Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/3137302e3233392e3131362e302f32322d3234203d3e20323634343236.roa
File:                     3137302e3233392e3131362e302f32322d3234203d3e20323634343236.roa (raw, json)
Hash identifier:          9Jlqp5Ba49zkfKPOVnj/ygRZpgTvys5JgEStbAt2rag=
Subject key identifier:   5F:6E:76:46:49:CC:53:A1:66:8E:DB:54:0B:EA:C6:E9:77:B8:6D:B6
Certificate issuer:       /CN=6B28FAFEC514EC712BA58E039BC893491ECD0FD1
Certificate serial:       636B51F0860221EF5EF8C8C5CF6CBE36D501CAB2
Authority key identifier: 6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/3137302e3233392e3131362e302f32322d3234203d3e20323634343236.roa
Signing time:             Thu 06 Mar 2025 19:00:01 +0000
ROA not before:           Thu 06 Mar 2025 18:55:01 +0000
ROA not after:            Fri 06 Mar 2026 19:00:01 +0000
asID:                     264426
IP address blocks:        170.239.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.crl
                          rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6b:51:f0:86:02:21:ef:5e:f8:c8:c5:cf:6c:be:36:d5:01:ca:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B28FAFEC514EC712BA58E039BC893491ECD0FD1
        Validity
            Not Before: Mar  6 18:55:01 2025 GMT
            Not After : Mar  6 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a6:e2:81:20:b9:b6:e7:56:91:58:c4:21:ec:
                    aa:07:96:d9:1f:04:6e:10:dc:e8:c9:54:6e:9e:7d:
                    71:41:97:7d:16:86:ec:cf:9d:d2:c2:b7:1f:53:6c:
                    cc:ec:a9:90:68:f0:14:fd:a2:86:7b:5a:70:1b:4e:
                    b0:c5:d6:18:1e:bc:44:6f:72:f0:d6:91:83:42:f0:
                    9d:82:f4:3a:91:17:a5:22:bd:8b:7a:72:0d:b1:73:
                    fb:4b:2c:60:69:73:57:d5:01:61:96:e0:5a:87:4e:
                    31:d2:46:1e:17:f3:6e:d8:c7:a6:a9:95:2f:94:1b:
                    8d:4f:94:ca:17:0c:92:5e:99:8f:fd:5f:ec:51:d8:
                    59:78:1e:9a:ae:5a:9e:a5:8b:53:82:3b:f1:b6:c8:
                    17:9b:4c:67:d4:b5:09:e4:b4:59:7a:55:ed:b2:2f:
                    72:f5:0f:9f:39:17:31:ed:01:5a:ec:7d:4b:f2:0b:
                    f3:fd:f9:7d:44:7d:48:88:11:b9:2c:3f:38:5c:d2:
                    d6:ab:af:4e:e3:7e:bb:b9:fa:87:78:66:27:b6:94:
                    b8:5f:31:4c:93:1b:83:f2:2c:1a:fc:62:9f:2e:d3:
                    5b:aa:a3:47:2d:d3:78:ec:1e:c4:1f:fa:16:8e:c1:
                    15:8f:d4:ce:10:96:fc:16:55:7b:03:52:93:1c:e1:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6E:76:46:49:CC:53:A1:66:8E:DB:54:0B:EA:C6:E9:77:B8:6D:B6
            X509v3 Authority Key Identifier:
                keyid:6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/3137302e3233392e3131362e302f32322d3234203d3e20323634343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:d7:3e:d4:d9:32:20:f0:66:f2:0b:70:fc:d5:2a:50:e0:
         27:33:c6:f3:30:5e:d0:54:50:6d:ff:7a:02:b6:78:3f:4d:47:
         41:0a:4f:f5:d6:1a:e1:4f:98:11:22:de:5e:83:12:5f:cb:9c:
         ed:b9:5f:33:fe:d4:fb:fa:51:60:d6:0f:40:45:01:c8:4b:10:
         d2:3e:8d:e7:9c:2c:7b:59:22:d7:7f:aa:7a:bc:f9:80:e7:99:
         75:74:51:1a:ed:f5:f6:ae:a0:4b:03:18:b9:3a:25:a5:b7:69:
         3d:69:30:0a:53:89:b7:e5:fc:ff:d1:80:fe:57:9d:0d:99:6d:
         de:0f:73:37:c2:e3:f5:df:2f:e7:cb:69:cc:ce:f5:8c:1f:85:
         5e:43:89:8e:d8:4a:b5:f4:5b:6d:f6:ce:c8:4d:0f:f7:88:5f:
         cf:52:2d:f9:fa:45:63:33:db:b4:94:97:6d:dc:10:1a:bb:57:
         af:27:ad:05:36:6a:e6:8b:3b:78:f1:69:20:5b:21:aa:6e:9a:
         ac:43:37:48:90:cf:18:b0:ca:05:29:05:1f:97:46:55:76:f9:
         e7:31:97:cc:e6:00:fc:22:79:d9:77:1d:8f:3d:0d:25:56:3e:
         d0:fd:78:ae:70:d9:95:b0:87:54:b3:2d:d4:4f:5e:89:ff:e3:
         ed:d0:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:34 2025 by rpki-client on console.sobornost.net