Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/3132382e3230312e3230342e302f32322d3332203d3e20323636363438.roa
File:                     3132382e3230312e3230342e302f32322d3332203d3e20323636363438.roa (raw, json)
Hash identifier:          cDoThyIGBv18mp/kmXu+Sw3q17l/WFRZiTQQbLDiifA=
Subject key identifier:   2D:FD:FB:A1:B6:40:C7:5B:DB:1F:5F:6C:3B:CC:03:E6:EB:43:B7:E8
Certificate issuer:       /CN=FD1F02FB13B8A44549F4A7647596B707E14850D0
Certificate serial:       5B9E97C0552CF9C2CD2C21B9277D43C817D125CA
Authority key identifier: FD:1F:02:FB:13:B8:A4:45:49:F4:A7:64:75:96:B7:07:E1:48:50:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/3132382e3230312e3230342e302f32322d3332203d3e20323636363438.roa
Signing time:             Thu 06 Mar 2025 10:39:11 +0000
ROA not before:           Thu 06 Mar 2025 10:34:11 +0000
ROA not after:            Thu 05 Mar 2026 10:39:11 +0000
asID:                     266648
IP address blocks:        128.201.204.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.crl
                          rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9e:97:c0:55:2c:f9:c2:cd:2c:21:b9:27:7d:43:c8:17:d1:25:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD1F02FB13B8A44549F4A7647596B707E14850D0
        Validity
            Not Before: Mar  6 10:34:11 2025 GMT
            Not After : Mar  5 10:39:11 2026 GMT
        Subject: CN=2DFDFBA1B640C75BDB1F5F6C3BCC03E6EB43B7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:76:84:fa:c8:68:27:7f:7d:dd:b6:4a:40:
                    52:2c:4e:6d:30:76:b0:d9:ff:2a:a3:11:43:88:9a:
                    ae:8f:fa:12:21:a5:53:a2:0c:c8:30:87:9b:b2:34:
                    68:da:2b:2f:b9:05:eb:ff:66:75:86:20:ff:23:ba:
                    99:de:df:7d:cb:b5:ee:5c:2a:96:d7:42:05:2f:c5:
                    4b:ac:0b:36:f5:d3:46:78:77:e9:bc:b4:0c:31:a3:
                    19:e9:6a:e7:38:b3:da:9f:ec:97:bd:c2:0d:b6:11:
                    21:b8:08:5c:e6:63:0b:c9:47:30:a3:e5:26:f7:4f:
                    08:e3:cc:68:00:9c:84:96:bf:6d:40:ac:39:40:6b:
                    83:39:82:f0:e1:b6:63:38:d7:7b:0c:85:fd:30:26:
                    a0:4c:10:31:e6:3a:d4:a9:cb:dd:34:0c:a4:91:ab:
                    ef:70:c7:57:fb:31:38:e4:cf:c9:63:6f:80:49:a8:
                    8d:1f:d7:8f:76:3c:d3:a9:c5:b9:fd:38:6b:d0:44:
                    e5:e5:f1:9a:f3:02:c8:7a:b9:d7:54:3a:b3:b8:e5:
                    01:96:9d:bf:ee:56:36:e9:54:14:21:b1:f5:76:c6:
                    60:78:67:c2:e3:20:5b:d8:6a:18:4c:74:55:7a:f2:
                    ed:11:83:26:6b:8c:96:8c:11:96:24:41:0b:fc:8f:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FD:FB:A1:B6:40:C7:5B:DB:1F:5F:6C:3B:CC:03:E6:EB:43:B7:E8
            X509v3 Authority Key Identifier:
                keyid:FD:1F:02:FB:13:B8:A4:45:49:F4:A7:64:75:96:B7:07:E1:48:50:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/3132382e3230312e3230342e302f32322d3332203d3e20323636363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:61:ea:b4:ad:a0:5e:84:ed:d1:23:8e:fe:f2:f6:cc:96:3c:
         86:fd:b3:d5:00:6d:cb:12:5e:82:3c:39:08:a9:bf:2c:d8:51:
         b1:99:2a:00:fb:c9:bb:f4:cc:4c:62:91:af:8e:76:1c:db:c4:
         fa:0c:bc:1f:0a:97:d9:2a:83:7f:b2:03:30:a1:67:91:62:4a:
         81:d1:45:92:13:b5:69:04:fc:00:73:30:e6:96:64:63:8a:5b:
         91:82:c1:83:61:33:88:93:63:d9:94:14:21:ab:bc:e2:f1:1a:
         8c:c2:9e:9c:f3:b6:9e:63:0b:e9:b6:39:2d:c6:e3:54:21:c1:
         c9:ee:d3:1c:9d:46:74:d8:f4:87:42:11:3d:87:bb:d7:00:26:
         a1:11:ae:92:49:71:c1:1c:15:59:9e:63:d4:2d:c5:01:45:63:
         5e:fe:5c:0a:48:ce:5d:74:a4:78:dc:d7:d0:b4:95:d4:eb:fd:
         dd:9c:2e:57:6d:5a:dd:90:61:9b:b3:ec:fb:a3:f8:17:8e:73:
         d8:ee:46:f9:9c:f6:47:7d:33:ee:99:40:18:34:99:b1:95:f9:
         78:1d:74:45:ff:18:5e:8e:05:fc:30:9c:24:df:bd:37:23:6a:
         15:2d:7d:61:c8:91:82:fd:33:e2:46:3c:d3:d2:e5:ae:5a:84:
         e2:e5:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:44 2025 by rpki-client on console.sobornost.net