Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa
File:                     3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa (raw, json)
Hash identifier:          aO0SHpEJrP4XNtQuwqB7tN9pl9DDuzDBSC0/9pYo55g=
Subject key identifier:   CD:CC:6E:8D:F1:5C:2F:8E:DC:43:31:BC:67:23:6E:79:BD:4D:FF:4E
Certificate issuer:       /CN=1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E
Certificate serial:       472E7B8B1CE6F815D3D2E3A94A033E12B69DCAC3
Authority key identifier: 1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa
Signing time:             Wed 29 Jan 2025 13:17:59 +0000
ROA not before:           Wed 29 Jan 2025 13:12:59 +0000
ROA not after:            Wed 28 Jan 2026 13:17:59 +0000
asID:                     61632
IP address blocks:        168.232.184.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.crl
                          rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2e:7b:8b:1c:e6:f8:15:d3:d2:e3:a9:4a:03:3e:12:b6:9d:ca:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E
        Validity
            Not Before: Jan 29 13:12:59 2025 GMT
            Not After : Jan 28 13:17:59 2026 GMT
        Subject: CN=CDCC6E8DF15C2F8EDC4331BC67236E79BD4DFF4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:37:e7:49:8d:66:64:1c:3a:17:16:4b:b9:
                    ad:80:20:a0:23:12:1e:c0:37:f5:3c:4f:1e:47:55:
                    51:0c:fa:07:f2:0d:e1:13:07:9b:a4:0d:9c:9d:cd:
                    16:23:3b:7d:d9:ff:8d:b3:b9:55:35:46:3a:eb:7b:
                    06:56:99:7f:71:56:42:41:4c:c4:87:2d:30:95:ef:
                    04:5b:2c:28:a5:58:d3:fd:41:3e:af:1e:73:3e:08:
                    bc:8d:29:32:11:b4:d1:45:43:56:98:65:e1:54:2a:
                    aa:06:3f:48:a8:64:d6:46:90:9a:14:da:77:d8:83:
                    8b:c7:97:5b:3a:01:f0:b3:7d:f5:fe:03:65:27:b2:
                    31:d9:bd:61:0a:78:e6:c2:7d:7c:56:d8:5b:72:40:
                    b5:5d:17:27:89:cd:e9:d6:c9:0c:7e:97:c6:78:c6:
                    21:f1:9f:b6:2d:ae:52:f5:a3:bf:aa:8b:f3:86:dc:
                    82:b2:09:08:cb:86:84:ce:4f:e5:29:9e:b6:5e:8c:
                    a6:cd:47:38:8a:e6:6d:81:9f:54:b0:1e:da:dd:0a:
                    9c:60:b8:33:48:3a:e2:a4:70:17:d5:fb:a0:16:36:
                    11:f6:eb:62:77:e0:0b:3a:c0:78:20:03:bb:fa:5f:
                    86:2f:07:09:51:d2:92:7e:bc:4b:aa:24:67:14:ce:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CC:6E:8D:F1:5C:2F:8E:DC:43:31:BC:67:23:6E:79:BD:4D:FF:4E
            X509v3 Authority Key Identifier:
                keyid:1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:10:4b:a7:c8:af:7f:88:23:e1:a2:f5:6a:d1:2a:2a:97:bf:
         14:91:fb:59:80:72:98:a9:97:81:2d:a7:34:49:f5:86:3d:f5:
         0f:6a:30:72:99:fb:5c:4a:d7:e4:bb:7b:d5:1b:7b:02:a6:08:
         80:c4:f9:05:60:85:8c:bb:b1:dc:de:22:a0:80:98:15:e1:d8:
         da:29:63:99:0f:7d:db:13:4b:21:2a:1f:5d:92:b7:d0:1d:e8:
         70:34:36:d8:22:51:2c:e9:c0:8c:df:e5:5d:2c:01:70:a1:59:
         76:cd:c6:95:00:ac:09:3f:33:84:18:5d:c1:da:28:e4:dc:52:
         e6:30:d1:21:2a:76:7c:48:8f:59:78:ab:46:43:72:ee:41:d1:
         a1:99:bd:97:fc:04:f7:ae:81:95:44:83:c7:6b:81:e2:f8:39:
         3d:10:80:aa:b6:97:a4:67:ed:25:09:d8:4c:ef:fc:8b:b5:82:
         66:b7:e6:c6:b3:18:5b:e9:e2:83:85:f0:98:59:aa:43:ea:32:
         65:93:49:91:d9:39:e8:ec:3e:ad:42:bc:0e:91:83:06:94:88:
         35:15:b8:13:95:e2:58:9d:b9:d1:30:94:27:f8:12:3f:37:1b:
         ee:49:7c:71:97:fe:74:f7:58:7a:ab:81:d0:0f:d4:8f:a2:9e:
         f3:a0:46:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:54 2025 by rpki-client on console.sobornost.net