Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32322d3232203d3e20323633343832.roa
File:                     3137302e38332e3231322e302f32322d3232203d3e20323633343832.roa (raw, json)
Hash identifier:          ccPowp4ffMl00+nXkJxBPpe+iQV0cRpO7aaaEzTk6BA=
Subject key identifier:   C1:79:74:D1:B4:EE:F1:9A:81:33:14:FF:2D:6A:52:AE:A8:71:5D:48
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       7C42D418BF4D732AD7DBDAF59159D61323217177
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32322d3232203d3e20323633343832.roa
Signing time:             Mon 31 Mar 2025 17:13:33 +0000
ROA not before:           Mon 31 Mar 2025 17:08:33 +0000
ROA not after:            Mon 30 Mar 2026 17:13:33 +0000
asID:                     263482
IP address blocks:        170.83.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 12:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:42:d4:18:bf:4d:73:2a:d7:db:da:f5:91:59:d6:13:23:21:71:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Mar 31 17:08:33 2025 GMT
            Not After : Mar 30 17:13:33 2026 GMT
        Subject: CN=C17974D1B4EEF19A813314FF2D6A52AEA8715D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:3f:3d:a2:9e:62:cd:a9:9d:50:ad:d9:10:
                    3c:e5:60:7e:38:8f:d6:38:ad:d0:d6:f9:7c:39:0e:
                    42:e7:5d:91:98:7f:fa:0a:92:f4:d2:13:81:05:70:
                    ba:85:cc:e2:f0:ec:cb:78:8b:0e:88:df:bd:dd:a2:
                    68:76:f9:4a:51:f4:9c:3c:60:af:46:3a:6e:ac:9e:
                    d3:ca:c7:7f:53:3b:ed:ff:6f:c6:82:08:d2:00:5e:
                    ab:7b:79:ac:31:14:9a:80:cf:66:d4:64:d0:32:9c:
                    dd:8e:0a:2a:fe:f8:43:72:88:de:5c:82:98:fe:be:
                    61:30:0d:b0:03:c3:ef:33:1e:ea:80:de:2c:7c:de:
                    df:37:99:91:7f:74:47:93:ad:89:66:27:db:b3:41:
                    24:4f:70:08:ee:e8:2e:ad:8d:de:f3:cd:09:10:86:
                    5a:d2:f1:e9:4e:de:a2:eb:ee:5e:a1:07:63:2f:f9:
                    3c:94:97:15:4f:49:c3:5a:e2:64:52:09:9b:99:27:
                    40:4a:fe:38:85:73:7a:8c:d2:d3:d7:e0:7a:cb:bc:
                    cb:ef:c9:28:a5:fc:3c:79:a7:76:a6:5c:da:54:7e:
                    01:3d:5c:8d:ca:cf:bd:ee:26:c9:fd:08:7d:3e:73:
                    b2:45:cb:e0:d1:50:49:fa:79:28:21:b7:74:24:09:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:79:74:D1:B4:EE:F1:9A:81:33:14:FF:2D:6A:52:AE:A8:71:5D:48
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32322d3232203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:64:b7:02:7a:3b:5a:3c:a1:32:3e:36:a6:b9:a7:62:e2:ab:
         d0:71:21:ad:a6:ce:ef:c8:81:e1:60:61:25:dd:86:3b:5a:2a:
         f4:63:d2:59:f6:4c:df:22:b2:5f:13:91:42:3e:ec:55:e2:f1:
         d0:71:04:f9:c6:e5:bd:0b:e9:9a:8f:e7:04:fd:b6:b2:17:70:
         1f:7a:35:a4:66:d2:29:98:9b:eb:b4:6d:15:e5:e4:91:44:45:
         4e:fc:35:87:29:44:f6:e7:d9:6e:06:8b:b5:e6:db:c0:a2:6a:
         6b:e2:fd:57:e4:a6:03:00:ff:8e:a6:29:21:51:9c:de:5c:79:
         fa:83:e4:04:ff:fb:0a:74:94:b1:97:ea:73:36:ce:8f:8a:1f:
         33:26:ee:fa:c4:54:a7:de:12:3f:04:cb:f3:61:6a:30:70:c9:
         bd:79:66:86:01:d9:ec:38:c9:dc:47:02:b8:26:b6:31:77:2b:
         bc:5a:c8:79:d2:80:a9:54:8c:41:e7:7a:fa:a6:25:e6:44:9d:
         32:ce:91:54:5e:a3:2e:76:f6:88:31:57:a0:ed:f0:84:84:0e:
         cd:27:c0:b6:73:7a:c0:e3:7e:a1:42:56:0f:8d:96:e6:59:c4:
         b6:92:75:6d:00:88:1c:a1:3d:c8:f2:db:c1:7f:a9:f4:27:af:
         be:dd:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:21 2025 by rpki-client on console.sobornost.net