Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa
File:                     3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa (raw, json)
Hash identifier:          euJtsB1S4IWQ/lf/Hta1LLTlSifhYpqT+Jp1/7MPWW0=
Subject key identifier:   00:6C:CB:DD:26:D7:C2:4D:EB:DE:43:31:04:0D:A5:B8:09:1E:EF:90
Certificate issuer:       /CN=83C90E15FAD82473867D38C030D3F41E1192F5A2
Certificate serial:       781C2576360DEE6ADB233AC5DC0B2513F009639E
Authority key identifier: 83:C9:0E:15:FA:D8:24:73:86:7D:38:C0:30:D3:F4:1E:11:92:F5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C90E15FAD82473867D38C030D3F41E1192F5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa
Signing time:             Thu 24 Apr 2025 09:48:26 +0000
ROA not before:           Thu 24 Apr 2025 09:43:26 +0000
ROA not after:            Thu 23 Apr 2026 09:48:26 +0000
asID:                     267430
IP address blocks:        164.163.224.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.crl
                          rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C90E15FAD82473867D38C030D3F41E1192F5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1c:25:76:36:0d:ee:6a:db:23:3a:c5:dc:0b:25:13:f0:09:63:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C90E15FAD82473867D38C030D3F41E1192F5A2
        Validity
            Not Before: Apr 24 09:43:26 2025 GMT
            Not After : Apr 23 09:48:26 2026 GMT
        Subject: CN=006CCBDD26D7C24DEBDE4331040DA5B8091EEF90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:02:e8:2e:e1:c4:41:75:a6:e4:1b:77:96:
                    1f:cd:81:02:b5:98:44:9c:03:1f:1d:e6:1e:70:af:
                    66:53:78:56:45:63:b7:8b:1d:09:32:55:e0:8a:31:
                    ed:a0:d3:19:d9:92:fe:45:19:13:f9:56:77:d5:49:
                    9b:e5:ff:b8:49:e6:c1:0d:f0:46:9b:ed:13:a7:af:
                    24:40:83:a5:70:55:cf:6c:f4:2f:96:80:04:5a:22:
                    c5:f5:73:c5:d2:e1:54:d4:f8:67:85:9f:f6:47:65:
                    5f:f8:52:39:78:f0:af:88:8f:30:5a:2f:c6:99:a7:
                    b5:17:12:4d:45:fd:d0:1f:af:b9:9c:62:2e:4c:0a:
                    72:0e:57:4b:a5:cd:fa:12:52:0d:ba:f2:d8:66:d6:
                    43:0e:13:2f:cc:c6:3a:22:79:08:24:a5:50:a4:1c:
                    a6:fe:9c:f3:45:29:f3:fd:bc:4d:15:be:d0:6a:a5:
                    90:fc:8c:54:bb:68:ce:04:12:1a:66:0d:c9:58:63:
                    54:1f:5a:10:4e:12:8a:71:21:66:49:ce:4e:57:30:
                    32:50:b9:fb:75:57:d6:e2:99:0c:c4:6d:10:37:8d:
                    87:2c:b9:90:f1:f5:47:03:04:39:38:f9:0a:13:e5:
                    60:1a:47:1f:16:fe:09:62:a5:49:50:70:7f:85:91:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6C:CB:DD:26:D7:C2:4D:EB:DE:43:31:04:0D:A5:B8:09:1E:EF:90
            X509v3 Authority Key Identifier:
                keyid:83:C9:0E:15:FA:D8:24:73:86:7D:38:C0:30:D3:F4:1E:11:92:F5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C90E15FAD82473867D38C030D3F41E1192F5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:d1:db:2c:24:ef:7b:f8:ee:f1:f8:aa:41:1b:5d:81:b3:3f:
         be:62:2f:86:4a:7d:95:26:a0:39:a9:9c:ff:9c:fa:7f:62:2b:
         84:b4:97:37:49:31:f4:28:25:20:a7:13:d3:8d:a3:dd:5e:f8:
         e4:80:9d:1b:8f:34:54:8d:64:d9:15:ad:8e:ec:e7:e5:48:4a:
         29:be:d1:02:08:81:30:be:bd:2b:af:f5:a5:a9:a3:ad:97:3e:
         83:92:8a:92:f0:3d:83:cc:14:de:fa:d5:f0:01:5a:3b:41:a0:
         17:11:93:40:00:d4:7c:08:00:49:b7:8b:7d:a6:c8:1e:f5:7d:
         1a:b6:85:62:97:5e:8c:03:fe:e6:89:79:02:a9:9d:ea:30:4e:
         5e:18:88:60:62:6c:fc:96:5e:f0:b9:7f:b3:e6:d1:78:fe:76:
         13:a6:dd:6e:96:e1:04:a5:30:a9:e5:74:f4:50:24:3c:69:4d:
         dc:86:53:f7:82:86:90:23:18:fd:f2:f0:dc:3d:7e:23:0a:71:
         02:1f:21:2d:e5:0e:8c:af:0e:35:38:75:df:0d:52:10:6b:88:
         99:3d:d7:7f:9f:bb:e4:14:71:27:39:79:67:2f:5b:f4:06:16:
         66:78:07:15:60:d4:7f:70:a4:2e:0c:06:4c:b0:a4:de:a6:65:
         53:55:ec:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:02 2025 by rpki-client on console.sobornost.net