Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3138362e3233332e3136382e302f32342d3234203d3e20323633303738.roa
File:                     3138362e3233332e3136382e302f32342d3234203d3e20323633303738.roa (raw, json)
Hash identifier:          SRjONChYE/S3fVqC6fZtE8pqf2VjonDaOwcllPTOdYo=
Subject key identifier:   10:52:64:33:FD:23:F7:E0:DD:70:D3:01:CD:40:8E:E4:9B:FF:3B:38
Certificate issuer:       /CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
Certificate serial:       161634FA37C891F02DE61C9BBACC08DF7CACA58E
Authority key identifier: 6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3138362e3233332e3136382e302f32342d3234203d3e20323633303738.roa
Signing time:             Thu 06 Mar 2025 18:50:27 +0000
ROA not before:           Thu 06 Mar 2025 18:45:27 +0000
ROA not after:            Thu 05 Mar 2026 18:50:27 +0000
asID:                     263078
IP address blocks:        186.233.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl
                          rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 21:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:16:34:fa:37:c8:91:f0:2d:e6:1c:9b:ba:cc:08:df:7c:ac:a5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
        Validity
            Not Before: Mar  6 18:45:27 2025 GMT
            Not After : Mar  5 18:50:27 2026 GMT
        Subject: CN=10526433FD23F7E0DD70D301CD408EE49BFF3B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:1b:e3:d0:89:8a:35:79:fc:39:d8:cd:5f:
                    97:cd:97:c7:ac:d9:70:5c:fa:a4:1f:eb:3a:c6:de:
                    02:0a:69:e8:c5:30:dc:30:40:b0:07:6f:c6:0e:4f:
                    db:1d:c8:06:82:fe:89:bc:e4:1d:f3:5b:cd:fa:4d:
                    3d:9a:d4:cb:54:29:f5:2c:cb:26:7b:7d:a9:f8:59:
                    41:b8:60:47:02:e1:5d:d6:2f:2b:95:df:74:11:9f:
                    e1:c3:87:f6:5d:72:db:8b:55:f8:f8:dd:cf:d3:97:
                    58:d9:7c:a8:51:19:6a:84:f8:b9:27:12:69:05:18:
                    ba:bf:3a:5e:27:13:be:c3:1d:ab:e4:3f:2f:da:8d:
                    86:22:7d:3d:bd:4b:2e:6a:53:a2:71:eb:a6:c1:d7:
                    ae:81:a5:9c:9f:97:4a:d8:e3:4c:52:78:2c:86:56:
                    4e:06:1a:69:00:de:7f:90:d4:a7:a6:dd:48:a1:d8:
                    ef:86:e9:66:4b:42:98:15:04:6d:c3:2e:92:31:95:
                    b6:7c:42:b8:19:a4:af:00:97:cf:fb:05:a0:26:12:
                    21:d6:a4:6c:d9:83:1e:8a:5a:72:01:39:21:b7:fd:
                    2f:34:6c:96:22:36:6c:f0:54:31:3b:16:c5:9f:37:
                    a6:5d:a5:d4:07:ae:73:78:3f:c8:7c:1b:56:9d:e7:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:64:33:FD:23:F7:E0:DD:70:D3:01:CD:40:8E:E4:9B:FF:3B:38
            X509v3 Authority Key Identifier:
                keyid:6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3138362e3233332e3136382e302f32342d3234203d3e20323633303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:68:c9:c3:64:cb:9f:46:91:75:e6:fc:9a:ff:e8:c4:8a:54:
         46:9b:42:d4:32:aa:b7:b8:8d:5b:62:c2:db:90:45:b1:be:94:
         18:58:a6:a5:42:c8:ea:29:ab:40:5d:45:44:32:b5:56:1c:05:
         ec:2a:df:2b:e4:d6:e1:25:75:f8:de:22:d7:88:13:67:e1:10:
         d1:4e:5d:96:7c:77:fe:c0:c9:d0:ef:c5:8b:5c:32:f0:b1:fd:
         5a:77:9a:b3:b0:ca:8d:c8:2c:63:ea:0c:88:c1:15:e8:9a:4a:
         38:73:a9:4d:ed:b8:53:4a:f4:e8:28:e7:28:07:cb:ae:19:96:
         ca:a6:bd:e2:e5:1c:18:70:db:b3:20:2c:41:2b:8d:b9:b5:2f:
         d5:a5:ee:85:73:1e:cb:20:68:a9:73:2e:90:1d:0f:4b:c8:78:
         03:cf:45:47:0c:24:85:e1:fd:8f:bb:4a:d8:3d:74:02:be:d4:
         e5:00:b5:41:08:92:39:fd:a0:d8:d2:27:0a:66:d0:df:5c:fc:
         8d:38:40:cd:62:82:4e:a9:2e:e0:39:cc:1a:1a:c1:1d:cd:c3:
         b8:dc:28:8b:4c:d2:a8:10:60:62:06:05:1d:eb:55:04:ad:41:
         75:02:2e:ce:f2:a8:eb:23:04:8b:73:1b:99:0c:a3:91:03:69:
         33:14:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:45 2025 by rpki-client on console.sobornost.net