Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/3138372e38362e3136302e302f32342d3234203d3e20323730393932.roa
File:                     3138372e38362e3136302e302f32342d3234203d3e20323730393932.roa (raw, json)
Hash identifier:          wra75O4vahVWR8gjFtpSFBmvarbLyh7jNOWdQTR3Lak=
Subject key identifier:   A4:45:F4:09:8C:9C:93:28:E2:90:B3:B3:2F:88:93:76:58:05:5D:AF
Certificate issuer:       /CN=84BE8DAC97679B597EE7D16D314BEA427BB99664
Certificate serial:       6671A9F6B2331C5C29851D7961A48D75B15363C1
Authority key identifier: 84:BE:8D:AC:97:67:9B:59:7E:E7:D1:6D:31:4B:EA:42:7B:B9:96:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84BE8DAC97679B597EE7D16D314BEA427BB99664.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/3138372e38362e3136302e302f32342d3234203d3e20323730393932.roa
Signing time:             Thu 06 Feb 2025 01:29:52 +0000
ROA not before:           Thu 06 Feb 2025 01:24:52 +0000
ROA not after:            Thu 05 Feb 2026 01:29:52 +0000
asID:                     270992
IP address blocks:        187.86.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.crl
                          rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84BE8DAC97679B597EE7D16D314BEA427BB99664.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:71:a9:f6:b2:33:1c:5c:29:85:1d:79:61:a4:8d:75:b1:53:63:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84BE8DAC97679B597EE7D16D314BEA427BB99664
        Validity
            Not Before: Feb  6 01:24:52 2025 GMT
            Not After : Feb  5 01:29:52 2026 GMT
        Subject: CN=A445F4098C9C9328E290B3B32F88937658055DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:ab:28:cb:a1:12:89:ff:93:94:8e:4e:e3:
                    9a:be:ed:d7:a7:a1:71:5c:7d:f9:4f:e6:73:24:10:
                    e0:fc:80:d4:9f:d5:89:53:1c:54:de:68:97:b3:18:
                    e1:b2:38:9f:27:38:95:a1:c3:34:a7:aa:94:c8:c0:
                    24:64:f9:34:bc:87:c3:f9:e5:a8:7f:54:d3:df:6c:
                    bb:d2:12:da:a1:f5:e6:34:cb:5d:57:d1:a6:02:74:
                    02:87:7c:8a:92:08:d8:7a:6f:3c:8a:f6:fe:20:89:
                    ca:e5:89:92:79:50:18:9a:05:94:1d:c6:49:bb:1f:
                    af:04:88:9b:e2:6a:8e:31:51:83:56:82:f2:94:d7:
                    bf:f2:37:83:5a:72:21:b6:87:e1:c3:bc:94:e5:db:
                    6b:c2:cf:60:f3:ff:f5:1b:53:fc:be:16:df:da:6c:
                    4d:b0:9c:9a:e2:c9:55:79:c2:fa:d6:4b:f4:b4:a9:
                    65:9f:d7:63:fb:08:39:04:d0:40:61:2b:2d:de:5a:
                    dc:64:1c:fd:2d:df:8e:fd:90:0a:ec:47:cd:7c:2f:
                    23:86:e1:ca:59:0d:52:c7:dc:f1:54:fa:43:dd:c4:
                    b9:dd:99:89:13:79:01:28:d1:79:a8:ec:86:f2:c5:
                    f4:b9:c6:f9:3b:93:2c:39:35:40:30:94:d1:ad:3a:
                    ac:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:45:F4:09:8C:9C:93:28:E2:90:B3:B3:2F:88:93:76:58:05:5D:AF
            X509v3 Authority Key Identifier:
                keyid:84:BE:8D:AC:97:67:9B:59:7E:E7:D1:6D:31:4B:EA:42:7B:B9:96:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84BE8DAC97679B597EE7D16D314BEA427BB99664.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/3138372e38362e3136302e302f32342d3234203d3e20323730393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:fb:b7:5c:fa:2a:5b:1d:70:e2:29:38:6e:01:9c:26:2b:13:
         28:1f:c3:98:d0:2e:4f:40:49:45:1f:b2:c8:11:c1:9d:03:0f:
         09:69:29:dd:2e:af:e5:f2:ea:40:d2:53:00:3d:c1:f7:63:de:
         d7:c8:92:49:20:89:da:c9:8a:bb:7f:bc:b9:32:ff:ec:a6:5d:
         fd:16:ab:dd:34:50:99:aa:10:55:b6:38:7d:62:69:f7:62:c8:
         ab:c1:09:9d:89:2d:98:ed:54:78:57:2d:d9:6a:34:0d:68:62:
         f5:25:16:fb:7e:2f:ad:7c:66:94:33:6a:69:ab:44:b8:2d:57:
         ee:d4:4f:7d:fd:af:bf:ed:34:c3:ca:15:dc:54:da:eb:bf:b1:
         e7:eb:ea:bc:b9:5c:9f:90:a9:dd:7c:b3:f1:7b:e7:6d:5b:13:
         a0:ed:52:b6:72:20:52:4e:7c:cb:02:7b:da:aa:e1:3a:68:18:
         a3:37:cd:5d:1e:f5:c7:a3:e3:b0:70:c2:5c:46:ef:ac:d1:da:
         c9:a8:ca:5c:30:bc:9c:4c:36:34:69:9d:c6:e7:dd:df:b3:d8:
         5d:40:a1:61:c4:1a:95:15:ef:ff:f6:c4:b8:86:08:30:f4:bd:
         ff:90:75:3e:aa:f5:e2:51:eb:bd:eb:8d:fc:85:bb:f5:21:77:
         fa:f2:9c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:17 2025 by rpki-client on console.sobornost.net