Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa
File:                     3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa (raw, json)
Hash identifier:          9yeQry5xK02DHn+uVdxy9RxBDM+370sBy34vBXg8Xnw=
Subject key identifier:   23:82:C5:CA:3C:F9:1B:23:2F:60:74:CC:E9:2B:55:C2:A6:16:E6:C7
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       272288762E67A017CB004C142AA6AD9FCDFB0B1D
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     266320
IP address blocks:        170.238.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:22:88:76:2e:67:a0:17:cb:00:4c:14:2a:a6:ad:9f:cd:fb:0b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=2382C5CA3CF91B232F6074CCE92B55C2A616E6C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:db:83:0f:b2:61:42:45:a4:e8:be:fb:bd:
                    46:ca:63:dd:8a:0d:e3:cb:48:59:80:67:08:a7:13:
                    ab:47:13:3d:e1:5e:32:30:f1:f5:e6:e3:e5:ad:07:
                    07:d4:03:d9:88:08:ce:bb:ff:4e:c2:6b:32:f8:c5:
                    56:4d:9f:23:ee:75:df:30:18:14:45:2d:ef:3d:94:
                    7c:d4:37:85:36:ed:83:34:de:be:2d:76:aa:db:05:
                    b3:c8:cc:6e:f1:15:d3:c8:91:5a:07:c3:c5:73:27:
                    ae:a4:99:45:34:e9:b9:f2:57:a3:00:b0:a3:db:52:
                    1c:fb:be:cb:5d:60:5f:9d:02:fa:e0:75:78:7c:ae:
                    c8:58:c6:3e:a4:f5:9b:50:97:97:ba:56:54:50:47:
                    fa:b8:a0:bc:5f:cb:33:6d:66:4e:c5:88:46:58:e7:
                    3f:78:31:32:13:e4:58:07:9a:4f:e3:ef:09:bf:d8:
                    c6:08:14:07:70:01:9a:8f:70:7e:3d:e4:44:49:ac:
                    dc:85:46:fa:51:09:f0:f6:25:32:6c:37:e9:ce:8b:
                    84:1f:4f:01:8a:22:c0:cd:ce:95:38:ea:04:76:77:
                    c0:5e:34:be:94:75:c1:a3:cc:d2:0e:a1:ab:3f:af:
                    e6:e8:9a:a6:9a:69:a6:f7:02:8d:cb:c7:4b:c2:67:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:82:C5:CA:3C:F9:1B:23:2F:60:74:CC:E9:2B:55:C2:A6:16:E6:C7
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:84:fe:b3:f3:e3:01:ed:55:88:15:32:b7:7c:2f:73:8c:4e:
         f5:6c:ee:a9:ec:ac:47:9c:71:67:8c:f1:2c:9f:87:75:dc:81:
         42:61:45:68:9f:35:01:c8:95:15:f9:50:1c:94:f9:a0:30:26:
         7f:67:79:d0:0e:e2:83:66:ca:e9:97:f3:9c:4e:70:30:3d:83:
         4b:6a:c7:30:c7:0c:d6:e2:f3:11:09:b5:96:c2:d0:40:2c:20:
         fb:19:74:ea:90:2c:e5:b0:12:97:c2:16:6a:b8:c1:f6:2a:ba:
         76:4a:c4:ef:dc:8a:d1:c3:8b:0a:05:b4:4a:97:4b:bd:95:00:
         f8:d1:84:c2:c5:b7:79:8a:4e:52:53:a7:18:18:72:68:cb:47:
         61:39:d4:c4:3e:09:d8:85:ed:1c:56:57:af:4f:86:9c:d1:3f:
         33:20:e1:40:1c:8e:be:cb:8b:96:a8:31:6f:be:42:bc:40:cb:
         07:33:a9:33:d6:4a:6b:e2:a2:a5:21:4d:99:7c:da:df:3f:0d:
         15:28:6a:3f:d4:c0:1f:2e:6c:a1:32:13:13:f7:2e:3d:7a:29:
         42:28:23:19:33:e7:aa:a2:a9:c5:de:9f:c4:59:36:2a:30:c5:
         c7:6a:e3:1d:0c:d6:ad:4b:c6:55:2a:67:3b:03:a6:c0:ef:33:
         d4:e7:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:28 2025 by rpki-client on console.sobornost.net