Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136322e302f32332d3233203d3e20323633383630.roa
File:                     3136382e3232372e3136322e302f32332d3233203d3e20323633383630.roa (raw, json)
Hash identifier:          Yaf9Tvlff1xluQ+16g75/g79YRLhldpYdZFHzQTgR/M=
Subject key identifier:   0D:58:D9:D1:7E:16:E3:85:E2:A9:2B:96:78:CE:64:43:F1:4E:EF:6A
Certificate issuer:       /CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78
Certificate serial:       792EA13518D5C53EE97C974E8F539DA4BAE0E7D9
Authority key identifier: 56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136322e302f32332d3233203d3e20323633383630.roa
Signing time:             Wed 05 Mar 2025 22:29:08 +0000
ROA not before:           Wed 05 Mar 2025 22:24:08 +0000
ROA not after:            Wed 04 Mar 2026 22:29:08 +0000
asID:                     263860
IP address blocks:        168.227.162.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl
                          rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2e:a1:35:18:d5:c5:3e:e9:7c:97:4e:8f:53:9d:a4:ba:e0:e7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78
        Validity
            Not Before: Mar  5 22:24:08 2025 GMT
            Not After : Mar  4 22:29:08 2026 GMT
        Subject: CN=0D58D9D17E16E385E2A92B9678CE6443F14EEF6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:ee:60:4d:9f:42:2f:63:b0:37:62:cf:d7:
                    93:9f:00:80:19:ce:ce:68:ea:5a:b0:4e:14:6e:ad:
                    91:b9:12:c9:1f:58:69:fb:fe:d4:c4:f0:f2:c4:a0:
                    4a:59:9b:56:c8:e9:a2:66:33:41:fd:cc:b6:89:f9:
                    eb:de:9a:bd:3c:20:70:56:e6:10:b3:bc:f5:c1:b0:
                    55:c6:42:67:73:3d:d7:81:c9:74:c3:89:53:90:bb:
                    83:9e:b5:56:e9:fb:d1:04:44:8b:4e:8e:ca:2a:48:
                    a6:44:a4:6b:ed:c2:9a:15:fe:cd:b8:8a:a6:a8:7a:
                    c8:67:d2:c3:c4:02:1a:05:87:02:fe:4c:20:59:5d:
                    c1:b6:39:4e:98:2f:53:8d:de:5c:2d:ce:34:18:aa:
                    09:2f:dd:3e:37:f6:06:0a:b8:e8:54:fa:0f:b7:8d:
                    9a:b5:c0:ae:e1:98:7a:ea:9f:0a:7f:0a:53:ff:84:
                    52:09:d2:70:b7:37:25:41:37:13:57:33:7b:68:fe:
                    cf:42:5b:a1:a7:d4:d7:d0:8e:3a:ac:7f:f2:e3:81:
                    16:d1:b9:81:4d:0e:fe:a3:e4:1a:fb:83:a4:82:d9:
                    11:ef:0a:d6:be:a2:c3:4a:4a:46:53:41:a4:a8:32:
                    4f:d2:a3:cb:a7:0b:c2:c8:83:af:f9:a5:93:48:3e:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:58:D9:D1:7E:16:E3:85:E2:A9:2B:96:78:CE:64:43:F1:4E:EF:6A
            X509v3 Authority Key Identifier:
                keyid:56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136322e302f32332d3233203d3e20323633383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:fe:5c:a5:f4:78:80:ba:a7:f3:1d:0e:24:8f:54:14:10:19:
