Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31372e302f32342d3234203d3e20323635313835.roa
File:                     3136382e3139362e31372e302f32342d3234203d3e20323635313835.roa (raw, json)
Hash identifier:          rs4igP0rol3QUSP0Ukez8pL4YsfuHmUd8fnekmzYeIg=
Subject key identifier:   8D:62:E6:68:47:F0:D5:4F:57:11:A5:25:84:3C:8A:6F:D5:DF:EC:64
Certificate issuer:       /CN=9D35D29D04D84C156E4112BF977E37E007A4B928
Certificate serial:       33F5861772F906F4715F707FFFFF312DED5B489D
Authority key identifier: 9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31372e302f32342d3234203d3e20323635313835.roa
Signing time:             Thu 13 Mar 2025 19:44:02 +0000
ROA not before:           Thu 13 Mar 2025 19:39:02 +0000
ROA not after:            Thu 12 Mar 2026 19:44:02 +0000
asID:                     265185
IP address blocks:        168.196.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl
                          rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f5:86:17:72:f9:06:f4:71:5f:70:7f:ff:ff:31:2d:ed:5b:48:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D35D29D04D84C156E4112BF977E37E007A4B928
        Validity
            Not Before: Mar 13 19:39:02 2025 GMT
            Not After : Mar 12 19:44:02 2026 GMT
        Subject: CN=8D62E66847F0D54F5711A525843C8A6FD5DFEC64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b5:78:4c:92:16:91:db:d1:b6:60:88:e4:0d:
                    9b:a5:95:48:de:43:4c:d1:93:be:55:a4:bb:bb:bf:
                    31:e2:9a:8d:01:86:9d:f1:b3:73:fe:81:1f:bc:cf:
                    81:8f:be:a4:82:ec:a5:42:10:0a:43:b0:d4:29:e0:
                    69:30:d9:1d:b1:9e:e7:dd:68:3d:e1:20:63:a0:33:
                    bf:02:b1:eb:0c:9c:97:8c:10:77:4e:f8:cf:76:e6:
                    fb:ac:ec:36:96:19:8d:5e:6c:83:36:92:64:76:1e:
                    4f:de:ac:fb:50:86:31:29:7b:8d:4f:46:94:31:9e:
                    1d:fc:2b:14:74:66:96:ce:15:9e:b0:ba:60:84:5e:
                    24:d9:75:06:07:20:87:60:29:3f:86:7e:7a:1e:d6:
                    a1:48:96:92:1d:eb:1c:20:99:56:9c:89:2f:5a:8e:
                    7c:67:24:03:d2:94:31:86:59:f2:94:27:f2:d5:e6:
                    b5:2a:45:0d:4a:85:4f:30:29:53:5f:44:ad:47:5b:
                    e8:e6:a6:f2:83:54:81:af:cf:5b:c1:f3:bd:49:31:
                    83:41:85:fe:b5:e6:c0:21:23:a8:55:7d:5e:6f:90:
                    42:41:c4:1a:11:fd:90:d6:93:20:33:52:8e:3a:ee:
                    91:7d:a2:42:6b:98:8a:7b:37:63:8c:de:7d:48:a1:
                    e1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:62:E6:68:47:F0:D5:4F:57:11:A5:25:84:3C:8A:6F:D5:DF:EC:64
            X509v3 Authority Key Identifier:
                keyid:9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31372e302f32342d3234203d3e20323635313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:08:99:b6:7e:4d:35:12:1c:58:c0:93:72:a2:4f:bb:a9:13:
         3b:9c:64:5d:cb:c4:95:e0:a1:0e:49:d7:dc:2a:96:8b:66:9f:
         8b:d8:93:9d:0a:53:c8:94:9b:ca:e8:a9:34:7c:4b:f9:d4:16:
         1f:6c:b2:f9:27:81:ae:c4:b4:12:bc:c2:6a:e4:25:0f:97:2f:
         dc:b9:a8:6e:70:75:e3:15:8b:ca:53:be:2c:c9:f3:bb:4f:26:
         19:40:8b:90:d4:c8:25:ed:33:6d:d5:44:5b:41:16:00:f9:b2:
         95:bb:b3:6c:da:58:27:40:40:91:d0:5e:65:ad:0e:92:45:12:
         fb:5f:ba:ae:ab:7f:18:af:ee:0a:5b:bf:cb:a0:bb:c7:fd:d5:
         e3:34:6d:4d:51:de:b7:9a:c3:b1:69:98:8e:15:73:08:93:71:
         37:87:ef:b0:d1:ad:84:67:10:2b:57:fa:18:1f:c6:53:a6:fa:
         d4:6d:2b:53:9c:05:62:2d:c1:0d:b7:43:e4:ac:30:67:12:40:
         9a:6e:55:5f:3a:03:8c:b2:a9:e4:1c:aa:33:f8:80:c3:0a:7c:
         6b:d4:5d:75:1d:c2:f3:89:cf:6e:88:47:74:46:fa:3a:92:e0:
         d7:3c:82:a8:24:94:b0:8e:cb:5b:25:c1:58:0e:c9:da:74:04:
         2f:0e:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:22 2025 by rpki-client on console.sobornost.net