Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa
File:                     3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa (raw, json)
Hash identifier:          a9SB983y2dVGu+jqLaB4MsOehbR64ZsKXVetDVSUYXk=
Subject key identifier:   6E:8F:2A:27:F4:BF:D4:14:47:5B:DB:7D:A6:ED:59:99:2E:5B:45:E1
Certificate issuer:       /CN=650CDA051146F7753756149BDB6B92197765D95E
Certificate serial:       0DAE77DF5B77A201A9C33AEF3E447764EA06415D
Authority key identifier: 65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     270272
IP address blocks:        200.115.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl
                          rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ae:77:df:5b:77:a2:01:a9:c3:3a:ef:3e:44:77:64:ea:06:41:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=650CDA051146F7753756149BDB6B92197765D95E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=6E8F2A27F4BFD414475BDB7DA6ED59992E5B45E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:9e:35:17:55:43:d9:43:a9:d3:51:ba:73:
                    43:7f:7b:c6:f7:6d:23:5b:f6:b3:64:45:77:95:f9:
                    9e:44:12:a3:cf:2d:3a:e6:4d:2c:cb:59:60:d7:54:
                    cd:d9:8d:c8:5e:e3:8b:dd:3d:68:12:aa:d4:d3:a4:
                    1b:92:c9:6d:dc:51:48:44:c7:99:ed:1d:5a:8d:6d:
                    b8:00:a9:89:1c:9a:eb:9f:cb:4c:f6:5f:0b:27:9f:
                    b1:27:5e:4d:1c:c5:3a:e0:36:5f:ad:18:05:a6:8b:
                    f0:1a:41:e7:fc:61:8c:c0:cd:42:0d:f0:12:38:ae:
                    a3:68:00:71:99:96:33:d5:fa:20:90:c3:26:00:37:
                    91:1f:2f:98:c9:e4:53:1f:12:30:4c:81:8e:d6:03:
                    3c:e7:55:f0:f2:c6:52:ab:56:b7:25:df:0d:a0:1f:
                    2c:f1:55:fd:3c:29:43:0d:76:ac:de:11:b3:05:42:
                    07:00:33:77:2c:0f:ff:03:8d:0b:9a:f4:1e:98:4b:
                    ba:b4:c9:4a:b5:29:e0:35:67:22:d9:2c:4c:60:66:
                    7d:9e:84:93:30:d3:bf:7f:fe:e7:a7:67:e4:3e:5d:
                    2c:1f:2a:ba:a5:e1:1b:a4:7f:7c:a8:78:f0:57:48:
                    87:4d:a3:42:10:7c:84:7a:63:19:c9:8e:3e:3e:1b:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8F:2A:27:F4:BF:D4:14:47:5B:DB:7D:A6:ED:59:99:2E:5B:45:E1
            X509v3 Authority Key Identifier:
                keyid:65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:9b:df:c0:22:8a:bb:b6:02:bf:a8:5c:e2:e3:ac:53:eb:a7:
         75:3a:8e:ef:fd:aa:91:a8:bb:77:35:52:1d:c2:7a:de:3b:77:
         4b:b0:b2:12:de:3b:85:70:72:8a:08:3e:16:b9:92:08:16:09:
         84:64:19:9c:75:70:b7:82:e9:59:58:71:55:e3:15:2b:ba:c9:
         03:66:66:73:a6:1c:95:68:39:79:31:29:9c:aa:b6:b3:54:ca:
         4b:cc:ed:41:ca:6f:89:c6:4c:71:11:47:30:2d:ae:e6:6e:0e:
         83:c8:2d:54:b9:ad:06:6a:d8:a1:c3:84:38:0a:7e:44:15:81:
         49:e7:8e:89:37:24:d1:cb:43:2b:be:76:87:ad:56:c7:3f:b8:
         e7:cf:29:0d:b1:37:06:e1:c5:a4:56:36:5d:ba:68:b6:96:7b:
         48:f0:cd:07:b4:5f:63:7c:03:82:ca:34:6c:f3:af:4a:ac:5b:
         34:27:e4:b1:2b:28:da:5b:6e:b8:7f:8c:ab:7f:9f:d3:62:44:
         cc:28:97:da:ed:73:4b:65:71:eb:8b:eb:be:8a:66:39:16:6e:
         cb:5a:38:ad:58:34:b2:c7:e6:14:8b:f3:98:37:f4:c6:5e:2d:
         77:0f:29:61:49:d3:14:c3:db:1b:52:a2:a2:dc:d0:86:e2:19:
         34:6f:fc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:28 2025 by rpki-client on console.sobornost.net