Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e3234352e38342e302f32322d3234203d3e20323635303238.roa
File:                     3137302e3234352e38342e302f32322d3234203d3e20323635303238.roa (raw, json)
Hash identifier:          8hXKQaSWy633aKrsv0+uVtiv/vhWBkT7p7LaJ8Nh7fU=
Subject key identifier:   D8:69:8C:84:09:23:05:BA:F5:AF:CF:0C:A5:43:E6:DE:FC:58:54:32
Certificate issuer:       /CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
Certificate serial:       3DD09940D936E3B8C9197421A58049B2F71D3669
Authority key identifier: D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e3234352e38342e302f32322d3234203d3e20323635303238.roa
Signing time:             Wed 09 Apr 2025 19:56:18 +0000
ROA not before:           Wed 09 Apr 2025 19:51:18 +0000
ROA not after:            Wed 08 Apr 2026 19:56:18 +0000
asID:                     265028
IP address blocks:        170.245.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.crl
                          rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d0:99:40:d9:36:e3:b8:c9:19:74:21:a5:80:49:b2:f7:1d:36:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
        Validity
            Not Before: Apr  9 19:51:18 2025 GMT
            Not After : Apr  8 19:56:18 2026 GMT
        Subject: CN=D8698C84092305BAF5AFCF0CA543E6DEFC585432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:ca:39:96:d3:70:c4:a6:c4:92:f2:c3:58:
                    5e:82:f7:cc:2b:4a:fa:12:95:d5:a4:79:8d:43:94:
                    c1:25:91:0c:ec:50:73:ac:cd:22:e6:f4:c0:43:f1:
                    b3:8a:da:40:04:ac:3a:2b:f0:f3:cb:0e:71:ad:ee:
                    af:e3:27:26:ae:8c:eb:c7:d7:12:48:69:73:01:67:
                    6c:db:e0:97:7d:e3:0f:e8:af:25:e4:34:8d:1f:93:
                    9d:23:34:e2:10:41:88:a7:f3:3a:f5:15:1c:eb:a0:
                    b9:29:2e:77:52:b1:23:d2:ba:ad:c1:c0:88:51:c9:
                    be:68:1b:4d:98:55:fa:24:4d:84:55:21:36:4a:3e:
                    0e:10:66:db:cd:15:c1:09:e4:7b:b8:cf:3c:1e:7e:
                    0e:bd:25:0e:be:33:32:c6:46:30:b7:cd:e0:2e:7f:
                    48:9c:45:f4:e8:44:99:53:2b:28:21:a8:d6:57:d8:
                    22:18:7f:af:45:ae:90:aa:a6:2b:9b:cf:77:4d:e9:
                    7f:74:9a:83:81:f8:9b:96:6a:df:4c:e9:d8:d4:55:
                    12:cc:49:1e:46:b7:54:bb:2c:ee:b7:18:b8:9c:e1:
                    82:db:30:8c:43:96:b2:53:7f:d6:72:b8:51:c0:de:
                    a6:c5:d8:63:b2:12:04:a8:f5:0a:dc:a9:9c:ef:57:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:69:8C:84:09:23:05:BA:F5:AF:CF:0C:A5:43:E6:DE:FC:58:54:32
            X509v3 Authority Key Identifier:
                keyid:D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e3234352e38342e302f32322d3234203d3e20323635303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:3b:8f:80:d3:48:82:61:89:4a:67:b8:14:c6:95:33:2f:00:
         cc:2e:d3:17:64:b3:9c:4c:f2:13:be:30:a8:67:a2:9d:67:1b:
         fb:c4:bb:7d:58:3e:6d:98:dd:95:74:f4:04:68:8b:ba:df:7b:
         5b:bf:43:56:f8:59:c8:4b:1a:9f:e6:40:48:aa:30:a7:2b:55:
         b1:57:42:24:1c:97:b8:e5:56:1d:47:51:30:08:5d:bd:1d:20:
         d8:33:f6:e5:87:02:99:ce:99:b5:7f:3f:30:75:11:04:60:37:
         fc:ff:32:37:c7:1e:1e:18:7b:4b:8c:78:e3:d5:7b:ef:84:78:
         30:26:d7:62:5e:fb:7a:97:13:32:16:43:3c:4e:e9:05:f5:79:
         85:f5:85:93:01:11:4a:fb:40:8e:50:17:36:4c:ed:24:30:d8:
         1b:4f:54:78:5e:a5:ef:97:ce:51:92:cd:18:b2:9a:37:d8:dd:
         e7:c7:0f:5c:56:8d:68:01:a9:33:b9:6f:f0:a1:f2:bf:08:ad:
         c3:bf:ff:5e:8e:2f:d8:9b:e0:dc:85:a3:8f:aa:73:3e:30:f9:
         b7:df:2e:b7:17:ff:ce:c4:e9:ca:c1:bb:66:18:c6:ba:1f:4c:
         0c:02:69:d4:cc:bb:05:6f:31:33:bf:47:9d:26:d4:df:81:9b:
         07:f2:f8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:50 2025 by rpki-client on console.sobornost.net