Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234302e302f32342d3234203d3e20323635323337.roa
File:                     3136372e3235302e3234302e302f32342d3234203d3e20323635323337.roa (raw, json)
Hash identifier:          pJfDrQ481G2qQFNHPbLFuC9Ni2T+/7pvAP0BTQX2Nio=
Subject key identifier:   B7:BF:D4:BD:7F:5B:EA:7B:62:D4:36:30:60:3F:2D:C6:C1:C2:04:C6
Certificate issuer:       /CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
Certificate serial:       3B994D9D0826C5AE2D60D5F5C2E5F181D41C5D09
Authority key identifier: 9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234302e302f32342d3234203d3e20323635323337.roa
Signing time:             Fri 18 Apr 2025 15:25:46 +0000
ROA not before:           Fri 18 Apr 2025 15:20:46 +0000
ROA not after:            Fri 17 Apr 2026 15:25:46 +0000
asID:                     265237
IP address blocks:        167.250.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl
                          rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:99:4d:9d:08:26:c5:ae:2d:60:d5:f5:c2:e5:f1:81:d4:1c:5d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
        Validity
            Not Before: Apr 18 15:20:46 2025 GMT
            Not After : Apr 17 15:25:46 2026 GMT
        Subject: CN=B7BFD4BD7F5BEA7B62D43630603F2DC6C1C204C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:95:32:20:fb:e0:af:38:e9:c7:5f:fe:cb:15:
                    f7:aa:cd:87:a2:b5:ab:ec:bb:a4:16:70:b4:17:9d:
                    e5:10:ac:34:0e:1b:ea:f0:7c:35:fa:ee:50:cb:05:
                    2e:c3:71:a5:82:35:fb:cb:c7:9f:95:24:c2:18:27:
                    a0:0a:80:74:a6:f3:84:14:4a:39:60:0c:c2:5a:70:
                    17:2f:04:10:9a:9d:9a:81:73:ab:a6:78:ad:bd:f0:
                    d4:78:8e:5d:9e:4f:45:d6:d7:99:d6:fb:11:fa:6a:
                    01:ce:f9:d9:b3:63:fb:39:41:c0:79:55:26:34:bd:
                    21:92:3c:ed:ae:45:97:b2:e9:cb:b4:09:f8:8a:f8:
                    e0:12:25:2e:fc:82:0f:ab:5c:74:a5:bb:2f:4a:e9:
                    8d:cb:28:02:86:f2:50:3d:78:91:78:49:ad:e8:d3:
                    32:8b:c9:27:b9:93:f8:06:8a:1a:5c:ae:70:7f:23:
                    5a:dc:e6:be:b9:22:32:f9:c2:73:57:15:73:16:fb:
                    eb:60:f5:65:5c:35:00:9f:10:5e:28:5b:b3:a5:eb:
                    62:24:ae:9e:69:56:51:dc:5c:00:53:1d:e5:52:38:
                    a1:91:b7:1e:33:cb:aa:d9:72:d0:aa:c5:d2:96:a2:
                    49:36:62:11:60:65:50:23:d2:70:4f:be:86:44:4b:
                    b2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BF:D4:BD:7F:5B:EA:7B:62:D4:36:30:60:3F:2D:C6:C1:C2:04:C6
            X509v3 Authority Key Identifier:
                keyid:9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234302e302f32342d3234203d3e20323635323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:f4:c8:a4:2d:7f:48:8a:3d:2e:ea:16:cb:26:bd:6c:93:05:
         53:6e:0a:8f:82:15:5d:7f:8e:55:db:5f:87:27:d0:dc:da:3c:
         ef:54:ca:62:b1:cf:94:fe:bf:7d:dd:da:bb:ce:44:c0:ac:f7:
         f9:68:68:f1:e0:ad:90:16:6b:b0:6c:9c:73:69:7b:d0:05:3c:
         6a:2d:e9:e5:fe:59:92:39:65:b0:2a:88:12:05:08:e2:f2:18:
         eb:22:0a:25:26:b5:29:a0:16:c7:6e:12:43:9c:75:81:36:8a:
         8d:16:11:ee:81:98:c3:d3:51:91:fb:ff:da:fa:89:55:35:ea:
         72:b5:14:a4:6e:4f:a8:cb:0e:e4:9a:95:7e:b0:91:07:64:db:
         5d:80:47:92:eb:86:87:77:10:f3:34:51:da:1f:bc:94:6b:8e:
         e7:d4:82:a5:ee:f4:83:7e:51:6e:b6:ab:1a:2f:a2:b4:85:05:
         ee:a9:99:ed:95:aa:dd:41:5b:d9:28:52:c6:a6:04:a0:61:8c:
         b0:26:aa:d4:b8:4e:aa:97:d9:94:55:8c:f4:45:cf:91:bd:9d:
         50:d1:f9:b9:2f:cf:a1:df:75:c6:a8:96:23:c5:67:af:31:71:
         99:45:9a:59:51:c6:14:34:60:c2:c5:71:6e:12:f9:ac:41:12:
         1b:60:13:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:30 2025 by rpki-client on console.sobornost.net