Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137302e302f32342d3234203d3e20323632363131.roa
File:                     3136382e3232382e3137302e302f32342d3234203d3e20323632363131.roa (raw, json)
Hash identifier:          /ylDGZwZQ2ieGRUKKNbtNNxvaiuwuQGygglu6O1pypk=
Subject key identifier:   EE:DD:2D:74:E3:53:D2:34:26:6C:E6:C9:BC:E1:59:B4:78:E1:85:B8
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       6CC69BC165B6678E6502A40AC89AD0C4D75A1501
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137302e302f32342d3234203d3e20323632363131.roa
Signing time:             Wed 19 Mar 2025 14:30:13 +0000
ROA not before:           Wed 19 Mar 2025 14:25:13 +0000
ROA not after:            Wed 18 Mar 2026 14:30:13 +0000
asID:                     262611
IP address blocks:        168.228.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c6:9b:c1:65:b6:67:8e:65:02:a4:0a:c8:9a:d0:c4:d7:5a:15:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Mar 19 14:25:13 2025 GMT
            Not After : Mar 18 14:30:13 2026 GMT
        Subject: CN=EEDD2D74E353D234266CE6C9BCE159B478E185B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bc:d3:3a:54:48:5b:36:0a:26:e8:3e:a0:75:
                    91:30:cd:41:7c:5d:c5:d0:bd:1e:fc:9f:69:f1:2c:
                    2a:40:98:34:17:86:1e:b3:8f:7e:e3:42:dc:d7:07:
                    25:45:9c:81:6a:05:13:c0:0e:7c:10:cb:5f:57:f4:
                    c2:f4:43:88:d1:47:ed:46:51:69:ca:f4:74:10:b7:
                    13:0b:95:5e:a9:93:1b:9d:e7:d3:5e:d6:86:f3:fd:
                    29:10:e2:ea:e3:c1:5b:6f:fd:ee:54:e5:4f:b0:85:
                    1b:0c:91:83:76:e1:ab:bf:f1:1f:b1:9e:51:32:10:
                    f5:7a:fc:bc:2e:ac:3c:eb:5b:52:66:b9:39:cb:2d:
                    d9:47:b9:21:0a:3f:5c:d9:e4:7e:43:eb:6f:d5:5c:
                    73:d4:c5:db:4d:b8:24:60:86:50:9a:dd:fa:2a:73:
                    74:e7:4b:28:97:29:34:f3:83:a5:44:cd:ca:dd:78:
                    bd:33:ea:2e:b4:12:93:ff:91:35:35:db:f1:8f:f5:
                    cf:6e:92:14:6e:21:61:76:1f:e6:6e:41:76:e4:3c:
                    ef:ee:68:e3:c9:54:e5:46:0a:9c:a5:9f:f8:a1:b9:
                    40:88:e2:4c:3b:3f:43:85:ca:e8:9a:df:09:a6:d8:
                    7c:66:6a:bc:f7:8b:7c:65:ee:ae:e9:1d:03:05:1b:
                    45:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DD:2D:74:E3:53:D2:34:26:6C:E6:C9:BC:E1:59:B4:78:E1:85:B8
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137302e302f32342d3234203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ab:04:ac:09:bc:f4:8f:09:2e:2e:5b:f3:3d:dc:1a:b3:8f:
         e6:bd:fd:66:a9:f6:84:6f:b0:38:eb:b1:69:59:3e:58:68:5b:
         3f:37:48:d3:80:be:29:1b:5d:63:d7:57:dc:e0:9a:f7:5a:48:
         53:a8:3d:ee:ac:74:7f:88:77:0b:4b:1b:f1:e9:ca:b8:79:8d:
         d8:a6:e3:d5:fb:de:cd:7f:af:69:59:47:a5:86:91:96:78:7b:
         90:61:e7:0a:39:46:06:ab:2c:e6:d0:b4:53:31:9d:11:76:fa:
         1b:80:cf:7a:32:8d:ac:a1:b8:ea:2b:e9:4c:a3:2a:c0:7c:e7:
         ca:bf:bd:b7:fd:03:00:5f:6b:34:79:92:29:e2:68:23:44:09:
         90:bb:be:d0:e0:32:6c:fe:88:25:67:9e:30:2d:1c:08:c1:31:
         62:86:35:02:1c:f0:d0:be:e6:12:20:9a:27:32:2a:c9:99:81:
         c2:98:d0:2b:fb:cf:d6:35:6d:35:bd:77:50:ab:13:11:16:de:
         87:ef:37:e0:ee:99:d1:09:13:6d:55:0b:30:37:cb:d6:d0:83:
         c4:0c:2a:78:51:0c:d7:9a:4f:8f:a0:91:1d:18:fd:2e:8d:31:
         f2:5f:d2:3f:b2:76:6b:85:f9:5e:55:14:e3:8f:e7:9a:3f:95:
         4d:44:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:43 2025 by rpki-client on console.sobornost.net