Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e312e302f32342d3234203d3e20323635313835.roa
File:                     3136372e3235302e312e302f32342d3234203d3e20323635313835.roa (raw, json)
Hash identifier:          V/VLcFQtngcEknKR3HhnTVzf6u5+gZuJeswXK5tTePk=
Subject key identifier:   BE:00:B4:67:40:BB:86:65:3F:BE:DD:E0:99:12:7E:72:60:DF:FB:6B
Certificate issuer:       /CN=9D35D29D04D84C156E4112BF977E37E007A4B928
Certificate serial:       191C297ADCFA3F751903CEE3C59C9F6158FAC125
Authority key identifier: 9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e312e302f32342d3234203d3e20323635313835.roa
Signing time:             Thu 13 Mar 2025 19:44:01 +0000
ROA not before:           Thu 13 Mar 2025 19:39:01 +0000
ROA not after:            Thu 12 Mar 2026 19:44:01 +0000
asID:                     265185
IP address blocks:        167.250.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl
                          rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1c:29:7a:dc:fa:3f:75:19:03:ce:e3:c5:9c:9f:61:58:fa:c1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D35D29D04D84C156E4112BF977E37E007A4B928
        Validity
            Not Before: Mar 13 19:39:01 2025 GMT
            Not After : Mar 12 19:44:01 2026 GMT
        Subject: CN=BE00B46740BB86653FBEDDE099127E7260DFFB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:a0:8b:93:3f:ea:22:97:16:85:77:99:bc:
                    ee:64:3f:95:39:16:11:99:93:ca:45:62:1a:2b:6f:
                    68:c8:c0:80:d5:33:dc:d1:ea:d8:f6:19:19:15:d3:
                    55:9a:bb:26:71:39:97:4b:a7:fa:5b:96:25:a9:7a:
                    7d:0e:56:4c:99:31:46:a4:25:51:8b:b4:9c:eb:b3:
                    6b:85:b9:b2:b5:1b:6a:64:e8:08:e2:44:04:4e:4a:
                    3a:31:3e:94:24:b8:a3:fb:fc:d1:f0:59:af:48:5a:
                    68:17:f2:e9:5f:d5:2f:10:9a:67:5b:11:13:90:8d:
                    18:dd:05:25:1c:cf:0a:18:b5:24:e1:e3:7e:d8:4c:
                    5d:46:d6:63:d8:97:92:52:13:10:2b:e6:d0:8a:18:
                    b4:b2:3c:85:aa:3f:cd:f4:b3:ff:46:2d:97:c0:75:
                    b1:08:11:14:60:85:96:22:17:39:b7:0e:86:3f:27:
                    2a:46:31:ce:9c:06:5a:b6:31:3f:13:d1:a3:5c:1f:
                    c2:fc:4a:d1:45:3e:83:13:3e:79:93:8c:37:6f:ed:
                    ec:ad:56:ab:c6:fd:ac:6e:d7:16:3e:6e:23:a9:fc:
                    0f:89:f2:5c:8c:5e:70:40:f1:65:bb:4b:98:20:4e:
                    62:12:a9:06:b2:93:21:64:81:61:75:ca:35:95:81:
                    1c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:00:B4:67:40:BB:86:65:3F:BE:DD:E0:99:12:7E:72:60:DF:FB:6B
            X509v3 Authority Key Identifier:
                keyid:9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e312e302f32342d3234203d3e20323635313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:8a:68:82:0c:24:53:83:a1:91:86:82:e5:3e:9e:82:ba:f3:
