Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231342e302f32342d3234203d3e20323633343832.roa
File:                     3137302e38332e3231342e302f32342d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          FU2pH0rE6XhWlgz8ddlIMwPu2p0o1BuPuTQRZvwYFMQ=
Subject key identifier:   2F:4D:FA:63:0F:22:BD:F6:32:9F:3B:0D:68:E4:A1:8F:29:51:7B:96
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       59D77546C9C0FB0C9634204BE8E4EF74FFD6C750
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231342e302f32342d3234203d3e20323633343832.roa
Signing time:             Mon 31 Mar 2025 17:13:31 +0000
ROA not before:           Mon 31 Mar 2025 17:08:31 +0000
ROA not after:            Mon 30 Mar 2026 17:13:31 +0000
asID:                     263482
IP address blocks:        170.83.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 12:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d7:75:46:c9:c0:fb:0c:96:34:20:4b:e8:e4:ef:74:ff:d6:c7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Mar 31 17:08:31 2025 GMT
            Not After : Mar 30 17:13:31 2026 GMT
        Subject: CN=2F4DFA630F22BDF6329F3B0D68E4A18F29517B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0c:0f:1c:1a:11:ad:1c:4e:a3:df:27:42:da:
                    41:49:d8:4c:54:41:d1:6d:12:3c:af:3e:c1:5e:11:
                    33:93:c5:84:1c:b4:00:e3:bb:b1:e4:90:5b:7b:ab:
                    00:75:ff:ec:98:8f:d7:1c:30:91:40:b1:8b:e8:ca:
                    4d:8b:e7:de:d2:29:e2:f3:fa:02:8e:d8:a1:cb:38:
                    73:8f:35:6e:a5:3b:9e:ce:71:93:19:2e:36:1f:ea:
                    3f:4d:34:51:5f:2f:02:f0:11:f0:33:b5:ec:db:ef:
                    a7:db:3e:57:d3:5d:f5:cc:00:31:58:8e:c2:8d:87:
                    64:de:fd:bf:1f:78:f6:ea:b3:b6:fd:61:96:b9:6a:
                    a5:d0:78:44:08:a6:6a:05:d1:48:b9:aa:44:b5:1e:
                    7c:b0:0b:e3:65:81:78:f9:f6:3f:13:45:b1:f4:08:
                    bb:ba:04:d1:46:d3:92:4c:05:f2:e2:93:63:b4:a9:
                    ad:d2:c4:d9:fa:db:d0:87:f0:81:69:c7:4b:2b:82:
                    1c:02:84:bf:d9:0f:16:40:8c:97:14:e9:38:7e:ee:
                    7c:5a:f1:63:5e:c0:93:4e:4c:e2:c2:e8:45:59:19:
                    29:f5:33:a1:fa:cd:5d:b1:de:f0:06:67:1b:12:78:
                    4e:85:7f:81:28:32:2b:31:39:24:38:fe:e8:76:5b:
                    d5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4D:FA:63:0F:22:BD:F6:32:9F:3B:0D:68:E4:A1:8F:29:51:7B:96
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231342e302f32342d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:8b:3f:31:01:71:fa:25:77:24:44:bf:01:59:b9:a1:98:24:
         20:7c:58:7e:5a:b6:42:e2:48:a5:00:f1:f3:dd:ed:cf:59:a9:
         7c:ba:97:25:4a:05:6d:80:6c:f7:57:07:6f:73:88:58:5f:11:
         a2:df:04:e6:34:e8:7a:2e:20:f2:5e:45:00:68:03:41:9a:40:
         b2:a0:62:ce:99:88:dd:58:37:27:16:93:0b:c3:14:8d:48:7f:
         45:3e:00:6e:54:c1:5d:a2:97:a4:76:74:63:38:f3:97:8b:45:
         21:2d:7f:50:d9:2e:cf:52:ca:e1:9f:68:88:02:a4:99:ec:36:
         dd:3d:37:bd:57:3b:3a:b6:3a:2c:4b:41:23:20:ec:54:d8:8d:
         4c:ea:45:e7:06:bf:7b:2e:67:76:1f:ad:93:55:91:39:02:dc:
         65:2f:36:92:fb:76:cb:46:54:06:a0:97:0a:ca:d9:3d:8d:12:
         e8:5d:0a:4d:50:18:c5:8f:79:36:a8:f5:b6:00:da:53:d9:68:
         64:05:0c:e1:18:2e:31:ec:02:c4:65:ac:b4:75:9c:de:02:55:
         e1:9f:30:aa:d7:21:c9:9d:a2:44:73:4e:da:21:88:b6:69:87:
         4f:98:2b:ca:e9:40:99:f1:36:1b:f8:a8:7d:95:fc:c6:22:40:
         2d:61:77:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:21 2025 by rpki-client on console.sobornost.net