Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa
File:                     3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa (raw, json)
Hash identifier:          b5Sw25djcPuW8maDfDuzcwITWnYX6BWBaOBhdFq9MzU=
Subject key identifier:   06:4C:C2:77:85:DC:A5:6C:C7:F1:71:53:68:93:E9:93:54:D2:48:97
Certificate issuer:       /CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
Certificate serial:       0B1EF8BFAE182C65F11217D75471C52144BC0ED1
Authority key identifier: D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa
Signing time:             Thu 06 Mar 2025 16:33:24 +0000
ROA not before:           Thu 06 Mar 2025 16:28:24 +0000
ROA not after:            Thu 05 Mar 2026 16:33:24 +0000
asID:                     266498
IP address blocks:        170.244.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1e:f8:bf:ae:18:2c:65:f1:12:17:d7:54:71:c5:21:44:bc:0e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
        Validity
            Not Before: Mar  6 16:28:24 2025 GMT
            Not After : Mar  5 16:33:24 2026 GMT
        Subject: CN=064CC27785DCA56CC7F171536893E99354D24897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:0b:3f:e7:0c:2e:b4:e4:1a:90:a2:6d:39:
                    94:e7:ec:e6:cc:3a:45:81:d3:4f:89:b6:f1:52:94:
                    77:ea:6c:1c:db:72:a8:4e:b2:23:48:3d:bd:cf:e0:
                    81:59:94:0e:c4:58:7d:a6:54:f5:53:c2:d0:50:5f:
                    5f:39:63:c7:74:f8:be:ee:6f:b0:8e:8a:bf:74:e6:
                    c2:68:bb:a7:1c:df:24:09:34:fd:d5:88:c9:9a:4a:
                    93:ef:40:f5:6b:3f:d2:ba:61:ce:d1:33:d0:cd:87:
                    a1:07:07:40:b1:85:25:f1:47:39:3b:d6:75:d9:8b:
                    06:12:52:8a:3a:23:d4:75:67:54:fb:f0:57:a6:fe:
                    61:ac:f7:ea:91:b5:6d:bc:0f:59:2d:e0:d6:53:3d:
                    ab:90:fc:dc:db:64:96:a8:64:c3:f2:d8:63:99:06:
                    6a:23:66:46:32:23:79:9e:56:86:ca:7e:89:7d:09:
                    ce:cc:2b:2b:90:8b:11:c5:5f:1d:bd:11:bc:ed:53:
                    9c:87:c8:a2:5f:81:d9:97:e9:92:b5:7e:f1:53:d6:
                    93:de:89:af:18:4d:a2:3e:ba:9b:f8:44:17:8c:1f:
                    62:b8:39:9a:5f:b6:47:c4:44:8a:69:a3:d5:9b:8d:
                    24:4f:bd:28:e1:89:19:6b:1e:09:41:54:d1:35:4a:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4C:C2:77:85:DC:A5:6C:C7:F1:71:53:68:93:E9:93:54:D2:48:97
            X509v3 Authority Key Identifier:
                keyid:D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:e5:18:08:22:fd:aa:83:39:e7:33:04:de:3c:98:ea:d3:58:
         6d:db:18:99:8c:2f:ad:ef:af:e8:d1:3a:60:79:e1:2c:16:54:
         4c:fd:c1:f6:e3:57:47:87:22:9e:14:7d:a6:81:fa:63:eb:b2:
         c6:6e:85:d9:8d:33:d0:a1:34:98:8c:aa:93:53:72:00:1d:ac:
         1f:46:39:2b:17:e6:54:42:dc:36:c7:3b:60:c0:4a:62:28:15:
         aa:19:f6:fc:80:cf:f3:ca:07:64:82:e5:8d:74:83:46:49:89:
         9b:87:7b:93:67:4f:08:df:cc:aa:0c:5e:0a:08:d3:81:a6:ce:
         c6:6e:a4:e0:02:61:b6:17:39:67:57:dd:b0:d2:d6:d6:8a:9a:
         fa:3d:0f:17:b6:a4:ee:44:dd:55:b9:0a:00:17:4e:89:50:47:
         3a:9e:6a:65:ce:83:9c:17:b3:db:ac:e6:e8:bf:73:83:b4:33:
         54:b9:3f:17:67:3e:fd:b7:66:74:65:b8:39:ba:05:c3:a2:f9:
         ab:fb:1f:fb:81:65:b2:9e:50:c4:68:7c:43:60:43:26:be:71:
         7b:17:6a:b7:65:90:d9:61:0f:54:f0:8d:d5:0f:db:6c:95:23:
         81:61:ee:af:49:5a:1c:13:76:78:e0:ce:d4:65:c6:95:c0:2f:
         24:fd:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:28 2025 by rpki-client on console.sobornost.net