Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32332d3234203d3e20323636313633.roa
File:                     3138362e322e3234382e302f32332d3234203d3e20323636313633.roa (raw, json)
Hash identifier:          /fbOsOYs6AxQese14fmYriT6Fyl3hntENuETfI0hxzo=
Subject key identifier:   A6:96:BC:A9:AA:87:EA:88:B0:EF:70:D1:46:11:39:E5:DC:C4:52:63
Certificate issuer:       /CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
Certificate serial:       6FFAFA398B351D8950C9B8A00724AF79FC5131E5
Authority key identifier: 04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32332d3234203d3e20323636313633.roa
Signing time:             Mon 14 Apr 2025 20:27:37 +0000
ROA not before:           Mon 14 Apr 2025 20:22:37 +0000
ROA not after:            Mon 13 Apr 2026 20:27:37 +0000
asID:                     266163
IP address blocks:        186.2.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl
                          rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fa:fa:39:8b:35:1d:89:50:c9:b8:a0:07:24:af:79:fc:51:31:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
        Validity
            Not Before: Apr 14 20:22:37 2025 GMT
            Not After : Apr 13 20:27:37 2026 GMT
        Subject: CN=A696BCA9AA87EA88B0EF70D1461139E5DCC45263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:a6:9a:b3:00:e1:ed:20:e3:12:45:74:74:
                    f3:3a:ab:48:0c:72:b3:a4:4d:cf:83:05:5e:c3:b1:
                    f6:ba:b1:a3:da:c7:fa:be:ab:10:8a:88:96:08:72:
                    65:5b:a9:fc:79:59:8f:9f:ae:ce:fa:d4:33:de:c6:
                    e5:b7:7a:ae:af:59:cf:98:05:a3:2e:fb:4e:68:39:
                    28:b5:8f:16:c8:68:50:6c:00:44:50:dc:25:7c:b0:
                    ad:1f:9b:2b:0b:32:70:a5:dc:1e:91:32:42:48:8a:
                    f2:1b:2f:f2:62:74:a3:66:2e:0a:2b:d2:b4:8d:db:
                    f7:94:86:00:04:37:a4:b5:12:0d:3d:e9:fd:10:54:
                    2a:aa:62:3d:a2:19:70:86:e6:68:2e:ee:2a:10:c2:
                    a8:3a:0e:5b:c5:be:bc:14:6c:51:94:e3:48:a1:e8:
                    ca:61:25:c9:40:27:68:88:9c:d0:6a:fb:0d:17:52:
                    ae:59:93:e7:01:42:b3:31:42:fd:72:80:b8:06:1a:
                    41:ea:8c:bd:9d:69:7e:b3:9c:ca:08:4b:76:0a:12:
                    a3:bd:ad:de:5f:40:02:50:78:88:c8:2e:72:c3:81:
                    be:12:26:bc:0f:f5:6e:59:9e:96:c2:c9:f1:d5:df:
                    e6:86:96:cf:b9:b6:a8:b6:07:96:64:f8:e2:9d:b4:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:96:BC:A9:AA:87:EA:88:B0:EF:70:D1:46:11:39:E5:DC:C4:52:63
            X509v3 Authority Key Identifier:
                keyid:04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32332d3234203d3e20323636313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:d3:9d:7d:c9:55:5d:5d:15:0a:f6:04:e4:18:3e:1b:8e:2c:
