Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/3136302e31392e3234302e302f32322d3232203d3e20323636313637.roa
File:                     3136302e31392e3234302e302f32322d3232203d3e20323636313637.roa (raw, json)
Hash identifier:          O3qU9Vy2jDkqIBtllywd++L/F1q01VbQhMxHv2Z83uI=
Subject key identifier:   CA:AF:43:B9:F1:5C:ED:F3:99:F8:E7:36:12:A5:AC:87:0A:83:2B:65
Certificate issuer:       /CN=4EF5C84266C27338ECEA6530E1F81A23B3609ED2
Certificate serial:       1A3B1AA266D4FAC7FE4111782CC33AC1EFE8432E
Authority key identifier: 4E:F5:C8:42:66:C2:73:38:EC:EA:65:30:E1:F8:1A:23:B3:60:9E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF5C84266C27338ECEA6530E1F81A23B3609ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/3136302e31392e3234302e302f32322d3232203d3e20323636313637.roa
Signing time:             Mon 28 Apr 2025 13:57:32 +0000
ROA not before:           Mon 28 Apr 2025 13:52:32 +0000
ROA not after:            Mon 27 Apr 2026 13:57:32 +0000
asID:                     266167
IP address blocks:        160.19.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/4EF5C84266C27338ECEA6530E1F81A23B3609ED2.crl
                          rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/4EF5C84266C27338ECEA6530E1F81A23B3609ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF5C84266C27338ECEA6530E1F81A23B3609ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3b:1a:a2:66:d4:fa:c7:fe:41:11:78:2c:c3:3a:c1:ef:e8:43:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF5C84266C27338ECEA6530E1F81A23B3609ED2
        Validity
            Not Before: Apr 28 13:52:32 2025 GMT
            Not After : Apr 27 13:57:32 2026 GMT
        Subject: CN=CAAF43B9F15CEDF399F8E73612A5AC870A832B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:7b:d5:84:fd:d7:22:87:eb:ab:5e:2c:86:
                    b0:b1:4b:c1:69:46:02:83:9d:c8:c6:76:f7:8d:a0:
                    e2:a2:ae:ed:65:2d:85:c8:ab:2f:7a:35:63:a1:44:
                    8a:24:10:a3:9f:fc:eb:1b:06:7b:3d:2b:22:6a:79:
                    ec:c6:38:b3:59:2e:fa:b2:70:1d:e3:9a:eb:01:be:
                    87:87:55:5d:b8:ee:75:fc:23:05:4d:18:9b:a6:df:
                    91:c5:97:c0:8f:11:a7:5a:bd:c0:84:d3:ed:5f:a5:
                    fa:f8:30:22:23:02:24:0d:06:e9:46:80:fd:a7:e6:
                    65:65:0f:f6:e9:3f:d5:21:fd:1f:b0:81:93:f5:91:
                    b2:bb:40:03:8f:23:d3:22:79:7e:16:a1:e2:05:8b:
                    32:a5:31:04:93:a5:ad:db:7f:ab:86:1f:b6:89:c5:
                    12:15:57:89:68:c6:33:06:27:01:73:a1:bd:52:82:
                    8e:47:b4:5c:6c:1d:b1:59:9e:c4:36:cb:30:82:af:
                    79:72:df:28:7a:61:36:f5:01:c4:3d:5d:bf:6a:9d:
                    87:9a:f7:09:5b:68:7a:b4:72:b5:9c:74:57:76:f2:
                    ab:ba:3d:21:7c:96:e1:cb:28:77:e9:f7:68:e0:f0:
                    0f:81:04:8d:77:45:a2:42:ae:71:b2:8d:75:9a:91:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AF:43:B9:F1:5C:ED:F3:99:F8:E7:36:12:A5:AC:87:0A:83:2B:65
            X509v3 Authority Key Identifier:
                keyid:4E:F5:C8:42:66:C2:73:38:EC:EA:65:30:E1:F8:1A:23:B3:60:9E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/4EF5C84266C27338ECEA6530E1F81A23B3609ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF5C84266C27338ECEA6530E1F81A23B3609ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/3136302e31392e3234302e302f32322d3232203d3e20323636313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:1b:2e:a6:99:31:87:e8:00:8c:77:d2:03:d6:20:18:74:f2:
         34:b7:e2:f7:5f:36:a4:a6:00:ab:36:16:34:27:79:5b:04:8f:
         99:a2:e0:65:ba:32:dc:10:82:d9:cb:6d:ca:ea:94:89:67:01:
         82:6d:6b:24:29:9a:07:c1:7c:60:b9:56:7c:93:af:e1:61:eb:
         13:48:ee:5b:3f:37:b9:b7:dc:f7:e7:e5:1d:f6:ff:22:85:6b:
         77:69:a7:70:9d:63:28:c0:b2:fc:ed:34:42:da:b4:4c:48:79:
         cb:ee:ee:8a:18:e3:d9:47:e7:d4:74:eb:f7:4c:2b:57:b6:ca:
         ed:90:45:c3:2c:20:bf:69:ad:bc:94:20:50:67:e1:9b:26:f2:
         da:98:bc:8e:4f:59:72:8f:10:e9:23:d3:94:c1:9f:0d:1b:30:
         37:d4:d1:d6:0a:d9:78:90:5d:cd:70:1c:ef:a9:47:ef:d6:5c:
         a9:11:14:ae:a2:90:8e:62:7d:2c:1f:c7:49:bb:56:00:2c:9b:
         55:07:22:49:fe:02:6a:f0:fa:54:b7:bf:71:9c:50:80:9d:ae:
         8b:92:df:74:90:9f:ee:79:79:0a:88:88:f5:71:e8:c6:09:29:
         27:a2:8b:d2:68:c4:2d:19:e5:44:59:76:dd:4b:ef:5a:66:f6:
         71:b8:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:12 2025 by rpki-client on console.sobornost.net