Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/3137302e3233392e3137362e302f32322d3332203d3e20323635323339.roa
File:                     3137302e3233392e3137362e302f32322d3332203d3e20323635323339.roa (raw, json)
Hash identifier:          mUHah8NtMU4Mwl/oVJwau4tBwzo8P/nJRcYyoHkAOes=
Subject key identifier:   70:2F:40:C0:95:AC:DA:A4:6C:29:7F:EA:C4:00:FA:13:BD:37:54:91
Certificate issuer:       /CN=166002DF14C56775A516493F63DE105DB90809F3
Certificate serial:       08DFEFA76A2E530BB9274745ABE9AB47F12ABF2D
Authority key identifier: 16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/3137302e3233392e3137362e302f32322d3332203d3e20323635323339.roa
Signing time:             Thu 10 Apr 2025 19:35:21 +0000
ROA not before:           Thu 10 Apr 2025 19:30:21 +0000
ROA not after:            Thu 09 Apr 2026 19:35:21 +0000
asID:                     265239
IP address blocks:        170.239.176.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl
                          rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:df:ef:a7:6a:2e:53:0b:b9:27:47:45:ab:e9:ab:47:f1:2a:bf:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166002DF14C56775A516493F63DE105DB90809F3
        Validity
            Not Before: Apr 10 19:30:21 2025 GMT
            Not After : Apr  9 19:35:21 2026 GMT
        Subject: CN=702F40C095ACDAA46C297FEAC400FA13BD375491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:11:ae:bf:ea:14:b5:07:1d:01:e1:72:cb:5e:
                    d7:7a:0a:a8:2d:a8:bf:2e:bf:f6:23:4d:a0:a0:b9:
                    b5:c4:5c:0b:be:5e:cd:61:13:7f:9b:d6:a5:45:43:
                    2c:a9:68:17:52:ce:bf:f8:95:35:0e:dd:a1:af:a9:
                    79:a3:78:2e:35:bc:67:c2:2a:9c:56:e8:25:d6:29:
                    d3:4b:ea:c8:ce:b3:de:48:6f:dd:09:99:4e:fa:eb:
                    cc:63:b3:85:cc:33:59:21:e5:ff:40:87:36:86:ca:
                    95:47:dc:f8:75:71:58:d7:aa:de:bf:90:80:40:ef:
                    5e:0a:bc:b6:5d:b7:37:84:a0:4a:47:ec:65:bd:3c:
                    09:22:48:02:b9:bf:a8:c4:a1:58:29:99:97:15:ad:
                    15:a9:6b:ac:b2:f6:cc:c1:55:de:dd:18:6f:d9:2e:
                    50:7d:be:7f:24:12:d5:bc:08:08:1c:dc:c5:1f:84:
                    29:51:a5:77:65:4b:0e:20:2f:8a:dc:42:39:bd:3a:
                    1d:20:f2:71:9f:7d:ba:06:65:5a:c9:52:99:b9:8e:
                    6b:fd:cb:40:23:9e:df:67:96:75:7d:24:ac:b4:4a:
                    e2:88:e8:af:da:fb:60:d5:c7:32:05:29:e3:34:1f:
                    1a:a3:8e:4e:ec:17:ca:53:ab:ba:81:a3:df:de:76:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2F:40:C0:95:AC:DA:A4:6C:29:7F:EA:C4:00:FA:13:BD:37:54:91
            X509v3 Authority Key Identifier:
                keyid:16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/3137302e3233392e3137362e302f32322d3332203d3e20323635323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:07:d4:eb:fd:db:77:56:b9:06:a0:39:08:a1:df:79:f4:27:
         31:13:69:83:f3:8f:72:51:14:d4:53:17:e3:0d:8f:71:e0:68:
         17:d3:a4:59:e1:43:10:ed:d5:aa:ee:6e:6e:b1:16:60:83:dc:
         45:93:41:ef:85:83:8a:61:a4:18:09:29:01:56:18:9f:6f:22:
         3a:d0:61:43:25:39:c7:8a:54:dc:24:1c:b3:8f:98:df:2c:43:
         30:39:a3:2c:b2:54:3b:c5:b8:53:67:55:90:01:00:36:ea:83:
         24:ef:8f:70:c3:d0:dc:28:21:66:1e:9f:7f:40:5e:8d:ac:a5:
         0d:69:11:7f:63:39:d7:49:2a:a2:f8:2e:9a:ed:64:63:d2:a3:
         57:f4:fe:13:f7:36:68:3f:e9:fa:4c:53:60:d7:00:d4:da:e9:
         46:cb:95:d7:7d:04:b9:d8:be:e0:17:af:fa:8c:17:51:9b:7c:
         4e:93:83:00:87:31:78:9f:61:87:e2:4e:f2:a3:a8:51:12:1c:
         3b:7a:b5:f2:05:1c:99:f7:34:04:cb:b6:7a:9f:df:72:9a:6c:
         09:ef:c1:17:8e:2d:f6:03:d0:2d:7a:ce:6e:22:bf:0e:51:ad:
         ef:34:17:eb:0e:0d:f5:b2:ad:2f:7c:56:9c:ba:e0:e8:a3:ec:
         d6:3b:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:25 2025 by rpki-client on console.sobornost.net