         87:a4:15:43:28:a9:95:73:6b:87:b6:b1:f4:1f:b4:24:76:ae:
         8e:77:11:64:7c:b0:d9:fe:9c:08:9f:ae:72:b7:5e:a8:89:e9:
         3b:68:bd:87:4e:65:26:74:05:9c:a1:de:c8:27:3c:dd:dd:11:
         ff:3c:ad:a4:15:19:ab:79:86:94:0d:a3:a6:3a:9d:cc:3f:10:
         7b:2e:76:0a:b6:d0:b5:b5:2f:68:12:a1:78:08:66:dc:5e:86:
         a2:1c:b8:6a:4a:a9:8d:1d:46:cb:50:cb:5a:5c:cb:8e:5e:18:
         8c:a2:04:ec:9e:29:d4:2d:85:23:fa:20:af:fb:82:1e:1f:2f:
         ad:de:45:2c:e7:c7:c9:80:a3:2c:de:72:b0:4e:09:79:fa:2c:
         ba:6d:21:1b:36:97:5a:b3:c8:2a:d5:9e:81:7f:87:d5:21:54:
         ec:84:9d:76:54:3d:0b:e1:2a:88:2b:94:74:97:23:8f:87:56:
         44:a2:c7:b4:e6:61:27:d4:15:f7:81:a0:63:53:04:98:ce:5c:
         cb:67:e1:de:df:d2:f8:d8:ee:b6:c7:82:e2:e7:3d:38:d4:2f:
         20:5f:90:fd:dd:e9:c0:17:46:c7:fc:38:ea:64:91:5f:07:b9:
         54:7b:d7:10
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeS6hNRjVxT7pfJdOj1OdpLrg59kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY5NUVENjBFRjA5QUQwMTQ4QTlFMEE3MEFBRkFDNjFB
NkEyMUQ3ODAeFw0yNTAzMDUyMjI0MDhaFw0yNjAzMDQyMjI5MDhaMDMxMTAvBgNV
BAMTKDBENThEOUQxN0UxNkUzODVFMkE5MkI5Njc4Q0U2NDQzRjE0RUVGNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2e5gTZ9CL2OwN2LP15OfAIAZ
zs5o6lqwThRurZG5EskfWGn7/tTE8PLEoEpZm1bI6aJmM0H9zLaJ+evemr08IHBW
5hCzvPXBsFXGQmdzPdeByXTDiVOQu4OetVbp+9EERItOjsoqSKZEpGvtwpoV/s24
iqaoeshn0sPEAhoFhwL+TCBZXcG2OU6YL1ON3lwtzjQYqgkv3T439gYKuOhU+g+3
jZq1wK7hmHrqnwp/ClP/hFIJ0nC3NyVBNxNXM3to/s9CW6Gn1NfQjjqsf/LjgRbR
uYFNDv6j5Br7g6SC2RHvCta+osNKSkZTQaSoMk/So8unC8LIg6/5pZNIPqi5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDVjZ0X4W44XiqSuWeM5kQ/FO72owHwYDVR0j
BBgwFoAUVpXtYO8JrQFIqeCnCq+sYaaiHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzlyMkFKR3l6b3F0V3NxRUYzSFFielI1cVphYXVDZTFWZ1BMWmZqVkxk
ZGovMS81Njk1RUQ2MEVGMDlBRDAxNDhBOUUwQTcwQUFGQUM2MUE2QTIxRDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2OTVFRDYwRUYwOUFEMDE0
OEE5RTBBNzBBQUZBQzYxQTZBMjFENzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M5cjJBSkd5em9xdFdzcUVGM0hRYnpSNXFaYWF1Q2UxVmdQTFpmalZMZGRqLzEv
MzEzNjM4MmUzMjMyMzcyZTMxMzYzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM4MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajjojANBgkqhkiG9w0BAQsFAAOCAQEAUv5c
pfR4gLqn8x0OJI9UFBAZh6QVQyiplXNrh7ax9B+0JHaujncRZHyw2f6cCJ+ucrde
qInpO2i9h05lJnQFnKHeyCc83d0R/zytpBUZq3mGlA2jpjqdzD8Qey52CrbQtbUv
aBKheAhm3F6Gohy4akqpjR1Gy1DLWlzLjl4YjKIE7J4p1C2FI/ogr/uCHh8vrd5F
LOfHyYCjLN5ysE4Jefosum0hGzaXWrPIKtWegX+H1SFU7ISddlQ9C+EqiCuUdJcj
j4dWRKLHtOZhJ9QV94GgY1MEmM5cy2fh3t/S+NjutseC4uc9ONQvIF+Q/d3pwBdG
x/w46mSRXwe5VHvXEA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:28 2025 by rpki-client on console.sobornost.net