Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa
File:                     3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (raw, json)
Hash identifier:          tM+Sjx/wcU41RTwQQmeZaLCi88tO8sgzPpP4YPgZE8s=
Subject key identifier:   87:3C:B2:DF:99:54:B5:18:1A:38:38:FF:C4:E5:5E:1F:DF:60:E2:D9
Certificate issuer:       /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial:       43E764662084D1E25570C4E98FEE08489A2E39F6
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa
Signing time:             Fri 25 Apr 2025 07:05:15 +0000
ROA not before:           Fri 25 Apr 2025 07:00:15 +0000
ROA not after:            Fri 24 Apr 2026 07:05:15 +0000
asID:                     263395
IP address blocks:        168.194.136.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
                          rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e7:64:66:20:84:d1:e2:55:70:c4:e9:8f:ee:08:48:9a:2e:39:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
        Validity
            Not Before: Apr 25 07:00:15 2025 GMT
            Not After : Apr 24 07:05:15 2026 GMT
        Subject: CN=873CB2DF9954B5181A3838FFC4E55E1FDF60E2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:97:82:02:70:d7:88:f1:e0:e9:0c:90:6c:
                    7b:ac:23:70:e5:7f:89:81:44:fa:ae:fa:f1:19:a1:
                    7f:ac:ff:88:4b:33:12:78:33:e1:66:da:f6:6e:6f:
                    3a:6c:6d:ef:3e:3a:a7:5e:26:f3:6e:e6:23:58:26:
                    7e:27:9f:e5:c9:16:c2:ea:98:b7:a6:6c:ef:56:67:
                    7e:82:ca:76:a1:41:d4:7a:29:23:13:f0:4e:fb:f3:
                    1a:7e:03:a8:5b:eb:ca:e3:83:e7:7f:00:8f:82:86:
                    ef:ad:39:95:fd:ea:ff:51:7d:3f:a1:48:d8:fc:aa:
                    c0:d7:e7:8e:41:8d:e2:39:59:5e:68:73:9e:b2:f2:
                    d1:96:7d:4e:a2:db:d2:a4:06:08:4e:db:ba:b6:32:
                    26:70:01:a7:3c:92:cd:5b:94:cf:d3:9b:f4:40:6b:
                    6b:dc:21:44:a7:54:ed:3b:09:1d:b5:e4:a6:37:5a:
                    b5:91:fc:37:a6:ae:07:51:3d:b9:80:9a:ad:66:ca:
                    68:c5:7c:44:02:2f:ef:70:7f:10:7d:6d:c2:e3:9e:
                    a8:08:fe:ab:3e:a0:d3:0e:ab:32:17:9c:5b:c9:d4:
                    e5:7d:0d:83:21:15:f6:57:a7:f2:e7:63:ec:3e:90:
                    a8:12:d3:a8:d2:82:57:45:a9:15:b6:11:f4:27:8d:
                    69:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3C:B2:DF:99:54:B5:18:1A:38:38:FF:C4:E5:5E:1F:DF:60:E2:D9
            X509v3 Authority Key Identifier:
                keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:eb:ca:50:6b:93:93:a8:ca:58:eb:cb:2d:37:5c:04:e0:cf:
         3d:2e:da:7e:10:bf:86:ba:7f:b8:e3:6a:f0:6d:a9:d1:e2:9c:
         6e:bc:93:4d:60:fc:ca:05:f5:1d:1c:70:05:df:3f:6b:f9:cf:
         51:cf:d1:fc:71:5f:17:24:26:ff:d1:98:4e:66:06:14:fc:46:
         f5:28:be:90:7a:df:db:bd:c6:e9:ce:06:ba:89:a7:ef:28:73:
         fe:68:80:68:01:90:9d:0f:10:30:c9:c8:08:53:81:94:de:89:
         06:ca:0f:e9:5c:54:a0:7c:5a:e1:d3:ac:fd:d1:b0:9e:fc:15:
         28:55:b4:27:55:38:8f:19:0a:94:3b:71:a7:a6:99:f3:40:d8:
         e5:bc:db:6f:8e:a0:4f:ec:d3:bf:16:da:ce:2f:ec:a4:77:06:
         2b:62:79:77:02:d7:ad:c8:44:2f:f1:b7:98:f3:f5:e1:99:3d:
         6f:02:26:71:75:5f:25:ee:33:fc:b7:cc:10:a3:2c:13:fe:6f:
         78:2d:35:94:90:a2:95:ae:3c:c0:6d:44:81:8c:0d:27:c6:f4:
         3b:ed:0b:5d:df:63:cd:5c:fb:fe:1e:74:99:c7:d3:c4:ff:42:
         87:f7:cc:d0:58:42:2e:b6:f1:cc:1c:76:f2:ab:ee:a3:8d:d5:
         81:b1:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:10 2025 by rpki-client on console.sobornost.net