Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa
File:                     3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa (raw, json)
Hash identifier:          S3YhKXxvh11ZqYBDin+iLZcG1YldK4Ocmqm+d0Zp85g=
Subject key identifier:   1C:FA:28:AA:39:EA:AE:B7:13:2B:3E:63:DE:FE:24:7D:5F:05:A7:2C
Certificate issuer:       /CN=3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A
Certificate serial:       BB7BD0DA1B8142018D37BBF3ACE0BC4646AC17
Authority key identifier: 3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa
Signing time:             Thu 06 Mar 2025 09:06:04 +0000
ROA not before:           Thu 06 Mar 2025 09:01:04 +0000
ROA not after:            Thu 05 Mar 2026 09:06:04 +0000
asID:                     271487
IP address blocks:        201.94.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.crl
                          rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bb:7b:d0:da:1b:81:42:01:8d:37:bb:f3:ac:e0:bc:46:46:ac:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A
        Validity
            Not Before: Mar  6 09:01:04 2025 GMT
            Not After : Mar  5 09:06:04 2026 GMT
        Subject: CN=1CFA28AA39EAAEB7132B3E63DEFE247D5F05A72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:93:b9:6c:d6:25:91:41:22:3f:ab:96:6f:
                    40:d0:80:7b:81:09:91:2c:05:39:3f:da:a7:5b:79:
                    4f:96:07:91:a2:47:85:72:18:47:0b:79:62:04:8a:
                    3e:3b:13:a2:a5:19:0d:07:ac:a5:d6:b0:0f:7d:cd:
                    81:06:49:7b:69:88:98:ac:97:89:fa:ba:0d:9b:1d:
                    db:d3:11:7c:df:e7:2b:3c:3b:02:6c:4b:58:1d:70:
                    43:7e:bd:88:87:58:ab:86:1b:61:8e:b3:9c:fd:66:
                    9c:61:45:0c:00:3e:a6:6c:df:99:57:55:f9:e3:d2:
                    c1:5c:d9:ca:39:50:55:5f:fa:0d:02:e2:b2:2f:f9:
                    b8:c6:87:1c:94:65:20:08:24:ae:72:ba:5e:8d:ed:
                    93:39:1d:7b:22:89:26:b3:19:1e:6d:02:c9:ad:cc:
                    6b:43:de:8e:4e:9d:0a:91:6e:58:55:57:12:da:c0:
                    8f:66:cd:7f:43:7a:54:bc:06:f6:40:2b:a9:e3:43:
                    51:db:8b:ac:83:d1:ce:ab:eb:48:f5:7e:31:d2:10:
                    60:82:5b:9b:f9:ae:1e:a6:d7:96:22:a8:65:69:68:
                    e7:15:86:40:56:cf:5e:d1:78:54:c2:cb:20:33:5b:
                    fd:c7:a2:f2:7d:5a:c6:aa:ff:9d:71:16:6c:55:91:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FA:28:AA:39:EA:AE:B7:13:2B:3E:63:DE:FE:24:7D:5F:05:A7:2C
            X509v3 Authority Key Identifier:
                keyid:3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:4b:b8:0a:9e:86:3d:c5:7d:de:85:31:21:d5:2e:51:79:b9:
         f6:5b:8c:f0:f2:38:d0:be:5c:7b:e0:f2:ec:6d:a6:75:91:fe:
         fc:63:68:c6:18:30:83:54:79:c2:41:8f:a8:15:de:70:72:de:
         3e:ae:f6:dd:c3:e9:07:7b:59:05:c2:24:46:a2:bc:4f:6e:48:
         cf:a8:91:ef:35:62:7a:9c:6e:56:5b:74:ea:75:b7:1c:f8:88:
         c5:b2:2b:93:8b:49:52:35:47:81:ff:6c:90:c9:ed:83:92:3b:
         38:73:cc:ca:a9:fc:e2:1a:d0:7f:db:67:05:77:ea:23:39:73:
         60:94:27:44:36:ef:e2:14:91:36:9c:84:a7:d6:6a:bf:8b:ef:
         f9:e2:34:73:28:9c:dd:05:44:cc:19:d5:c4:fc:fb:74:89:fd:
         55:bc:74:b2:08:c7:82:e4:68:40:e0:16:8c:ae:8a:7c:ef:0b:
         e9:aa:e1:4b:fb:33:83:55:d1:b2:60:2d:c4:6d:61:82:c7:34:
         c3:1d:3c:a3:d0:13:e0:57:30:5c:1d:e3:ec:95:6f:ff:d2:d6:
         8d:61:d4:d3:35:3d:f0:f3:13:91:d6:b5:0a:02:91:c4:30:d8:
         2a:37:b1:e2:58:3c:5b:83:16:07:3c:dc:b0:1d:3e:0e:a4:c2:
         28:2f:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:03 2025 by rpki-client on console.sobornost.net