Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/3137302e3234342e3136302e302f32322d3332203d3e20323636353034.roa
File:                     3137302e3234342e3136302e302f32322d3332203d3e20323636353034.roa (raw, json)
Hash identifier:          29o87hj2H6zE2iOZa+1/XJ2cfljvyedeELAFzzyYTGI=
Subject key identifier:   EF:EA:3C:02:BF:07:A8:D0:29:33:1A:03:38:8A:67:3B:23:26:19:79
Certificate issuer:       /CN=EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144
Certificate serial:       165BECA027C278CB800468C5149EBE6209FB48CB
Authority key identifier: EE:8B:AF:E7:16:B0:EC:43:1F:F4:EE:AE:C2:C9:F6:E5:2F:F8:91:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/3137302e3234342e3136302e302f32322d3332203d3e20323636353034.roa
Signing time:             Thu 06 Mar 2025 04:00:08 +0000
ROA not before:           Thu 06 Mar 2025 03:55:08 +0000
ROA not after:            Thu 05 Mar 2026 04:00:08 +0000
asID:                     266504
IP address blocks:        170.244.160.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.crl
                          rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 21:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5b:ec:a0:27:c2:78:cb:80:04:68:c5:14:9e:be:62:09:fb:48:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144
        Validity
            Not Before: Mar  6 03:55:08 2025 GMT
            Not After : Mar  5 04:00:08 2026 GMT
        Subject: CN=EFEA3C02BF07A8D029331A03388A673B23261979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:a3:24:58:1f:88:70:20:51:94:c2:68:c8:
                    15:6a:bc:99:50:e0:73:0a:d9:69:66:2c:21:58:63:
                    93:92:11:8c:48:de:dd:ab:c7:2a:af:20:bb:72:38:
                    aa:59:88:02:34:80:7d:90:f0:a7:fc:c4:eb:01:e9:
                    5d:f4:32:4e:af:98:8f:03:96:fb:06:6a:2f:fd:0c:
                    86:8e:58:11:7a:5d:a3:0b:ad:49:6e:c9:a6:62:5e:
                    69:c1:ff:bf:50:26:04:a7:0c:b8:0c:6d:bf:e1:d5:
                    d8:48:a0:11:a6:59:ed:64:3b:74:5e:e8:e1:af:69:
                    05:99:0e:a8:7d:5f:fc:17:3c:e5:c8:b9:68:ef:e7:
                    57:e0:61:a8:a6:df:17:2d:6a:4b:a2:d0:a3:c0:da:
                    64:7c:62:67:72:86:94:92:4d:87:69:70:31:f1:80:
                    72:f5:ce:b1:01:85:a7:89:c8:9c:92:18:5c:cd:70:
                    45:ad:f2:b8:4e:83:62:02:6a:e6:8a:c3:7e:ff:b4:
                    66:17:f0:e0:85:3e:69:83:03:6c:2b:7b:6e:18:6b:
                    dc:5d:b3:e8:ec:25:79:bf:92:09:f1:1f:4a:eb:e0:
                    47:7d:99:c3:a2:c0:26:23:04:df:65:a9:85:fc:e2:
                    1c:69:b6:e1:c4:c8:ba:b7:98:d0:10:5e:4c:1a:86:
                    ef:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EA:3C:02:BF:07:A8:D0:29:33:1A:03:38:8A:67:3B:23:26:19:79
            X509v3 Authority Key Identifier:
