Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/3139312e362e3134342e302f32312d3234203d3e20323633303731.roa
File:                     3139312e362e3134342e302f32312d3234203d3e20323633303731.roa (raw, json)
Hash identifier:          3z/seUfwbtY8VHvQVEp/hjesW7X+hzHuxNmo8T4n9yI=
Subject key identifier:   25:22:44:5B:CF:44:8D:D7:11:C1:3A:A2:44:56:68:FF:00:EF:B1:4E
Certificate issuer:       /CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC
Certificate serial:       76C861490079555170E88AE6C84B4FC5CDB04EB0
Authority key identifier: D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/3139312e362e3134342e302f32312d3234203d3e20323633303731.roa
Signing time:             Thu 06 Mar 2025 10:18:47 +0000
ROA not before:           Thu 06 Mar 2025 10:13:47 +0000
ROA not after:            Thu 05 Mar 2026 10:18:47 +0000
asID:                     263071
IP address blocks:        191.6.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl
                          rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c8:61:49:00:79:55:51:70:e8:8a:e6:c8:4b:4f:c5:cd:b0:4e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC
        Validity
            Not Before: Mar  6 10:13:47 2025 GMT
            Not After : Mar  5 10:18:47 2026 GMT
        Subject: CN=2522445BCF448DD711C13AA2445668FF00EFB14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:17:83:1b:d7:6d:16:a4:47:74:ef:52:15:
                    1e:99:b7:18:f7:ec:d1:cd:5f:66:95:41:a2:e1:4b:
                    ac:69:77:dd:45:5f:db:e1:d1:39:ec:0e:a3:b5:ba:
                    3d:ac:58:31:2c:32:af:e4:88:a9:bb:a3:9b:0b:45:
                    fe:4b:ae:69:e7:93:5a:67:f4:6c:2a:1e:d8:ef:19:
                    12:c2:ef:b0:ab:bf:1e:5c:f2:7f:a3:c8:96:8c:a2:
                    e3:54:87:0c:2c:df:a2:ac:70:59:27:2b:b8:fe:18:
                    7a:12:b2:7d:83:63:9a:50:2a:b1:0d:01:0c:7b:8c:
                    71:d4:ea:b1:43:bb:8d:20:0d:2e:9b:d8:5c:df:34:
                    cc:26:80:79:ae:0c:42:47:0e:48:c1:67:d9:d7:ca:
                    ae:8e:2d:5b:0d:34:c2:92:0a:37:ce:7c:d6:2d:bb:
                    41:be:47:07:f1:6f:b8:b5:1e:e7:28:91:d4:b9:42:
                    58:4e:a4:00:9d:d9:8b:c7:1d:b4:ea:77:eb:ee:9e:
                    7b:69:2b:0d:93:64:08:b8:38:b4:07:bc:9e:13:a3:
                    3f:c1:90:10:20:11:b9:4e:30:82:df:8b:da:8d:b8:
                    f5:1f:23:7a:ea:ca:90:2c:46:aa:9e:11:23:05:11:
                    f0:34:ea:43:d3:a0:62:45:ec:bf:2b:7e:c0:91:8f:
                    81:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:22:44:5B:CF:44:8D:D7:11:C1:3A:A2:44:56:68:FF:00:EF:B1:4E
            X509v3 Authority Key Identifier:
                keyid:D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/3139312e362e3134342e302f32312d3234203d3e20323633303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:24:96:23:f6:c0:14:2d:99:2f:c0:47:43:1b:49:01:a4:50:
         b5:fe:8b:d0:c7:d4:30:31:24:43:d5:f5:14:0a:8a:ee:36:3a:
         a1:8e:61:5f:17:d1:d7:c7:7e:e6:92:17:b1:d2:c2:07:d8:f4:
         77:23:03:7c:69:b2:e1:4c:7b:ad:05:60:c9:38:c8:8b:30:31:
         a6:8e:c1:c1:14:f3:3e:23:d0:67:9c:1e:e2:d5:d2:0f:94:af:
         ee:f0:2d:30:ab:f5:49:c8:1e:4c:00:32:f1:b8:73:ef:3b:61:
         58:ca:aa:33:84:46:9d:be:a9:be:34:b5:1c:3c:f3:d9:d4:60:
         75:23:c5:84:69:71:10:0a:19:2a:3c:6f:bb:4e:4f:d1:2c:31:
         07:09:d2:8d:77:7d:b3:1f:02:b6:b7:9c:be:1a:9f:94:e2:3d:
         7e:ca:07:88:3b:e2:90:7b:64:29:51:4d:2d:33:35:a8:f5:f1:
         dc:b5:c9:04:64:d2:ca:82:6c:3e:99:1b:c9:74:30:53:e0:84:
         04:06:0b:36:97:ac:eb:e9:be:aa:ee:fe:8d:3c:a5:3d:6a:1b:
         64:97:c4:5f:65:ce:dd:0d:7e:fb:b1:33:62:5c:c6:d3:7f:55:
         ed:d9:a3:63:c6:d9:88:27:f6:84:e9:7c:e3:5c:13:47:4b:0a:
         44:3b:fe:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:29 2025 by rpki-client on console.sobornost.net