Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/3138392e33362e3234382e302f32322d3235203d3e20323634323730.roa
File:                     3138392e33362e3234382e302f32322d3235203d3e20323634323730.roa (raw, json)
Hash identifier:          NzyHHq1qAWt74UHK59agAbltMJ0sqf3M8nzX/IcRnkM=
Subject key identifier:   1F:73:E1:20:A2:CA:4D:73:ED:B9:EA:0B:A5:20:BD:22:74:4D:07:FF
Certificate issuer:       /CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
Certificate serial:       435B25ACB68395FD4E5FE2EAA27D1D20FAFE740A
Authority key identifier: B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/3138392e33362e3234382e302f32322d3235203d3e20323634323730.roa
Signing time:             Mon 17 Mar 2025 19:50:31 +0000
ROA not before:           Mon 17 Mar 2025 19:45:31 +0000
ROA not after:            Mon 16 Mar 2026 19:50:31 +0000
asID:                     264270
IP address blocks:        189.36.248.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl
                          rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5b:25:ac:b6:83:95:fd:4e:5f:e2:ea:a2:7d:1d:20:fa:fe:74:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
        Validity
            Not Before: Mar 17 19:45:31 2025 GMT
            Not After : Mar 16 19:50:31 2026 GMT
        Subject: CN=1F73E120A2CA4D73EDB9EA0BA520BD22744D07FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:51:8c:2a:2a:8e:0e:7c:ce:a0:6f:c9:20:
                    78:54:f5:60:cc:87:3a:84:68:1e:45:8d:0f:67:d4:
                    91:c2:a0:75:97:97:5c:03:b2:0d:c8:f4:77:24:6f:
                    67:46:a0:47:33:b2:77:34:06:bf:d1:01:35:68:e2:
                    02:51:1e:3e:0a:18:48:67:a2:2a:7c:3f:83:3d:6b:
                    0d:97:f3:02:35:40:8a:c8:bb:ea:d1:48:91:67:36:
                    32:91:16:1f:5a:6f:62:14:32:be:1b:df:69:00:70:
                    6f:cf:78:ce:78:f3:a9:b3:65:12:0f:ba:d8:d8:46:
                    8b:a4:a1:06:ea:8a:25:f5:45:a3:db:b6:89:56:70:
                    37:4d:02:31:4e:79:1b:fc:8b:6a:69:d1:bf:4f:63:
                    68:53:b8:11:06:52:35:f1:8e:d9:f3:07:05:dc:d1:
                    c1:f2:34:72:2a:be:8f:21:0e:65:03:6c:e1:ec:13:
                    7f:8b:aa:c7:98:a5:57:fc:a9:98:63:4a:c0:49:cb:
                    13:7f:aa:ad:0e:96:50:aa:52:be:27:bc:7a:55:47:
                    35:31:56:18:3a:6a:24:bd:0c:d7:e6:3c:0e:65:00:
                    ea:0d:e8:4e:e3:b8:f7:8d:88:5e:80:93:1c:30:1a:
                    f9:21:6d:1c:2a:ab:c0:8b:21:01:26:2a:7c:70:07:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:73:E1:20:A2:CA:4D:73:ED:B9:EA:0B:A5:20:BD:22:74:4D:07:FF
            X509v3 Authority Key Identifier:
                keyid:B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/3138392e33362e3234382e302f32322d3235203d3e20323634323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:9f:60:53:c1:ef:8d:e4:1d:12:82:16:92:99:a8:55:52:ed:
         6b:bf:1f:22:40:41:78:3c:cf:a8:b0:78:81:3f:3c:9a:75:5d:
         0a:ff:a2:cd:fd:4d:23:e6:ee:29:7a:ce:ae:90:49:67:4e:12:
         ca:10:79:3e:e2:9c:e6:14:ea:de:43:2d:82:33:b0:78:57:e7:
         3d:87:82:64:94:39:41:e9:96:65:d6:74:2d:04:d0:dd:ce:2c:
         be:a9:ea:ca:68:74:84:49:17:30:ce:64:5b:76:93:2e:29:5a:
         64:fc:4f:e9:e2:f0:8a:a8:25:bf:71:0e:16:d7:27:01:b7:e6:
         ac:b1:e0:d6:b9:19:99:29:a5:ff:b3:87:0d:1d:f5:b4:07:02:
         d1:45:b5:23:ac:9d:4a:ab:cd:9f:23:8d:13:dd:50:e8:f9:2d:
         27:2c:08:eb:f8:aa:6f:a0:ae:35:cc:f5:f7:3a:13:f6:38:ab:
         fc:80:08:5a:1b:c1:06:cd:98:08:f7:5e:f4:2c:7a:23:d3:d3:
         9b:93:34:42:18:59:ae:46:e7:b4:b7:4d:6b:18:40:aa:0e:ab:
         3c:59:3d:95:3d:21:bc:8e:b1:1f:b2:33:6d:fc:18:e5:6d:bd:
         66:ae:7b:dc:9b:dd:1c:3c:2e:93:a0:57:97:bc:99:17:d1:c0:
         39:ee:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:53 2025 by rpki-client on console.sobornost.net