                keyid:EE:8B:AF:E7:16:B0:EC:43:1F:F4:EE:AE:C2:C9:F6:E5:2F:F8:91:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/3137302e3234342e3136302e302f32322d3332203d3e20323636353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:3d:a4:78:98:7b:97:26:bd:be:06:66:5b:78:38:62:f4:66:
         8b:f1:b5:c1:fb:50:a4:ce:4b:0d:3a:db:6c:5e:d7:0d:cf:0b:
         69:76:f6:aa:7a:3b:49:91:06:99:21:16:54:8e:f7:e8:2c:a7:
         3d:f3:a6:70:38:a3:55:e1:c5:a4:e4:fc:cb:4a:8d:63:bb:4c:
         ca:64:78:16:15:49:0c:64:3a:fe:0f:91:67:94:53:66:c1:01:
         27:11:a8:a7:21:d1:f2:68:af:73:e8:e9:93:1c:62:97:98:42:
         55:39:a7:4b:de:e6:47:10:a1:83:d1:bb:d6:26:f9:5b:22:05:
         8d:8a:08:c5:18:46:e7:bd:13:2c:73:17:7e:a7:18:3c:5f:80:
         dc:56:32:53:22:c0:a2:12:f7:97:23:1d:cf:91:16:1b:5b:6a:
         e2:45:0b:0b:fa:15:82:ad:54:c0:36:a5:6c:72:0a:3e:b1:ff:
         27:cf:96:0e:9d:c8:26:30:55:47:aa:08:5e:43:4f:a3:d7:43:
         d6:75:e2:49:91:cb:db:bd:1e:ba:7d:98:c9:51:b7:e1:5c:42:
         bd:b2:f7:79:e0:cc:2e:e3:2a:0f:14:b2:90:43:f9:b3:b4:c1:
         ee:80:45:68:37:26:06:4e:37:d0:e1:9e:8f:34:81:bc:60:9d:
         e9:f2:27:9b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFlvsoCfCeMuABGjFFJ6+Ygn7SMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU4QkFGRTcxNkIwRUM0MzFGRjRFRUFFQzJDOUY2RTUy
RkY4OTE0NDAeFw0yNTAzMDYwMzU1MDhaFw0yNjAzMDUwNDAwMDhaMDMxMTAvBgNV
BAMTKEVGRUEzQzAyQkYwN0E4RDAyOTMzMUEwMzM4OEE2NzNCMjMyNjE5NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4qMkWB+IcCBRlMJoyBVqvJlQ
4HMK2WlmLCFYY5OSEYxI3t2rxyqvILtyOKpZiAI0gH2Q8Kf8xOsB6V30Mk6vmI8D
lvsGai/9DIaOWBF6XaMLrUluyaZiXmnB/79QJgSnDLgMbb/h1dhIoBGmWe1kO3Re
6OGvaQWZDqh9X/wXPOXIuWjv51fgYaim3xctakui0KPA2mR8YmdyhpSSTYdpcDHx
gHL1zrEBhaeJyJySGFzNcEWt8rhOg2ICauaKw37/tGYX8OCFPmmDA2wre24Ya9xd
s+jsJXm/kgnxH0rr4Ed9mcOiwCYjBN9lqYX84hxptuHEyLq3mNAQXkwahu8lAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7+o8Ar8HqNApMxoDOIpnOyMmGXkwHwYDVR0j
BBgwFoAU7ouv5xaw7EMf9O6uwsn25S/4kUQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhDZnluYW5OYTdDN0d6NVpNVTRvZm9GTTc3cG16dXdrdFJDVFVZWXhh
WHYvMS9FRThCQUZFNzE2QjBFQzQzMUZGNEVFQUVDMkM5RjZFNTJGRjg5MTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFOEJBRkU3MTZCMEVDNDMx
RkY0RUVBRUMyQzlGNkU1MkZGODkxNDQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIQ2Z5bmFuTmE3QzdHejVaTVU0b2ZvRk03N3BtenV3a3RSQ1RVWVl4YVh2LzEv
MzEzNzMwMmUzMjM0MzQyZTMxMzYzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNjM1MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr0oDANBgkqhkiG9w0BAQsFAAOCAQEAjD2k
eJh7lya9vgZmW3g4YvRmi/G1wftQpM5LDTrbbF7XDc8LaXb2qno7SZEGmSEWVI73
6CynPfOmcDijVeHFpOT8y0qNY7tMymR4FhVJDGQ6/g+RZ5RTZsEBJxGopyHR8miv
c+jpkxxil5hCVTmnS97mRxChg9G71ib5WyIFjYoIxRhG570TLHMXfqcYPF+A3FYy
UyLAohL3lyMdz5EWG1tq4kULC/oVgq1UwDalbHIKPrH/J8+WDp3IJjBVR6oIXkNP
o9dD1nXiSZHL270eun2YyVG34VxCvbL3eeDMLuMqDxSykEP5s7TB7oBFaDcmBk43
0OGejzSBvGCd6fInmw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:22 2025 by rpki-client on console.sobornost.net