Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa
File:                     3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier:          Li9yad9pRIt8j8e7uhRxuOJ6b+GkhPrhw4x8Fx81KIQ=
Subject key identifier:   A9:6A:9C:90:74:DC:1E:9B:93:D2:64:47:47:7C:6A:ED:9E:F1:5A:E4
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       040135E7170BEF12FE27919B3C107CDCBF6D9187
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa
Signing time:             Mon 31 Mar 2025 17:13:32 +0000
ROA not before:           Mon 31 Mar 2025 17:08:32 +0000
ROA not after:            Mon 30 Mar 2026 17:13:32 +0000
asID:                     263482
IP address blocks:        170.83.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 12:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:01:35:e7:17:0b:ef:12:fe:27:91:9b:3c:10:7c:dc:bf:6d:91:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Mar 31 17:08:32 2025 GMT
            Not After : Mar 30 17:13:32 2026 GMT
        Subject: CN=A96A9C9074DC1E9B93D26447477C6AED9EF15AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1b:bf:0e:58:e7:65:a6:b7:a5:0d:fe:7e:13:
                    f3:ca:86:c6:14:80:f8:4e:76:1d:b0:ce:91:31:5b:
                    e4:84:2b:6c:1e:33:41:2e:50:19:52:0e:3c:97:4e:
                    2a:51:c5:2e:36:07:82:72:53:c4:6f:78:5d:06:1a:
                    60:68:17:7f:aa:fc:7e:f4:46:00:17:15:9a:8e:39:
                    6b:db:6f:6c:de:2c:99:7c:26:14:c4:f1:67:c3:30:
                    ac:36:93:e9:e6:36:bd:6e:f3:33:e7:18:88:c8:73:
                    2c:b4:90:b9:0e:e7:e2:48:f1:f0:6a:39:a4:c3:dd:
                    a5:b6:63:60:96:49:47:6c:cc:4a:63:32:40:6b:6a:
                    23:8e:2d:de:6d:c5:0f:e9:85:40:34:cc:3a:5e:27:
                    c2:a1:6a:a4:45:1f:e4:8a:8b:79:8b:ae:d6:9d:13:
                    bf:5e:84:c6:9e:68:c3:72:8f:9b:43:2e:c2:03:58:
                    36:2c:17:7c:52:eb:b9:ff:86:24:cb:f1:64:84:60:
                    f3:f1:3c:14:dc:3b:4c:32:e8:38:c5:19:2a:82:4a:
                    cb:0c:53:1c:ae:cb:05:f8:9e:fb:90:ba:6e:3b:d2:
                    ee:1a:4e:62:05:fa:8b:14:fd:82:0a:e9:ab:9e:1d:
                    79:9c:86:27:84:e9:41:6d:7e:0e:99:f8:7a:45:e5:
                    fc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6A:9C:90:74:DC:1E:9B:93:D2:64:47:47:7C:6A:ED:9E:F1:5A:E4
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:e2:92:26:85:98:ff:fb:82:4b:94:6d:15:ae:d7:0f:35:
         0e:1a:fe:c4:5e:2e:77:33:30:a8:8e:82:43:41:4f:86:9a:fd:
         75:1f:8c:06:2e:0c:25:ab:ae:59:49:ce:59:7d:11:f3:34:31:
         71:76:4d:8e:b9:55:c4:22:13:2a:35:50:98:a4:ec:26:de:b5:
         b0:bd:bf:76:92:a1:39:62:92:7b:14:d1:13:bc:b2:85:57:5b:
         b3:31:a5:33:d8:ea:f3:46:1a:70:4a:7c:a3:bc:f4:ef:d2:ff:
         30:e8:8e:10:5b:dc:61:5b:83:6a:88:e4:34:57:6e:57:46:5b:
         29:ba:aa:22:cb:71:55:63:a0:3b:72:2a:6a:99:e1:c6:26:a3:
         02:fa:dc:d1:2f:52:e1:62:54:6a:de:de:d5:b1:0e:d4:c1:59:
         73:f3:b6:93:0c:22:5e:54:f8:d6:b6:61:35:ca:24:9d:d6:57:
         9f:39:e8:05:8e:76:82:6f:27:31:2a:f6:17:53:90:4e:d0:05:
         cc:4e:77:1b:32:18:35:9c:47:98:6b:b7:3a:b5:16:90:f5:2f:
         5a:e1:bb:4c:3d:1d:63:53:11:9c:79:1a:27:d2:f8:c7:2f:cf:
         8d:d9:bb:58:4c:b3:15:e8:e4:73:be:37:af:b4:95:96:bb:a4:
         62:8d:1e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:21 2025 by rpki-client on console.sobornost.net