         2f:49:9f:a7:4a:7f:54:c3:36:26:d9:7c:4c:e8:01:a6:47:4d:
         54:32:bd:45:63:d3:15:ad:8b:7b:0d:0d:d9:f5:b5:aa:ad:7a:
         7f:c0:3a:24:11:b7:64:0a:b7:49:61:7c:d3:31:73:10:15:44:
         e7:a0:7f:ae:5c:74:1d:d0:29:eb:f9:a2:ab:56:61:c0:e4:f8:
         00:74:7a:ab:55:00:33:09:5a:91:32:18:37:85:7c:b5:4b:c5:
         71:10:1c:c2:21:0c:2a:b2:13:a4:0f:96:03:1a:78:b7:67:d5:
         db:7b:99:04:0c:55:c1:f1:34:80:f9:30:45:fe:13:0f:d6:33:
         5e:6a:b2:36:64:9f:f3:00:df:23:67:63:e6:1f:56:6a:ae:0c:
         55:09:96:39:64:73:16:d9:d1:17:36:a8:98:6c:c1:e6:6a:c7:
         e0:e5:d5:2b:57:91:35:76:c3:12:6a:a3:af:d8:1e:0e:42:d7:
         ff:08:b6:57:d7:b2:e3:6e:d1:70:b6:6a:b8:ca:b2:03:16:b3:
         a2:ac:a8:ca:24:37:43:c8:de:78:9d:e4:e5:8a:43:82:9d:21:
         67:27:55:73:ba:4e:d9:e3:2a:6b:60:e2:0f:bc:2f:20:c8:cb:
         52:6b:d6:50
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb/r6OYs1HYlQybigBySvefxRMeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQxQjQ0QTlGOTZBMkU4MEVBMTkyODE5QkU5NTMzRkY3
Q0UxRjQwMTAeFw0yNTA0MTQyMDIyMzdaFw0yNjA0MTMyMDI3MzdaMDMxMTAvBgNV
BAMTKEE2OTZCQ0E5QUE4N0VBODhCMEVGNzBEMTQ2MTEzOUU1RENDNDUyNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeaaaaswDh7SDjEkV0dPM6q0gM
crOkTc+DBV7Dsfa6saPax/q+qxCKiJYIcmVbqfx5WY+frs761DPexuW3eq6vWc+Y
BaMu+05oOSi1jxbIaFBsAERQ3CV8sK0fmysLMnCl3B6RMkJIivIbL/JidKNmLgor
0rSN2/eUhgAEN6S1Eg096f0QVCqqYj2iGXCG5mgu7ioQwqg6DlvFvrwUbFGU40ih
6MphJclAJ2iInNBq+w0XUq5Zk+cBQrMxQv1ygLgGGkHqjL2daX6znMoIS3YKEqO9
rd5fQAJQeIjILnLDgb4SJrwP9W5ZnpbCyfHV3+aGls+5tqi2B5Zk+OKdtFL1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUppa8qaqH6oiw73DRRhE55dzEUmMwHwYDVR0j
BBgwFoAUBBtEqflqLoDqGSgZvpUz/3zh9AEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpLUHNUYzV2V2JDMmtoRmpFeWsyQnU1QkJtM3p0cjVzMXRuZ0R3VHR1
a2IvMC8wNDFCNDRBOUY5NkEyRTgwRUExOTI4MTlCRTk1MzNGRjdDRTFGNDAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MUI0NEE5Rjk2QTJFODBF
QTE5MjgxOUJFOTUzM0ZGN0NFMUY0MDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKS1BzVGM1dldiQzJraEZqRXlrMkJ1NUJCbTN6dHI1czF0bmdEd1R0dWtiLzAv
MzEzODM2MmUzMjJlMzIzNDM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM2
MzEzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBugL4MA0GCSqGSIb3DQEBCwUAA4IBAQBn0519yVVd
XRUK9gTkGD4bjiwvSZ+nSn9UwzYm2XxM6AGmR01UMr1FY9MVrYt7DQ3Z9bWqrXp/
wDokEbdkCrdJYXzTMXMQFUTnoH+uXHQd0Cnr+aKrVmHA5PgAdHqrVQAzCVqRMhg3
hXy1S8VxEBzCIQwqshOkD5YDGni3Z9Xbe5kEDFXB8TSA+TBF/hMP1jNearI2ZJ/z
AN8jZ2PmH1ZqrgxVCZY5ZHMW2dEXNqiYbMHmasfg5dUrV5E1dsMSaqOv2B4OQtf/
CLZX17LjbtFwtmq4yrIDFrOirKjKJDdDyN54neTlikOCnSFnJ1Vzuk7Z4yprYOIP
vC8gyMtSa9ZQ
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:27 2025 by rpki-client on console.sobornost.net