Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232322e302f32332d3233203d3e20323634313337.roa
File:                     3137302e302e3232322e302f32332d3233203d3e20323634313337.roa (raw, json)
Hash identifier:          ZEgK7Tozgwh07FfkZ/Cpu2wch6/yd+bi1ZGK21MFsFs=
Subject key identifier:   05:59:73:C2:2F:AE:AB:ED:26:98:30:A5:D9:DF:C0:6D:91:0B:DE:7E
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       3CA871FD7896E30CA9091EA77B4F21DD76D682BB
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232322e302f32332d3233203d3e20323634313337.roa
Signing time:             Thu 06 Mar 2025 08:09:47 +0000
ROA not before:           Thu 06 Mar 2025 08:04:47 +0000
ROA not after:            Thu 05 Mar 2026 08:09:47 +0000
asID:                     264137
IP address blocks:        170.0.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a8:71:fd:78:96:e3:0c:a9:09:1e:a7:7b:4f:21:dd:76:d6:82:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Mar  6 08:04:47 2025 GMT
            Not After : Mar  5 08:09:47 2026 GMT
        Subject: CN=055973C22FAEABED269830A5D9DFC06D910BDE7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:16:ae:6b:90:9d:3c:c9:92:2c:2e:4c:f5:
                    a2:88:e6:81:c3:76:f4:72:a7:b7:c4:e0:e2:48:cc:
                    58:e3:28:4d:a3:aa:d2:c5:10:6a:af:eb:70:c8:a4:
                    a3:d5:ac:df:81:eb:e5:e6:9d:a9:bd:f8:39:9f:f2:
                    2a:16:8d:75:dc:cb:c9:df:81:ee:f3:81:8e:e2:ee:
                    d8:b5:07:dc:04:c8:30:f0:a3:fd:9f:8e:8f:82:78:
                    73:a5:94:db:0d:a6:7e:2a:79:56:83:76:73:33:4a:
                    fb:81:f5:db:4d:ab:60:b4:2b:80:16:3b:10:74:17:
                    12:a3:43:5f:15:a4:5e:20:7a:fc:db:82:9d:f4:c3:
                    58:6c:ab:0f:6d:e2:16:43:52:91:b0:35:cc:28:23:
                    b2:27:b6:79:dd:a6:8d:d8:c3:f0:2c:ea:6e:d7:10:
                    ba:aa:60:73:a6:2b:32:3e:83:a9:bb:17:50:df:ac:
                    20:25:bd:1b:cd:a3:5f:0f:ff:53:ea:ec:b8:f9:ec:
                    97:ae:ce:e2:a0:7c:60:92:20:fa:49:2e:7c:3b:e8:
                    f7:fa:fe:d7:3d:04:c2:50:7f:38:a8:6e:3f:7d:85:
                    29:a8:6a:34:5e:d8:7f:d3:d2:1c:f3:bb:eb:5a:04:
                    8b:b6:7c:c9:a9:92:d8:cb:32:1c:32:a3:1e:5d:47:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:59:73:C2:2F:AE:AB:ED:26:98:30:A5:D9:DF:C0:6D:91:0B:DE:7E
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3137302e302e3232322e302f32332d3233203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:ed:db:cd:ba:89:c2:36:08:63:1b:ac:5d:99:47:d8:a7:37:
         cf:b3:bb:90:68:46:a2:a9:9b:19:50:9e:2d:06:51:70:83:fa:
         9f:b7:88:32:74:6b:71:c4:95:4c:b5:db:d1:51:76:80:5d:e6:
         1e:21:f7:d5:3b:45:35:64:92:e8:1c:a5:0b:d9:17:c0:c8:a1:
         a1:06:f7:da:df:92:40:f1:9e:6e:1c:9c:99:9b:ef:48:6c:88:
         b1:e4:f6:80:93:d2:a8:95:7d:49:14:bb:00:da:03:6d:cf:08:
         57:14:8f:40:2f:02:95:f6:a4:cf:5b:04:3a:e8:91:cf:88:30:
         84:11:29:5f:87:13:da:27:90:75:bd:8b:69:bc:7c:69:aa:ec:
         1c:53:a2:72:02:d3:79:dd:f0:8f:77:c5:5d:bf:a3:a1:dd:48:
         88:9a:ab:19:21:19:b3:01:42:a3:82:e3:f0:c4:3e:c1:7f:25:
         3a:f0:bf:26:9f:6b:5d:54:8f:e2:06:49:3b:40:aa:1d:87:0a:
         c0:31:94:6f:e3:a2:8c:80:ca:f2:8b:52:9a:c7:93:42:8e:65:
         ab:9e:fa:e6:78:01:cf:d5:f8:56:b4:b8:89:42:9c:0f:00:a8:
         3f:f7:b7:72:6c:d9:1c:be:76:b4:80:50:f6:68:fa:d2:5f:d0:
         26:5f:97:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:05 2025 by rpki-client on console.sobornost.net