Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137312e302f32342d3234203d3e20323632363131.roa
File:                     3136382e3232382e3137312e302f32342d3234203d3e20323632363131.roa (raw, json)
Hash identifier:          rDGesFjVLDJlxI+P1rKNNwkBjLWvxab2e2mqWdbks1g=
Subject key identifier:   A6:AD:73:0B:C3:1D:10:CF:CB:3A:19:3B:E4:F3:37:C3:42:A2:BE:81
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       0DE5128040CAB00CB4E4BB0D4EF1019B4A3520AD
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137312e302f32342d3234203d3e20323632363131.roa
Signing time:             Wed 19 Mar 2025 14:30:12 +0000
ROA not before:           Wed 19 Mar 2025 14:25:12 +0000
ROA not after:            Wed 18 Mar 2026 14:30:12 +0000
asID:                     262611
IP address blocks:        168.228.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e5:12:80:40:ca:b0:0c:b4:e4:bb:0d:4e:f1:01:9b:4a:35:20:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Mar 19 14:25:12 2025 GMT
            Not After : Mar 18 14:30:12 2026 GMT
        Subject: CN=A6AD730BC31D10CFCB3A193BE4F337C342A2BE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:02:2e:e6:77:7b:10:9c:6b:32:9a:06:dd:
                    d8:dd:81:7c:3d:b7:4f:ab:6b:8d:21:f4:e8:b2:88:
                    9c:f9:11:7b:78:98:07:b8:d5:e7:95:27:f1:6c:ee:
                    64:23:1e:17:5f:9b:3a:d9:6b:27:c1:ad:59:f0:dd:
                    e3:80:20:43:de:93:68:58:d8:46:12:1d:fc:1e:57:
                    39:35:5c:97:8b:f7:c8:66:ac:83:21:94:5c:3b:aa:
                    9c:e6:cc:a0:f2:e3:e8:de:47:0f:a0:64:a3:91:59:
                    5b:55:4e:3e:a4:3e:9d:40:c0:b5:5e:f9:cc:17:86:
                    35:0d:14:14:2d:bd:7a:1f:18:2e:24:8c:49:7c:a9:
                    b1:f1:c4:e4:48:6f:04:45:5c:89:58:d4:b8:8b:1e:
                    1f:8e:6a:b0:19:6d:6f:25:29:64:e7:3f:87:88:e0:
                    ce:04:e8:6a:9b:71:3b:f6:57:db:8b:ec:32:c5:eb:
                    df:dd:5c:ff:f6:77:42:7b:10:e1:d6:b1:cd:27:ef:
                    84:0c:c3:4d:b1:c0:19:5d:16:ff:2e:a8:1d:7f:d5:
                    9d:22:d5:04:fa:ea:2e:1a:3b:04:1f:7f:8f:d4:13:
                    f7:ae:d8:f4:87:57:91:40:1e:ce:ee:06:12:3a:63:
                    d2:ed:bb:37:73:f2:24:df:f8:3b:25:49:6a:e4:00:
                    92:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AD:73:0B:C3:1D:10:CF:CB:3A:19:3B:E4:F3:37:C3:42:A2:BE:81
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137312e302f32342d3234203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:65:36:49:62:87:4f:f0:3b:c0:b5:8e:fb:f8:d2:23:be:af:
         30:2c:ac:8d:f8:79:11:dc:de:ef:7b:67:45:6a:24:6f:95:a0:
         e4:fb:9f:df:0d:96:7c:1f:52:4a:38:3b:35:2f:64:95:fe:cc:
         50:0f:2a:5f:08:1a:c7:2c:65:97:c9:6a:ac:0b:71:f4:9a:76:
         73:33:8a:8e:59:da:8b:f1:91:3e:b0:94:f4:e0:d1:5c:0c:a3:
         5f:9e:3e:82:8f:92:9c:e6:3c:bb:28:16:2e:50:25:5b:5a:44:
         0d:eb:c3:6e:21:9b:83:bd:82:80:32:6b:6c:64:78:e1:db:eb:
         f3:d3:c9:a9:79:5d:5c:13:fc:6a:31:8c:be:32:87:a2:3e:fe:
         4f:cb:86:8f:e9:15:59:1d:a2:a1:c7:2f:26:3d:6b:07:97:46:
         5f:41:df:82:b0:d9:7b:48:fa:b5:d4:b5:3e:ee:7e:95:7f:06:
         61:29:5c:e8:4d:70:fb:91:18:1b:89:37:e3:b7:9c:00:61:45:
         97:46:28:a7:f6:bd:31:83:73:3d:8a:b7:6b:de:c9:14:95:95:
         e0:f3:0c:20:76:bf:14:35:f6:5d:db:cf:65:30:81:d4:97:ef:
         0c:21:4d:af:56:27:62:ff:cc:43:6e:b7:21:28:2a:05:3f:12:
         26:a0:c6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:43 2025 by rpki-client on console.sobornost.net