Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3235302e302f32332d3234203d3e20323635303238.roa
File:                     3137302e38342e3235302e302f32332d3234203d3e20323635303238.roa (raw, json)
Hash identifier:          Pm09aNUeYLBixAZ2yoSMKDXIblItwK148nothloESuk=
Subject key identifier:   37:AA:9D:35:0E:12:97:6A:43:7F:E1:04:5F:9E:EF:70:2C:24:1A:14
Certificate issuer:       /CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
Certificate serial:       6929ADB7B0EF6762A6B5FA2D08ABEE91616C62F0
Authority key identifier: D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3235302e302f32332d3234203d3e20323635303238.roa
Signing time:             Wed 09 Apr 2025 19:58:06 +0000
ROA not before:           Wed 09 Apr 2025 19:53:06 +0000
ROA not after:            Wed 08 Apr 2026 19:58:06 +0000
asID:                     265028
IP address blocks:        170.84.250.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.crl
                          rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:29:ad:b7:b0:ef:67:62:a6:b5:fa:2d:08:ab:ee:91:61:6c:62:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
        Validity
            Not Before: Apr  9 19:53:06 2025 GMT
            Not After : Apr  8 19:58:06 2026 GMT
        Subject: CN=37AA9D350E12976A437FE1045F9EEF702C241A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:df:76:a0:19:e7:14:ec:34:2c:8b:7b:d3:ed:
                    9a:62:ff:2a:b6:09:a3:1a:a6:27:51:68:af:01:52:
                    c2:8d:cb:4d:41:b8:85:57:b6:0b:eb:b8:1c:76:85:
                    e5:28:4f:61:11:73:21:94:eb:89:57:7c:8d:e8:36:
                    61:02:96:d7:0c:60:78:ab:69:31:c2:97:cf:5c:1b:
                    a5:f3:0a:34:47:d3:ac:35:9a:46:fa:e4:4f:e4:1a:
                    0a:55:36:06:24:fb:0b:88:91:9e:94:3d:d1:00:a8:
                    8b:6d:c8:d2:2a:b2:eb:00:ba:1d:f2:12:7a:f1:ee:
                    a5:a4:1f:9b:ed:02:0a:f9:df:98:5e:07:15:97:a7:
                    ce:9c:42:f3:31:06:7c:dd:5d:d9:c0:0e:68:3a:57:
                    58:03:ce:5d:a4:62:65:26:b9:09:e1:67:bb:47:0f:
                    36:ff:97:2c:da:fa:75:fe:67:00:8f:78:7d:bd:e6:
                    1e:a7:70:55:d7:04:5d:2f:20:7d:8e:52:1f:5d:57:
                    fa:12:7c:e1:0b:3f:fa:f1:9b:6a:b9:ea:11:95:60:
                    3f:61:d8:1e:2d:2e:ed:b4:d1:78:9b:23:04:15:3f:
                    f0:c7:6b:dc:7e:3d:10:e9:bc:c6:b3:a2:92:65:b9:
                    50:cf:25:a8:cd:31:a8:0b:c9:d6:c8:b8:95:61:d6:
                    57:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AA:9D:35:0E:12:97:6A:43:7F:E1:04:5F:9E:EF:70:2C:24:1A:14
            X509v3 Authority Key Identifier:
                keyid:D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3235302e302f32332d3234203d3e20323635303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:c3:e9:80:51:f6:e2:b2:2a:0b:91:c4:92:93:27:87:0c:83:
         35:c3:5a:fc:26:b7:08:e8:54:de:20:f0:52:4d:5d:1b:e5:0e:
         bd:c6:4f:8c:ef:0c:a5:fd:a5:4e:1c:fa:74:98:f8:b9:69:80:
         f9:ca:c4:46:2f:24:dd:4e:ce:7f:af:bd:5d:1d:c3:e3:43:9a:
         0a:c3:bf:42:f6:c7:93:5e:cf:9d:a7:b2:a9:b9:06:60:b0:5a:
         6e:77:47:23:b2:55:43:1f:3e:a8:62:eb:5f:fb:45:18:5c:ec:
         ac:3e:d6:2d:a9:16:16:2f:bc:aa:40:97:21:b8:60:0e:6c:51:
         d5:b7:08:d2:4b:2e:f9:8b:3e:cc:f2:27:78:7e:21:06:b7:dd:
         4a:7d:2d:74:92:1a:95:1b:a3:ff:43:9e:1e:4e:e3:b7:cd:f3:
         8f:ec:bc:fa:d9:23:ed:87:37:be:92:4a:77:e8:53:1c:87:16:
         b2:f1:c7:94:9c:d5:b6:d2:7c:a1:0b:db:72:d5:3c:f9:c8:f8:
         cb:3d:62:ae:6d:b8:fe:89:5f:17:02:4a:52:65:ae:6f:a8:fd:
         13:c2:b7:85:a3:80:25:63:d7:43:8c:2b:74:5f:b8:04:e3:12:
         62:7f:63:7b:df:6f:5e:dd:1e:95:18:c4:cb:78:3e:fe:73:b7:
         e5:29:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:50 2025 by rpki-client on console.sobornost.net