Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa
File:                     3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa (raw, json)
Hash identifier:          5CT5iL8gd5WAum3xmmFF9XzujOAt6f3FH1Xw4sVTvko=
Subject key identifier:   17:B0:1C:E1:01:DF:CD:B1:C2:BE:25:3B:CF:6F:08:90:90:72:C9:69
Certificate issuer:       /CN=36ED969D92322E6C7F28A050D3ABC47947497160
Certificate serial:       318596D878E4913BCDAF3D7311098DA79D54351B
Authority key identifier: 36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa
Signing time:             Fri 18 Apr 2025 14:30:50 +0000
ROA not before:           Fri 18 Apr 2025 14:25:50 +0000
ROA not after:            Fri 17 Apr 2026 14:30:50 +0000
asID:                     61813
IP address blocks:        201.159.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl
                          rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:85:96:d8:78:e4:91:3b:cd:af:3d:73:11:09:8d:a7:9d:54:35:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ED969D92322E6C7F28A050D3ABC47947497160
        Validity
            Not Before: Apr 18 14:25:50 2025 GMT
            Not After : Apr 17 14:30:50 2026 GMT
        Subject: CN=17B01CE101DFCDB1C2BE253BCF6F08909072C969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:69:63:49:2c:98:30:66:40:12:10:13:8d:
                    88:ea:29:49:fc:82:84:5e:f7:5a:f7:a2:47:ac:00:
                    f7:34:61:6e:11:6b:56:0a:22:bb:f5:79:44:0d:91:
                    bc:45:cd:b8:9d:25:69:60:7b:b8:13:46:26:df:07:
                    06:03:11:16:75:41:a2:36:48:6c:6e:6e:db:ac:28:
                    ec:5d:ce:c7:e0:07:48:c7:10:90:26:6f:54:c1:48:
                    44:11:9c:87:9d:3b:76:23:5e:b9:e9:f0:5e:fa:46:
                    40:2b:b7:e7:d6:fb:41:f9:50:72:c5:f5:8a:d4:60:
                    9d:c7:c1:ab:00:58:13:2e:35:eb:5d:bc:e4:e2:79:
                    2b:27:60:db:bc:2f:91:56:d5:18:fa:1a:dc:ac:c7:
                    2f:2b:d6:22:39:98:c0:5d:84:da:2d:0f:c8:c9:6d:
                    fd:b3:7e:ca:d0:ed:45:71:d2:68:e8:b3:0f:cc:2c:
                    35:15:24:15:53:6b:ff:15:14:4a:c7:b9:5a:11:ec:
                    59:17:30:7e:56:9e:a6:f7:00:c9:dd:e0:5b:3f:8b:
                    21:41:06:a4:6a:9a:2c:71:e9:f7:48:b7:dd:e2:da:
                    53:c2:27:c0:ce:fc:8f:6f:5e:96:16:bc:89:17:ac:
                    65:6b:88:e0:b6:22:67:f2:22:28:1a:30:32:6e:e6:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B0:1C:E1:01:DF:CD:B1:C2:BE:25:3B:CF:6F:08:90:90:72:C9:69
            X509v3 Authority Key Identifier:
                keyid:36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:65:0e:8a:f9:1a:e2:24:98:9c:61:5b:d6:56:91:b5:c6:d9:
