Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234322e302f32342d3234203d3e20323635323337.roa
File:                     3136372e3235302e3234322e302f32342d3234203d3e20323635323337.roa (raw, json)
Hash identifier:          b+RzkYVJ2Z/JhKqSYGwhr/3+bVNKKE9g+jpPJH8mui8=
Subject key identifier:   6A:39:AF:B6:72:9D:21:C2:4E:0B:20:B9:92:6B:4A:CB:57:83:57:80
Certificate issuer:       /CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
Certificate serial:       5D0FF5AAC3E0239AB60980E5C4881587A2597390
Authority key identifier: 9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234322e302f32342d3234203d3e20323635323337.roa
Signing time:             Fri 18 Apr 2025 15:25:45 +0000
ROA not before:           Fri 18 Apr 2025 15:20:45 +0000
ROA not after:            Fri 17 Apr 2026 15:25:45 +0000
asID:                     265237
IP address blocks:        167.250.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl
                          rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0f:f5:aa:c3:e0:23:9a:b6:09:80:e5:c4:88:15:87:a2:59:73:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
        Validity
            Not Before: Apr 18 15:20:45 2025 GMT
            Not After : Apr 17 15:25:45 2026 GMT
        Subject: CN=6A39AFB6729D21C24E0B20B9926B4ACB57835780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:0f:95:df:08:7a:c1:80:f6:b9:96:9d:8c:
                    52:43:0f:a6:22:f4:ee:f8:37:0d:31:6c:0f:2f:da:
                    47:cb:b7:36:f8:fe:38:3a:77:4c:1d:c0:99:b9:46:
                    ca:a8:c3:34:d6:77:c8:f4:2a:1c:21:1e:70:c9:cd:
                    ff:bc:e3:08:63:2f:3c:b8:c6:0b:7d:b1:ca:e4:61:
                    77:d0:ca:20:6f:bb:0d:12:91:8b:0e:04:61:e0:ec:
                    6e:e4:db:13:ff:b1:70:f1:cd:f6:57:cc:ff:96:04:
                    87:ea:9c:7a:5e:71:76:61:7e:43:2f:8f:78:28:66:
                    1a:9f:1e:40:2b:07:f5:3a:7a:7b:73:b9:40:81:80:
                    1b:9b:1b:55:a2:f8:70:b0:7f:c5:74:44:f1:93:c6:
                    5c:86:02:34:81:a0:fb:a1:eb:d1:7f:3f:a6:ed:34:
                    28:7f:3b:fc:20:13:e9:c9:ff:b0:33:1f:2f:9c:5a:
                    eb:8c:00:09:3d:fc:12:b9:9a:f2:ef:4d:07:5b:b5:
                    01:8c:51:d1:7a:9c:6e:2c:42:0d:a4:fe:eb:d2:cb:
                    84:62:a8:b6:8a:ee:6f:61:8e:c3:42:1c:04:b9:b9:
                    08:bc:e4:4e:05:b5:81:2f:2f:37:d0:e9:63:7d:e0:
                    7f:05:75:32:b6:ed:31:d7:46:fe:2e:43:c4:93:c9:
                    a1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:39:AF:B6:72:9D:21:C2:4E:0B:20:B9:92:6B:4A:CB:57:83:57:80
            X509v3 Authority Key Identifier:
                keyid:9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234322e302f32342d3234203d3e20323635323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:8a:d5:8e:49:47:f3:e0:61:ef:6b:df:68:6d:73:4f:41:bb:
         ce:7a:a7:e5:6f:94:be:3f:a7:b0:65:43:90:11:5f:14:38:29:
         8e:99:97:be:3e:75:a9:54:0c:80:dc:04:26:be:8e:df:c9:ea:
         3d:06:e5:ed:45:a2:89:b2:54:1b:89:7d:19:17:39:2b:86:49:
         d4:4b:68:48:5a:ee:de:5e:a5:a0:11:e9:92:ec:e8:0f:09:e5:
         76:72:08:f6:cf:61:b3:fc:eb:e1:49:00:f0:d1:d5:39:ca:15:
         ec:18:84:03:48:03:f4:bb:55:24:64:d1:fb:20:a0:ed:c9:ec:
         d0:28:b4:19:5c:3a:1e:1d:7b:76:9c:b5:e7:f1:03:e1:27:44:
         23:b7:97:e6:46:cf:c8:e5:50:79:e4:b0:b7:7e:d7:e3:49:da:
         09:17:b2:25:a4:4d:26:6c:d9:b9:34:39:4e:08:f2:46:eb:00:
         e5:43:62:0f:df:c6:ed:cf:a8:c6:9f:6d:81:db:27:0c:31:35:
         b2:ae:4a:64:92:5b:a2:df:fb:18:28:90:eb:0a:4c:de:35:0a:
         81:29:10:cc:ae:43:5f:c8:3f:f1:cc:d1:94:85:9d:d0:06:ef:
         e2:f2:d0:ab:f3:41:f3:cd:67:84:16:37:d0:d1:71:28:bf:9d:
         23:45:50:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:30 2025 by rpki-client on console.sobornost.net