bc:d2:49:
         c5:3b:44:29:9b:70:43:fb:6c:74:d1:ab:c5:53:33:af:1c:63:
         35:36:2d:ca:ce:32:6f:d4:1f:3d:74:65:04:d8:a5:c6:ca:28:
         93:45:d9:a4:6f:09:0a:c0:31:70:42:b8:88:02:f0:61:92:4e:
         17:8e:21:85:ae:9b:31:2f:b1:5f:f1:65:d5:d7:e9:3f:23:b7:
         09:03:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:05 2025 by rpki-client on console.sobornost.net