Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa
File:                     3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa (raw, json)
Hash identifier:          JL+tQ5Kfrej9dzNOHqdA47WL83D9j5wRJVEy93Y0jqU=
Subject key identifier:   A1:1E:06:1F:C8:BB:ED:92:93:29:95:F3:BE:32:0E:B6:78:44:F2:56
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       67950AB8DB820D84CF615099C986FAA7EF28F467
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa
Signing time:             Thu 06 Mar 2025 07:44:37 +0000
ROA not before:           Thu 06 Mar 2025 07:39:37 +0000
ROA not after:            Thu 05 Mar 2026 07:44:37 +0000
asID:                     270910
IP address blocks:        138.121.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:95:0a:b8:db:82:0d:84:cf:61:50:99:c9:86:fa:a7:ef:28:f4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Mar  6 07:39:37 2025 GMT
            Not After : Mar  5 07:44:37 2026 GMT
        Subject: CN=A11E061FC8BBED92932995F3BE320EB67844F256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3a:e1:9a:84:72:95:b6:46:9c:a4:a8:c8:e1:
                    15:b1:ed:ce:e3:58:56:04:a4:ac:97:83:ce:80:ac:
                    25:5c:2a:3c:f9:b7:02:43:c1:8e:ca:e6:a3:77:3e:
                    80:ac:44:af:7f:0d:e1:75:b7:c7:27:bc:08:33:51:
                    02:60:38:95:ca:f4:64:cf:81:ce:89:c2:9c:0d:9c:
                    9a:f3:b4:77:24:1e:a2:21:f3:68:ba:5f:a1:2f:c0:
                    f0:64:86:6a:fa:db:83:99:80:fd:97:9a:99:8a:09:
                    68:2a:63:6e:42:03:49:0c:39:5c:c9:28:37:57:16:
                    3a:7e:cc:b4:b3:7b:ba:8f:fe:a8:6d:03:7d:6f:54:
                    8a:3e:4c:62:8c:3e:8e:1d:58:88:47:21:71:e9:34:
                    9d:00:b6:35:eb:3d:da:aa:e8:e9:70:4d:9e:ff:a8:
                    c4:97:3f:1d:30:45:5c:62:4c:7c:61:ca:5d:f4:96:
                    b5:08:e8:33:6c:5f:1f:ff:48:ff:2a:3f:a7:1e:c7:
                    2d:62:07:2a:ad:8f:be:c1:e9:21:dd:b0:64:6a:25:
                    57:1c:95:80:51:eb:23:18:da:9b:8c:14:d0:4e:20:
                    48:a7:44:c0:77:1d:a9:14:1d:42:cf:a7:4e:ba:0b:
                    d3:41:68:04:c9:0f:3d:72:27:19:d1:de:db:19:df:
                    9c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1E:06:1F:C8:BB:ED:92:93:29:95:F3:BE:32:0E:B6:78:44:F2:56
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:5f:db:4d:46:54:49:83:80:88:4e:b3:8f:e5:a3:30:30:
         9c:16:a4:b3:0b:b2:f9:6d:36:12:95:24:71:ae:bd:d8:ff:0a:
         a5:09:82:c0:82:50:7f:76:d2:3d:ae:b3:32:36:f8:82:ec:44:
         c4:07:ee:e9:c3:98:0e:09:8d:33:53:58:b5:d2:1d:e4:ff:13:
         26:8c:56:91:e4:4e:ce:f6:dc:5c:57:0f:15:83:6d:0b:0f:0f:
         05:35:76:4b:b7:88:20:55:92:bd:f7:a0:66:a7:ba:f4:dc:58:
         11:e7:c4:58:0c:e7:99:c6:56:9a:91:c6:00:bd:0c:2f:16:e0:
         c6:70:5b:1f:78:de:2c:fd:4f:8b:5a:73:c3:3b:39:4c:30:d2:
         59:3e:1f:8e:9a:18:e0:03:3b:d6:24:bf:38:a7:7c:36:68:d5:
         92:25:03:09:bb:20:af:be:f1:9d:5e:92:d6:2f:c1:a0:39:fb:
         7f:04:3c:e2:da:1c:fd:da:64:81:bb:55:6c:08:fe:96:91:96:
         e9:5e:b2:e6:58:c7:d3:04:6a:d9:3d:16:61:53:0e:61:85:4c:
         12:58:57:66:d1:8c:34:b3:7b:16:8b:19:80:f6:2d:c6:4b:8a:
         8a:7f:29:cb:4f:da:16:74:30:9a:23:8e:e2:04:e2:e7:43:52:
         de:9f:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:12 2025 by rpki-client on console.sobornost.net