Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32322d3234203d3e20323730343633.roa
File:                     3230302e38312e34382e302f32322d3234203d3e20323730343633.roa (raw, json)
Hash identifier:          AHLcZlyEnqbLe/LweuZGI3cnTPX/YBr3pom/98MGKt0=
Subject key identifier:   22:85:20:CF:20:49:77:B1:C0:B3:A1:B4:80:B4:AB:8B:C8:F8:23:AD
Certificate issuer:       /CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
Certificate serial:       29430EF6DC2185039A0061C1694B4907FEC0E3F7
Authority key identifier: B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32322d3234203d3e20323730343633.roa
Signing time:             Wed 23 Apr 2025 17:31:06 +0000
ROA not before:           Wed 23 Apr 2025 17:26:06 +0000
ROA not after:            Wed 22 Apr 2026 17:31:06 +0000
asID:                     270463
IP address blocks:        200.81.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl
                          rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:43:0e:f6:dc:21:85:03:9a:00:61:c1:69:4b:49:07:fe:c0:e3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
        Validity
            Not Before: Apr 23 17:26:06 2025 GMT
            Not After : Apr 22 17:31:06 2026 GMT
        Subject: CN=228520CF204977B1C0B3A1B480B4AB8BC8F823AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:38:29:55:ea:fa:c8:8c:f5:70:9f:d2:67:
                    6f:d2:b4:ae:a2:cc:e8:07:59:36:01:bc:83:e3:16:
                    07:68:c7:65:e1:f7:82:32:7a:0e:7e:5b:8a:fb:5e:
                    a2:a9:8d:64:bb:92:bb:42:81:fb:33:68:05:63:87:
                    45:71:2b:40:53:42:82:01:70:d0:93:91:67:7f:d9:
                    8e:2f:c6:a8:29:c2:89:1d:79:18:5a:e7:36:6f:f6:
                    01:88:90:f4:af:61:f2:b3:4b:09:d1:73:3f:8c:75:
                    1e:37:3b:7b:f4:79:fa:f8:08:44:cd:af:ee:ba:7a:
                    3d:78:dd:ea:85:e6:81:45:22:85:f4:c4:60:00:64:
                    b6:62:cc:a1:3c:86:e6:40:13:3e:e9:88:c3:c6:6c:
                    eb:d4:96:17:e7:40:90:ba:d9:21:5b:96:0e:c7:79:
                    6d:1f:2b:35:b0:f9:ca:a5:d4:0b:69:81:4d:d8:84:
                    d8:07:0e:16:39:9f:de:cf:f6:3c:80:14:3a:35:cc:
                    d1:68:d0:56:12:fb:ec:1e:3b:eb:56:91:0a:40:8f:
                    76:c5:bd:30:b8:a9:4a:37:0b:df:22:09:60:0f:96:
                    31:4f:22:53:ea:72:db:f9:e5:5c:8f:61:2a:8d:27:
                    1c:d7:f6:4a:80:80:0a:80:5d:0e:c8:a7:33:68:46:
                    94:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:85:20:CF:20:49:77:B1:C0:B3:A1:B4:80:B4:AB:8B:C8:F8:23:AD
            X509v3 Authority Key Identifier:
                keyid:B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32322d3234203d3e20323730343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:73:cf:a0:b3:18:41:de:7e:87:45:1b:a0:7c:a9:df:13:09:
         c3:e2:6b:06:5e:a3:90:8d:eb:58:39:cf:20:a4:1b:a6:8a:9a:
         56:36:48:aa:d0:b5:c4:80:27:02:ec:07:54:df:63:cd:13:23:
         d5:af:39:b0:ac:94:2c:19:0b:e2:59:af:8b:07:7e:f3:92:b1:
         55:f8:7c:0b:0f:4c:a6:e8:82:e7:e4:e4:37:2b:64:3a:3c:e8:
         cd:97:12:64:71:2f:00:5a:5f:99:97:90:de:fa:15:b1:e5:ca:
         4f:f1:3e:e0:6b:93:9d:46:ef:18:e5:47:9d:85:6c:a4:43:3e:
         8f:8d:12:5c:70:0e:bc:43:7e:ec:29:ce:83:1b:cd:73:01:a9:
         0a:25:ea:28:b2:25:cc:17:02:61:3a:1a:de:6c:14:da:4f:bc:
         0c:d4:f3:c0:e6:4c:5f:1e:dd:30:67:e9:25:60:e8:09:76:27:
         24:c8:61:a8:07:ec:06:55:e9:16:5a:45:46:a1:58:10:e8:91:
         59:ba:e7:f0:a9:35:69:df:b3:10:20:58:38:65:a3:ec:ca:9e:
         0e:92:f0:72:40:65:7b:b1:7c:c3:49:c5:65:3b:e0:d4:f1:b8:
         9d:89:65:86:a8:1c:c8:c8:f2:da:0b:21:85:e5:15:de:48:52:
         b9:37:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:08 2025 by rpki-client on console.sobornost.net