         16:4f:a8:13:e9:28:d9:14:af:90:fd:95:38:5e:e3:dd:bd:de:
         77:7b:66:4f:ef:ee:49:cb:24:8a:f2:7c:a2:69:86:20:12:b3:
         3e:50:d9:d0:4f:7d:38:78:86:2c:91:44:57:85:6e:9f:10:fa:
         d9:2e:97:75:f7:31:d8:42:1b:ff:75:e9:80:e4:54:aa:35:ff:
         48:05:e6:57:76:ed:32:8a:58:d6:7a:dd:7e:f3:d5:ce:68:c5:
         d9:72:70:9f:f1:9c:e0:e8:e2:8a:57:a1:75:da:7e:fe:fe:7f:
         9c:79:9a:5e:17:4f:d1:e7:04:0e:59:56:58:36:ae:3c:4d:94:
         5a:4d:15:f5:ca:2e:e9:ef:8e:d4:69:2e:7d:b7:3c:35:2d:2d:
         f6:15:66:d1:36:46:7e:c9:d0:89:e2:6e:95:95:21:89:e6:9a:
         b7:4b:0d:8d:06:71:ec:78:0c:46:d8:f8:3f:74:9a:8e:8b:c2:
         12:cd:e4:66:2d:44:9c:13:aa:c3:42:de:da:35:84:b9:3b:8e:
         7d:9e:d8:e3:0e:b5:59:ce:40:08:97:bb:1c:33:7b:7c:b2:1a:
         82:9f:43:98:0a:ed:9c:00:d2:40:a1:f8:3d:6c:55:30:a6:f9:
         dc:54:db:b1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGRwpetz6P3UZA87jxZyfYVj6wSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQzNUQyOUQwNEQ4NEMxNTZFNDExMkJGOTc3RTM3RTAw
N0E0QjkyODAeFw0yNTAzMTMxOTM5MDFaFw0yNjAzMTIxOTQ0MDFaMDMxMTAvBgNV
BAMTKEJFMDBCNDY3NDBCQjg2NjUzRkJFRERFMDk5MTI3RTcyNjBERkZCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8i6CLkz/qIpcWhXeZvO5kP5U5
FhGZk8pFYhorb2jIwIDVM9zR6tj2GRkV01WauyZxOZdLp/pbliWpen0OVkyZMUak
JVGLtJzrs2uFubK1G2pk6AjiRAROSjoxPpQkuKP7/NHwWa9IWmgX8ulf1S8Qmmdb
EROQjRjdBSUczwoYtSTh437YTF1G1mPYl5JSExAr5tCKGLSyPIWqP830s/9GLZfA
dbEIERRghZYiFzm3DoY/JypGMc6cBlq2MT8T0aNcH8L8StFFPoMTPnmTjDdv7eyt
VqvG/axu1xY+biOp/A+J8lyMXnBA8WW7S5ggTmISqQaykyFkgWF1yjWVgRzDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvgC0Z0C7hmU/vt3gmRJ+cmDf+2swHwYDVR0j
BBgwFoAUnTXSnQTYTBVuQRK/l3434AekuSgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk1rZWY3OXhyUllQNnY2VWdQVXFROGo5Q0JNa2FtaUVZQjZKa3dSUFpk
TlEvMC85RDM1RDI5RDA0RDg0QzE1NkU0MTEyQkY5NzdFMzdFMDA3QTRCOTI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMzVEMjlEMDREODRDMTU2
RTQxMTJCRjk3N0UzN0UwMDdBNEI5MjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZNa2VmNzl4clJZUDZ2NlVnUFVxUThqOUNCTWthbWlFWUI2Smt3UlBaZE5RLzAv
MzEzNjM3MmUzMjM1MzAyZTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzEzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAp/oBMA0GCSqGSIb3DQEBCwUAA4IBAQA0imiCDCRT
g6GRhoLlPp6CuvMWT6gT6SjZFK+Q/ZU4XuPdvd53e2ZP7+5JyySK8nyiaYYgErM+
UNnQT304eIYskURXhW6fEPrZLpd19zHYQhv/demA5FSqNf9IBeZXdu0yiljWet1+
89XOaMXZcnCf8Zzg6OKKV6F12n7+/n+ceZpeF0/R5wQOWVZYNq48TZRaTRX1yi7p
747UaS59tzw1LS32FWbRNkZ+ydCJ4m6VlSGJ5pq3Sw2NBnHseAxG2Pg/dJqOi8IS
zeRmLUScE6rDQt7aNYS5O459ntjjDrVZzkAIl7scM3t8shqCn0OYCu2cANJAofg9
bFUwpvncVNux
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:22 2025 by rpki-client on console.sobornost.net