Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35332e302f32342d3234203d3e20323636333735.roa
File:                     3137302e38302e35332e302f32342d3234203d3e20323636333735.roa (raw, json)
Hash identifier:          2uJN4VMVq1fiTQFOp+Yy3i0dzJnit6Smar5TQjROWVo=
Subject key identifier:   EF:4E:01:36:35:B9:75:73:B4:77:41:14:FA:B5:8C:6F:63:67:36:FB
Certificate issuer:       /CN=D6A90BECE8B023958D9E4927F946B5C29F86D4EA
Certificate serial:       16CFD67766F78361544055450B1F5CC9891CFB76
Authority key identifier: D6:A9:0B:EC:E8:B0:23:95:8D:9E:49:27:F9:46:B5:C2:9F:86:D4:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35332e302f32342d3234203d3e20323636333735.roa
Signing time:             Mon 07 Apr 2025 17:28:00 +0000
ROA not before:           Mon 07 Apr 2025 17:23:00 +0000
ROA not after:            Mon 06 Apr 2026 17:28:00 +0000
asID:                     266375
IP address blocks:        170.80.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cf:d6:77:66:f7:83:61:54:40:55:45:0b:1f:5c:c9:89:1c:fb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A90BECE8B023958D9E4927F946B5C29F86D4EA
        Validity
            Not Before: Apr  7 17:23:00 2025 GMT
            Not After : Apr  6 17:28:00 2026 GMT
        Subject: CN=EF4E013635B97573B4774114FAB58C6F636736FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:14:f5:f5:d7:76:80:91:af:a9:67:11:61:
                    be:bb:85:c5:ed:cf:5c:61:16:f6:7d:71:1f:07:4e:
                    32:b8:e7:19:87:17:fb:d3:8a:39:23:26:21:da:2b:
                    63:5f:ad:91:25:05:b6:59:fb:b5:c6:9a:41:79:b0:
                    c4:5c:27:3c:89:e3:de:73:2f:12:8f:38:4a:e5:5d:
                    a6:24:c1:a1:ce:92:e4:e2:24:21:96:7e:e6:e3:c1:
                    f6:df:ed:8a:07:05:7a:43:6e:cd:38:d4:20:e1:a5:
                    c3:32:8f:df:10:ea:94:36:21:82:ce:4d:df:3f:43:
                    4d:ee:00:24:f1:5d:ca:60:af:1a:b8:4c:ca:46:79:
                    29:1e:f6:29:27:b4:22:50:14:27:14:2b:7b:9f:5b:
                    d8:1f:c6:32:7d:eb:3b:bb:b3:62:61:61:38:d8:a9:
                    c4:64:d3:df:1d:96:c7:f4:f6:2a:88:53:fb:e0:ce:
                    65:78:c1:83:d4:1a:86:3c:26:7c:15:53:a8:03:cc:
                    0f:82:cb:d1:53:87:80:16:6f:23:2c:53:d4:6c:d7:
                    8e:f7:33:c6:4c:54:d6:c2:82:9e:69:6b:d5:c2:5f:
                    a8:b9:0b:36:78:d3:e5:a4:76:e4:b0:3f:bc:8a:78:
                    1a:6d:29:57:68:f4:73:f7:91:3e:0e:9f:73:7c:cb:
                    31:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4E:01:36:35:B9:75:73:B4:77:41:14:FA:B5:8C:6F:63:67:36:FB
            X509v3 Authority Key Identifier:
                keyid:D6:A9:0B:EC:E8:B0:23:95:8D:9E:49:27:F9:46:B5:C2:9F:86:D4:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35332e302f32342d3234203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b7:61:fd:85:db:5a:ae:49:21:aa:dd:c3:03:b5:bf:00:e3:
         5f:46:9d:35:1a:0f:16:40:cf:55:a2:73:56:68:90:07:3f:6a:
         b5:0e:67:70:bc:2a:23:15:ba:fe:fc:50:33:ca:f9:eb:c5:f9:
         22:0c:24:9b:35:96:43:63:16:6b:ee:98:d7:2a:7b:aa:e6:7e:
         d1:1c:1a:27:9f:16:61:98:bd:ea:6e:2f:80:63:b3:6f:cf:5b:
         b2:ed:17:6a:37:a2:5f:6f:ac:94:1b:94:9a:27:bf:f6:f9:2f:
         3d:41:73:89:f8:c0:4c:73:91:7c:c6:3a:d0:1d:e4:cb:26:6d:
         09:89:2f:8b:06:7e:49:18:ab:3e:cb:a0:0b:53:01:66:64:f2:
         48:09:30:62:93:b6:e8:d8:3c:84:01:6d:8f:f5:f8:1d:d5:a1:
         03:a8:d3:1b:9c:0b:d3:61:ce:d1:8f:5d:65:d2:72:df:30:62:
         1d:7c:de:3f:cb:d1:71:6d:67:54:b4:10:8a:50:7e:8c:fd:55:
         1a:61:46:b6:59:7e:b1:f2:33:cc:ba:43:6f:e2:ce:48:23:43:
         d9:83:47:2e:fe:d1:03:ce:76:ba:8d:ea:15:39:91:b1:ec:cd:
         66:6f:10:ad:18:1e:77:0e:2f:a6:b9:c8:05:1b:f8:80:d5:51:
         1a:b8:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:56 2025 by rpki-client on console.sobornost.net