Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/3137302e3234342e38342e302f32322d3234203d3e20323636343933.roa
File:                     3137302e3234342e38342e302f32322d3234203d3e20323636343933.roa (raw, json)
Hash identifier:          LVM6f6NqlwNOpa0UDh2nt42Ha/0wak2n0nBgRSzm2DM=
Subject key identifier:   0A:FC:EF:8E:7D:86:C2:FD:61:3A:E4:C3:63:D9:25:59:98:8B:7E:0D
Certificate issuer:       /CN=E91C1A315869758CDFD12EFEE57B881CFA756822
Certificate serial:       22073D283DBFF0056998430E9AB4702A70BBC743
Authority key identifier: E9:1C:1A:31:58:69:75:8C:DF:D1:2E:FE:E5:7B:88:1C:FA:75:68:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91C1A315869758CDFD12EFEE57B881CFA756822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/3137302e3234342e38342e302f32322d3234203d3e20323636343933.roa
Signing time:             Thu 06 Mar 2025 16:55:40 +0000
ROA not before:           Thu 06 Mar 2025 16:50:40 +0000
ROA not after:            Thu 05 Mar 2026 16:55:40 +0000
asID:                     266493
IP address blocks:        170.244.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/E91C1A315869758CDFD12EFEE57B881CFA756822.crl
                          rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/E91C1A315869758CDFD12EFEE57B881CFA756822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91C1A315869758CDFD12EFEE57B881CFA756822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 23:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:07:3d:28:3d:bf:f0:05:69:98:43:0e:9a:b4:70:2a:70:bb:c7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91C1A315869758CDFD12EFEE57B881CFA756822
        Validity
            Not Before: Mar  6 16:50:40 2025 GMT
            Not After : Mar  5 16:55:40 2026 GMT
        Subject: CN=0AFCEF8E7D86C2FD613AE4C363D92559988B7E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7c:6f:b5:5d:89:ec:20:b2:96:18:b3:d6:90:
                    25:24:d2:0d:cb:38:d7:1e:63:7d:60:85:ce:e1:2b:
                    2b:2b:84:9e:76:dc:f6:2f:00:2b:50:9d:8d:d1:6d:
                    e0:de:36:1c:9f:d8:fb:28:1b:db:35:94:2b:04:4c:
                    b7:d1:9b:de:96:6d:d8:31:43:b9:5e:ec:c2:20:6e:
                    0a:c6:cc:9f:fb:f4:5c:7c:01:e4:47:97:68:c6:e9:
                    4d:ec:98:a6:b4:ad:22:b3:d3:0d:b2:a3:2e:32:76:
                    99:0c:cf:af:4c:2d:0e:e0:41:14:e4:d4:09:cf:a1:
                    9c:5b:d1:76:30:f4:46:22:ab:fc:72:d7:ed:da:29:
                    46:d7:c6:3c:86:53:8a:de:ae:2d:f9:1b:47:1f:bb:
                    ca:dc:f0:e6:25:2e:0b:76:e1:d3:26:df:35:56:3b:
                    79:5b:18:6c:ad:25:8d:32:c5:0a:f5:3d:6c:0f:f8:
                    91:e8:c7:d6:33:bf:36:0b:a5:0c:6e:b9:08:6f:03:
                    6d:82:7e:44:31:98:06:16:ea:4e:f2:6b:7b:5a:80:
                    e8:5c:71:71:83:ae:55:cf:77:cd:56:3d:cc:63:4e:
                    f8:03:cb:95:08:1c:72:b5:91:31:a1:7b:63:7f:86:
                    cc:a2:95:4f:bf:a1:15:c1:5f:53:22:3f:29:b0:29:
                    55:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FC:EF:8E:7D:86:C2:FD:61:3A:E4:C3:63:D9:25:59:98:8B:7E:0D
            X509v3 Authority Key Identifier:
                keyid:E9:1C:1A:31:58:69:75:8C:DF:D1:2E:FE:E5:7B:88:1C:FA:75:68:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/E91C1A315869758CDFD12EFEE57B881CFA756822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91C1A315869758CDFD12EFEE57B881CFA756822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/3137302e3234342e38342e302f32322d3234203d3e20323636343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:77:b8:cb:1c:d3:91:a8:15:39:87:f2:ba:06:17:1a:89:97:
         be:60:f6:22:94:b8:d6:ab:6d:03:de:59:38:8e:6d:25:63:4c:
         8d:19:a1:e2:d8:b0:de:2d:a2:25:a0:90:09:b9:a5:9f:9a:ae:
         29:26:9a:3b:77:3e:aa:32:be:05:24:1c:3f:6e:a0:4c:b2:76:
         f0:2d:6e:a7:a5:0b:fc:7f:42:a4:c7:95:74:70:b2:82:95:fd:
         27:9f:2b:34:7e:be:ab:73:46:8a:bb:fd:2a:fa:f6:36:37:54:
         68:ef:47:51:f1:12:de:d7:45:88:e1:65:c4:13:3a:cb:a4:7f:
         34:b0:ad:d8:5e:8a:18:68:3f:77:b3:a0:c8:c3:80:49:c3:f8:
         2c:97:c8:60:87:59:41:df:aa:dd:23:ca:11:d6:8e:66:ac:d8:
         f3:37:c6:0c:4a:55:ec:ee:a3:eb:eb:00:da:e3:85:2c:77:1d:
         2d:93:82:b2:29:76:9a:16:4b:2c:0b:e3:db:99:28:7d:f9:26:
         34:fd:81:c5:65:95:40:3c:30:9e:f6:f3:13:52:53:21:f1:fb:
         94:50:70:92:dd:99:25:cc:d1:dc:34:f2:a8:bf:5e:03:66:94:
         54:8f:9c:dd:1b:c4:86:d5:66:e0:ea:3c:17:fb:b1:6f:c5:90:
         29:2d:82:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:39 2025 by rpki-client on console.sobornost.net