Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32332d3233203d3e20323636333735.roa
File:                     3137302e38302e35342e302f32332d3233203d3e20323636333735.roa (raw, json)
Hash identifier:          RiZPVlhlrUPxU/Mp3+7djyUAYknTXn9SwLL8gCsJ1FY=
Subject key identifier:   82:BD:C3:E0:D5:4A:5E:60:46:A9:AE:F3:38:71:08:7F:F1:21:B0:18
Certificate issuer:       /CN=D6A90BECE8B023958D9E4927F946B5C29F86D4EA
Certificate serial:       39C7A4FDB5F2187DE12CAD29608911337318182C
Authority key identifier: D6:A9:0B:EC:E8:B0:23:95:8D:9E:49:27:F9:46:B5:C2:9F:86:D4:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32332d3233203d3e20323636333735.roa
Signing time:             Mon 07 Apr 2025 17:28:00 +0000
ROA not before:           Mon 07 Apr 2025 17:23:00 +0000
ROA not after:            Mon 06 Apr 2026 17:28:00 +0000
asID:                     266375
IP address blocks:        170.80.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c7:a4:fd:b5:f2:18:7d:e1:2c:ad:29:60:89:11:33:73:18:18:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A90BECE8B023958D9E4927F946B5C29F86D4EA
        Validity
            Not Before: Apr  7 17:23:00 2025 GMT
            Not After : Apr  6 17:28:00 2026 GMT
        Subject: CN=82BDC3E0D54A5E6046A9AEF33871087FF121B018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:3b:2b:de:94:28:25:6a:38:a2:dd:bc:74:
                    85:b1:c1:2a:ed:63:a7:e0:fb:8f:84:75:0c:e0:2d:
                    62:68:77:25:c4:c5:20:75:7c:c6:9c:bb:75:aa:49:
                    50:a1:b2:59:d3:bd:d0:74:b4:d7:12:48:09:e9:73:
                    b0:5b:c9:39:5c:3b:6d:01:cd:7b:3b:15:fb:c2:5e:
                    d0:fc:eb:68:24:93:11:1b:fc:26:0c:df:25:a2:2c:
                    f4:62:4b:9f:d3:d3:5c:43:e7:43:67:b6:0f:9e:3c:
                    e9:8f:18:43:9e:bb:1b:97:81:46:40:f0:b5:8f:6c:
                    2c:52:15:45:12:fc:6e:48:e6:76:2f:98:f4:6c:8c:
                    48:01:cf:96:b7:ca:19:16:7b:c0:8e:7d:be:98:f0:
                    a2:04:80:97:d7:0b:9a:d0:68:18:23:ee:55:00:09:
                    4a:d6:84:44:ad:15:fd:6d:e3:93:fc:5c:8a:34:5f:
                    00:b0:c4:4a:d4:e3:ea:1e:a9:8a:3a:9f:79:ac:4e:
                    66:65:69:b9:4f:d8:7f:4c:98:25:52:67:07:cb:55:
                    c1:78:f6:03:22:04:c1:e1:4c:19:7f:7c:26:36:25:
                    2b:0a:46:26:3b:7f:58:fd:73:a2:32:21:ec:e1:65:
                    89:34:42:ea:0b:17:23:52:9c:00:42:0e:31:b8:66:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BD:C3:E0:D5:4A:5E:60:46:A9:AE:F3:38:71:08:7F:F1:21:B0:18
            X509v3 Authority Key Identifier:
                keyid:D6:A9:0B:EC:E8:B0:23:95:8D:9E:49:27:F9:46:B5:C2:9F:86:D4:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A90BECE8B023958D9E4927F946B5C29F86D4EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32332d3233203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:49:f2:ff:a6:22:97:9c:53:c3:56:e2:8f:60:4b:3d:4e:02:
         7f:ea:ae:5a:c5:13:d8:ec:7a:2b:33:64:36:3d:e4:45:c1:3c:
         1a:5b:0f:70:ff:2e:6f:c3:81:f4:ea:f2:be:f0:80:a6:f7:37:
         c4:26:3c:54:15:7a:60:90:d6:9a:7e:1b:94:a7:8b:72:e3:89:
         b3:40:36:88:f9:97:a2:79:da:68:b6:23:e8:48:66:39:5e:48:
         e9:94:83:dc:2e:45:d5:57:b6:7b:2c:2e:4b:7f:aa:b2:8f:6b:
         f3:48:ea:27:d7:43:8a:82:bb:53:2c:e9:96:35:42:5f:a6:6c:
         40:25:37:ac:a3:11:33:bc:6a:d2:b3:32:ea:67:5f:0c:67:d8:
         0e:b4:68:64:d5:9a:06:36:a9:b1:5e:f1:88:6f:00:34:31:54:
         a5:37:9c:51:f0:08:93:b3:54:04:f3:0e:47:3f:5d:55:24:3c:
         62:5c:54:7e:b2:0e:b2:31:50:fd:03:ef:41:e9:b5:9d:a9:ae:
         52:46:e1:76:1c:3b:64:ad:2e:61:6b:44:2c:a6:6b:25:ba:ee:
         f6:2e:04:a6:23:2f:dc:be:b8:d8:44:7e:f7:58:ac:aa:f5:a9:
         f4:12:40:57:75:dc:83:83:f8:1c:e6:a4:ca:87:7d:86:d9:a2:
         33:7a:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:56 2025 by rpki-client on console.sobornost.net