Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e322e302f32342d3234203d3e20323635313835.roa
File:                     3136372e3235302e322e302f32342d3234203d3e20323635313835.roa (raw, json)
Hash identifier:          MPqSTLlmxhFcu8JrzmMTCeoon9/LWUc5qr73P2qVKT8=
Subject key identifier:   4A:E8:94:7E:E7:E2:34:41:2F:99:ED:D7:63:F5:21:9A:16:4D:6B:82
Certificate issuer:       /CN=9D35D29D04D84C156E4112BF977E37E007A4B928
Certificate serial:       86C9ECC0C658993BE6B13506C7E0D19AC46399
Authority key identifier: 9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e322e302f32342d3234203d3e20323635313835.roa
Signing time:             Thu 13 Mar 2025 19:44:02 +0000
ROA not before:           Thu 13 Mar 2025 19:39:02 +0000
ROA not after:            Thu 12 Mar 2026 19:44:02 +0000
asID:                     265185
IP address blocks:        167.250.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl
                          rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            86:c9:ec:c0:c6:58:99:3b:e6:b1:35:06:c7:e0:d1:9a:c4:63:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D35D29D04D84C156E4112BF977E37E007A4B928
        Validity
            Not Before: Mar 13 19:39:02 2025 GMT
            Not After : Mar 12 19:44:02 2026 GMT
        Subject: CN=4AE8947EE7E234412F99EDD763F5219A164D6B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:e7:47:b0:f7:a8:72:34:80:4b:1c:61:c1:
                    7e:26:8a:a1:bd:fd:4b:fc:74:66:46:94:93:df:d0:
                    7e:c4:e5:e0:6b:9f:8f:79:04:a8:0c:9c:ee:10:01:
                    45:c4:f9:a6:81:2a:fc:c3:be:78:5f:d2:3e:12:27:
                    f8:61:15:c8:ea:ff:69:60:9a:bf:e7:46:e0:2b:04:
                    ee:69:3c:fe:b7:ba:8e:f8:f7:aa:c9:bb:93:dc:cc:
                    63:c6:9b:ea:46:1c:71:fd:01:0e:65:9c:17:6b:8a:
                    7d:55:78:cf:dc:0e:20:d8:8a:76:fd:20:c9:8e:94:
                    2e:4c:64:f2:ed:e8:04:91:d4:5b:fb:44:4a:5b:9d:
                    a1:55:47:9c:a5:d8:95:f1:5a:e9:68:22:1d:7c:ee:
                    23:d2:89:54:14:c5:cb:d2:ba:ec:04:60:85:01:df:
                    32:aa:e9:a9:67:34:ba:00:50:5f:45:f5:06:8f:64:
                    f4:7e:92:89:c1:27:9f:fe:48:b7:6b:a2:fe:29:e5:
                    2f:3e:cb:03:0d:fd:33:e4:a7:00:0d:6e:f1:a8:9b:
                    90:0a:60:bd:43:df:19:a1:56:21:45:43:9f:13:c7:
                    dc:00:f6:40:75:ec:a8:71:c2:5b:28:7f:d7:5e:d1:
                    fc:63:68:af:b1:f5:99:04:e7:ff:28:79:cc:aa:0a:
                    b1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E8:94:7E:E7:E2:34:41:2F:99:ED:D7:63:F5:21:9A:16:4D:6B:82
            X509v3 Authority Key Identifier:
                keyid:9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e322e302f32342d3234203d3e20323635313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:42:0c:d3:73:f5:5f:ed:2e:8e:a1:6d:3e:eb:c1:6d:9d:8a:
         f2:d6:b6:e3:24:47:3d:7c:d5:17:9e:5d:68:22:14:d8:8f:54:
         9f:63:1e:84:b9:cb:85:cc:ac:c3:c0:68:d7:9b:30:40:ed:01:
         de:a5:fb:e0:7e:77:73:ce:33:f0:b4:b3:e5:e9:1e:e6:bb:da:
         b7:c6:5d:2c:73:e6:dc:c8:f6:a3:34:39:4f:b2:7a:14:04:fa:
         49:e6:dd:17:83:e8:a3:02:5d:27:5f:b1:d4:c7:b6:bf:c0:26:
         84:1e:57:a6:c3:0e:a7:ba:42:ad:ba:f3:6e:96:f1:83:71:87:
         d1:26:7f:d6:04:b9:c3:29:69:3b:1e:c9:b3:c8:a7:ed:6d:e9:
         1c:49:64:fd:78:4d:06:8e:27:ac:9c:5c:ba:38:46:1b:0c:7d:
         01:9f:35:7f:f7:bb:98:b1:f0:6e:f7:31:71:2c:48:39:8c:d0:
         07:f9:2a:15:a5:34:27:56:76:67:d6:43:49:ad:94:ec:ba:ae:
         aa:f0:d2:a4:ce:a7:29:32:8c:65:bb:b8:b0:cb:72:d4:a6:80:
         cf:7f:2a:53:2d:49:36:db:94:7e:7c:60:b9:56:72:21:5e:43:
         fe:8d:f9:99:e1:ed:fc:76:13:06:58:79:03:05:f9:99:7d:fd:
         bf:f3:0e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:22 2025 by rpki-client on console.sobornost.net