Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232322e302f32342d3234203d3e20323636343438.roa
File:                     3137302e38322e3232322e302f32342d3234203d3e20323636343438.roa (raw, json)
Hash identifier:          gata3Kllvj+27YsbLovNVVwyPTgib4L/aDShfOivA8E=
Subject key identifier:   4E:60:6B:43:86:47:CF:3B:EA:4A:91:09:FC:6C:C4:A9:55:E5:C8:27
Certificate issuer:       /CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
Certificate serial:       060E7E564E2C19049741FF8C0D2F00F763B6D756
Authority key identifier: 10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232322e302f32342d3234203d3e20323636343438.roa
Signing time:             Thu 06 Mar 2025 04:42:07 +0000
ROA not before:           Thu 06 Mar 2025 04:37:07 +0000
ROA not after:            Thu 05 Mar 2026 04:42:07 +0000
asID:                     266448
IP address blocks:        170.82.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl
                          rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0e:7e:56:4e:2c:19:04:97:41:ff:8c:0d:2f:00:f7:63:b6:d7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
        Validity
            Not Before: Mar  6 04:37:07 2025 GMT
            Not After : Mar  5 04:42:07 2026 GMT
        Subject: CN=4E606B438647CF3BEA4A9109FC6CC4A955E5C827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:85:58:72:d1:b4:ba:64:2e:29:8c:9f:48:
                    83:72:b2:29:00:8f:4f:f5:d2:25:c0:7f:75:5d:3e:
                    92:70:ee:e9:6e:e9:62:ad:e0:a4:f1:e4:85:50:44:
                    43:a1:e4:5e:3b:88:1f:b1:f3:58:b6:8c:63:44:6b:
                    92:3d:f3:a6:47:61:83:f0:a7:7f:80:8c:92:03:73:
                    f9:00:79:c0:55:4c:e7:cb:b5:c0:0b:08:2e:fa:00:
                    47:27:b9:08:f1:be:56:6e:f5:70:f1:33:d2:16:4d:
                    0c:c2:82:d7:cf:ee:56:5f:7d:44:fa:ff:1f:c0:61:
                    3c:ea:93:24:3b:20:69:d4:fc:b1:d7:e0:f0:10:eb:
                    bf:30:8c:3d:9a:6d:bb:2d:35:26:4b:a3:16:85:1f:
                    75:1e:b9:ba:70:f2:0f:ca:3a:14:57:30:ba:76:d0:
                    31:b3:c9:c9:a7:2c:45:40:79:09:be:0b:7d:0a:ca:
                    ab:f1:11:8d:d2:95:73:96:e8:3d:b5:ce:cf:5e:69:
                    6b:95:cd:8f:a9:75:46:80:c9:5d:c8:db:4e:c4:71:
                    6e:f5:a0:e1:e8:30:09:ba:7b:0b:53:4d:95:ab:e7:
                    7e:21:13:37:6a:75:5f:e4:a0:25:3b:18:a0:f5:c9:
                    60:2d:23:ac:38:05:34:24:45:03:82:e0:e5:01:14:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:60:6B:43:86:47:CF:3B:EA:4A:91:09:FC:6C:C4:A9:55:E5:C8:27
            X509v3 Authority Key Identifier:
                keyid:10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232322e302f32342d3234203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e6:fe:a5:69:c7:d8:cf:d4:a4:50:d9:4f:d7:c5:2e:c6:d7:
         92:58:ce:b1:05:f2:91:87:c4:13:8d:09:f1:55:f0:30:30:9b:
         78:ef:be:66:52:b9:8d:08:e2:0d:ec:51:79:25:2d:d8:9c:86:
         2f:62:40:38:22:98:b6:6d:00:da:96:72:16:c3:c1:26:5c:a8:
         ec:89:fc:18:db:10:c8:be:61:0b:74:03:31:8d:e7:e3:1c:03:
         5c:d1:0e:f2:02:0c:c6:d2:d7:9e:45:c8:2e:77:3b:ab:1d:dc:
         65:18:0d:a9:92:75:67:1d:31:95:55:dd:63:d5:80:4c:9f:7e:
         fb:aa:50:eb:7f:3c:10:d7:72:1b:b8:c9:40:fe:26:88:f3:56:
         af:15:c5:8e:00:0f:c7:12:69:d2:c5:c1:84:75:03:4d:45:fa:
         f0:57:91:b2:ba:5b:34:21:ce:03:b5:f6:d0:24:d6:17:87:21:
         d0:0b:af:06:9a:2d:6b:73:f9:7f:a9:13:95:80:4d:aa:72:1e:
         b2:98:16:e0:4f:7b:25:5a:cf:f3:a2:5f:57:07:c9:54:90:38:
         15:01:8c:24:b3:34:79:cf:f4:14:51:05:50:a8:dc:76:84:94:
         6c:9a:3d:0f:fb:b4:0e:8c:3b:88:54:d6:82:f4:68:94:2f:24:
         52:f5:b8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:02 2025 by rpki-client on console.sobornost.net