         50:5f:af:98:d8:b7:dd:d1:52:13:7d:0e:5f:7b:01:d6:51:a3:
         77:44:0b:2c:f5:ab:06:cb:5a:53:3c:be:f3:2d:1e:d2:13:0e:
         86:0c:63:03:ec:2e:c7:b4:69:6c:41:af:4e:c0:29:6a:1e:ee:
         2d:b4:cf:91:a7:8f:99:f1:5d:89:e9:52:db:0c:08:6d:1d:10:
         2f:22:67:de:43:d1:d5:4e:68:49:98:6f:34:58:74:02:e5:fc:
         4d:06:77:e6:44:4c:67:18:58:19:05:6e:d1:0e:79:1d:80:2b:
         67:2b:21:f0:59:5f:20:59:a3:03:0d:ac:f3:eb:1b:49:6e:81:
         1f:ca:e6:60:a0:43:74:00:1b:11:db:28:45:ac:48:be:39:a5:
         7a:51:aa:23:52:78:aa:b0:82:7d:fd:2e:68:6f:e7:28:b9:1c:
         e9:fa:87:55:1f:ed:3c:64:06:24:60:ef:82:f7:aa:d6:7d:e1:
         88:dc:7c:f5:8e:93:d6:12:17:dd:7d:87:43:93:40:89:5f:d4:
         15:a2:75:ea:3b:c7:63:25:31:2d:14:c3:3e:cb:b3:dc:40:7a:
         52:0b:c9:1a:bf:de:fd:4b:98:55:e5:c6:4e:30:08:a4:53:85:
         88:bd:25:31
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMYWW2HjkkTvNrz1zEQmNp51UNRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFRDk2OUQ5MjMyMkU2QzdGMjhBMDUwRDNBQkM0Nzk0
NzQ5NzE2MDAeFw0yNTA0MTgxNDI1NTBaFw0yNjA0MTcxNDMwNTBaMDMxMTAvBgNV
BAMTKDE3QjAxQ0UxMDFERkNEQjFDMkJFMjUzQkNGNkYwODkwOTA3MkM5NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWGljSSyYMGZAEhATjYjqKUn8
goRe91r3okesAPc0YW4Ra1YKIrv1eUQNkbxFzbidJWlge7gTRibfBwYDERZ1QaI2
SGxubtusKOxdzsfgB0jHEJAmb1TBSEQRnIedO3YjXrnp8F76RkArt+fW+0H5UHLF
9YrUYJ3HwasAWBMuNetdvOTieSsnYNu8L5FW1Rj6Gtysxy8r1iI5mMBdhNotD8jJ
bf2zfsrQ7UVx0mjosw/MLDUVJBVTa/8VFErHuVoR7FkXMH5Wnqb3AMnd4Fs/iyFB
BqRqmixx6fdIt93i2lPCJ8DO/I9vXpYWvIkXrGVriOC2ImfyIigaMDJu5lgRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUF7Ac4QHfzbHCviU7z28IkJByyWkwHwYDVR0j
BBgwFoAUNu2WnZIyLmx/KKBQ06vEeUdJcWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFhVeUYyVm00YVpXY0RjenMzSk1SaDRydUdCUzF0bk10UE5jdkNGZXQ2
emUvMC8zNkVEOTY5RDkyMzIyRTZDN0YyOEEwNTBEM0FCQzQ3OTQ3NDk3MTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2RUQ5NjlEOTIzMjJFNkM3
RjI4QTA1MEQzQUJDNDc5NDc0OTcxNjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RYVXlGMlZtNGFaV2NEY3pzM0pNUmg0cnVHQlMxdG5NdFBOY3ZDRmV0NnplLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzODMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJn5wwDQYJKoZIhvcNAQELBQADggEBAAxlDor5
GuIkmJxhW9ZWkbXG2VBfr5jYt93RUhN9Dl97AdZRo3dECyz1qwbLWlM8vvMtHtIT
DoYMYwPsLse0aWxBr07AKWoe7i20z5Gnj5nxXYnpUtsMCG0dEC8iZ95D0dVOaEmY
bzRYdALl/E0Gd+ZETGcYWBkFbtEOeR2AK2crIfBZXyBZowMNrPPrG0lugR/K5mCg
Q3QAGxHbKEWsSL45pXpRqiNSeKqwgn39Lmhv5yi5HOn6h1Uf7TxkBiRg74L3qtZ9
4YjcfPWOk9YSF919h0OTQIlf1BWideo7x2MlMS0Uwz7Ls9xAelILyRq/3v1LmFXl
xk4wCKRThYi9JTE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:29 2025 by rpki-client on console.sobornost.net