Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa
File:                     3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa (raw, json)
Hash identifier:          MuxS4BnEz3OAvZyyhAb2CZ4pf0m9nzjE5a7zG2BLklI=
Subject key identifier:   6B:0D:AC:AE:0E:05:24:A5:86:BB:EC:01:38:34:5F:9F:A2:08:13:C1
Certificate issuer:       /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial:       64F0F4FB199D1102E25D2F032DA0E25C14A38181
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     28334
IP address blocks:        168.227.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
                          rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 07:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f0:f4:fb:19:9d:11:02:e2:5d:2f:03:2d:a0:e2:5c:14:a3:81:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=6B0DACAE0E0524A586BBEC0138345F9FA20813C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9a:52:18:f9:b1:91:5a:51:22:51:8f:13:41:
                    6c:b2:29:b4:12:16:4e:9a:96:85:3c:70:21:f7:08:
                    fc:ee:45:62:95:2a:2a:55:07:da:ad:0e:4d:98:5f:
                    08:d5:12:5a:1e:bf:3f:f1:a8:6c:70:14:fa:6d:f9:
                    cb:ca:3d:54:af:21:7f:d3:41:fd:f6:b2:84:ab:89:
                    ea:f5:c1:54:b8:1e:af:ca:41:27:79:5b:18:f1:54:
                    af:c1:4d:74:11:09:01:50:ed:4f:c0:ce:53:4d:4d:
                    91:f5:ed:14:d8:36:8d:36:5b:39:34:cc:1d:e8:9b:
                    1a:7a:c7:10:05:a3:98:89:11:01:ac:8e:10:69:8e:
                    7f:d6:a3:3d:71:c6:9a:4f:bd:e9:c2:de:15:b9:1b:
                    a4:d7:34:9b:be:ed:78:8d:a8:bf:4e:da:65:6b:7a:
                    b4:d2:80:ec:6f:11:de:67:14:f2:26:49:8e:99:29:
                    4b:d5:1f:9d:0c:fe:74:40:4e:c5:48:29:33:05:ca:
                    44:89:e3:78:01:c8:06:bb:d7:61:e2:59:3d:7b:e0:
                    2a:df:47:0b:b2:ae:ca:7c:fa:2e:5b:89:13:f4:dc:
                    05:7a:78:c3:68:11:9c:e7:6e:f4:d4:a1:6f:0b:9c:
                    e5:84:22:22:37:ad:68:e5:bc:9f:d4:89:5c:de:37:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0D:AC:AE:0E:05:24:A5:86:BB:EC:01:38:34:5F:9F:A2:08:13:C1
            X509v3 Authority Key Identifier:
                keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:89:b5:13:2f:68:b3:b3:ad:3b:46:6d:09:14:88:74:dd:0c:
         f1:89:62:88:09:2c:5a:ca:73:a3:a5:c4:92:ca:67:01:d2:60:
         8f:de:b8:f0:0f:81:73:6f:7a:5c:f9:6b:df:a3:32:3c:da:97:
         f8:22:64:c8:dd:e5:57:b0:d0:9f:3a:d9:c3:85:04:27:7c:75:
         3b:f2:44:65:39:24:7f:13:7d:1c:a1:c7:25:fd:6b:77:ca:fc:
         d5:3d:de:8c:67:ff:4e:d0:80:29:0d:51:61:26:45:cb:59:70:
         03:a4:a6:c1:dd:2e:7c:29:2b:dc:ee:af:ed:7f:62:c9:32:11:
         90:4b:ff:4e:ec:80:05:8d:79:da:a3:60:f8:f0:d5:fe:f4:8f:
         c8:32:83:1f:62:c2:eb:13:39:fd:87:89:d1:8f:f1:28:0c:1e:
         1f:88:6b:93:73:03:9c:0e:47:8e:bf:8e:a5:66:50:23:00:83:
         cd:b2:7e:dc:a1:41:8e:4f:7b:72:a4:d1:9a:88:80:d3:1a:51:
         a8:32:1d:02:e4:e2:0e:4a:44:5c:76:b7:47:c9:1c:ea:ba:4e:
         9b:11:42:d2:c4:21:ca:09:3e:74:53:6c:12:ff:db:ce:3c:50:
         aa:29:86:57:05:f4:02:9e:4a:70:e3:a4:82:47:c1:b7:32:75:
         bc:41:ba:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:06 2025 by rpki-client on console.sobornost.net