Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/3137302e38322e3137322e302f32322d3234203d3e20323636343434.roa
File:                     3137302e38322e3137322e302f32322d3234203d3e20323636343434.roa (raw, json)
Hash identifier:          D/9DWkPSs9OV/5NsQOgV12XhW3ZW1nrEQMQRd8u31Tg=
Subject key identifier:   AE:9A:AD:44:AE:91:F6:1F:73:6D:F5:88:85:DA:E9:0C:10:72:12:FD
Certificate issuer:       /CN=1A706BB72455093A32D1C60201116349B90D2EC7
Certificate serial:       71CAAD72BD865662155082D7739B43DFAEBE78F7
Authority key identifier: 1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/3137302e38322e3137322e302f32322d3234203d3e20323636343434.roa
Signing time:             Wed 23 Apr 2025 19:59:06 +0000
ROA not before:           Wed 23 Apr 2025 19:54:06 +0000
ROA not after:            Wed 22 Apr 2026 19:59:06 +0000
asID:                     266444
IP address blocks:        170.82.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl
                          rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ca:ad:72:bd:86:56:62:15:50:82:d7:73:9b:43:df:ae:be:78:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A706BB72455093A32D1C60201116349B90D2EC7
        Validity
            Not Before: Apr 23 19:54:06 2025 GMT
            Not After : Apr 22 19:59:06 2026 GMT
        Subject: CN=AE9AAD44AE91F61F736DF58885DAE90C107212FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:96:02:32:f7:8b:76:cb:e8:ac:05:9d:2a:
                    bb:a0:9b:aa:30:c7:cf:29:4d:da:ad:53:4d:d3:f1:
                    cf:ca:94:c6:f5:61:32:d1:56:a5:0d:1c:73:76:ab:
                    42:3d:67:bb:5b:27:98:c9:12:8d:ac:ae:d5:ac:b3:
                    5c:14:1e:9e:19:1a:45:71:27:77:fd:fa:1f:7d:85:
                    6c:ea:3b:39:5e:45:51:89:54:2a:0c:4e:a3:a2:ba:
                    fa:4f:6d:c9:69:33:42:3f:43:0e:3b:1f:1e:b4:03:
                    27:8c:4b:22:02:34:ab:66:a4:c1:1c:ad:6f:d3:f3:
                    1f:b0:d1:d7:e0:1e:63:62:43:85:08:a2:4b:5c:73:
                    7b:db:c0:c4:7f:a5:2a:22:9c:2b:f4:92:4c:e6:9a:
                    32:17:fd:b2:c0:ff:a9:b9:43:50:dc:8f:ae:ad:dd:
                    d2:36:06:a7:76:31:e5:b2:37:fb:cf:e7:8f:cc:dc:
                    a9:95:2a:ec:8a:c7:77:11:83:02:20:83:f4:68:23:
                    e3:fe:2d:77:a8:9c:98:c6:9b:3c:cc:f9:99:ab:57:
                    82:a6:8c:cc:5f:24:58:83:f7:af:93:a7:47:3a:a0:
                    8a:7e:b0:aa:98:50:68:13:0a:5f:78:5f:21:2c:99:
                    17:ce:5f:96:6a:54:34:f5:5e:73:81:78:c4:b1:ea:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9A:AD:44:AE:91:F6:1F:73:6D:F5:88:85:DA:E9:0C:10:72:12:FD
            X509v3 Authority Key Identifier:
                keyid:1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/3137302e38322e3137322e302f32322d3234203d3e20323636343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:a6:70:6c:ff:50:a4:78:38:bd:f4:31:2a:f3:44:9c:1b:15:
         80:57:a8:b6:dd:55:79:f0:ac:93:9f:63:a1:f6:c7:65:9b:49:
         74:a9:a8:b7:3a:67:cc:3f:5c:d2:c1:aa:80:58:f8:5b:c2:81:
         d1:90:54:b1:9d:42:e6:bb:c5:68:92:dd:56:b3:0d:d9:98:bc:
         ff:7c:f6:9d:95:69:f2:0e:3f:e7:a1:ab:df:d8:ea:cc:b1:ab:
         41:81:7c:03:0f:42:70:d9:b4:e0:43:33:1b:bb:66:fb:36:c0:
         22:66:07:2d:68:a9:84:86:4d:bc:3c:74:91:bf:55:34:db:c8:
         6b:74:34:54:33:e2:1d:4c:66:09:e6:1d:ff:be:bb:72:d4:ce:
         b3:bd:ee:45:ea:2d:96:0c:d0:2c:79:0a:58:95:39:4f:e3:ab:
         9c:8b:c9:a2:4a:45:2c:4c:73:9c:39:49:9d:ac:ce:10:75:60:
         63:4b:92:8f:d2:6d:35:fb:7f:20:35:6a:9d:c8:1a:f7:8f:6b:
         cd:b5:f0:2b:be:bd:55:99:a6:ec:26:44:cb:ef:d7:0a:13:37:
         f7:6a:0b:9e:e5:9e:8a:e9:69:7f:59:1c:a2:f8:84:88:41:f6:
         da:40:e3:ce:91:d2:38:3c:b7:a1:b5:79:73:9f:b6:0d:39:78:
         c0:30:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:02 2025 by rpki-client on console.sobornost.net