Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136302e302f32322d3234203d3e20323636333237.roa
File:                     3137302e3233382e3136302e302f32322d3234203d3e20323636333237.roa (raw, json)
Hash identifier:          JU34/WwS2kMRISnF3e1GWLHFmTEPCKXunmtWN3RoRS0=
Subject key identifier:   27:7B:2D:38:F6:76:59:E3:7D:7F:56:9D:38:39:DD:BD:AF:A3:89:D3
Certificate issuer:       /CN=3F61C570043017F966E8F8384C4FD1BC3F5288AD
Certificate serial:       6FDE2335D7E0C7081171BC74A6A64C07E29320BC
Authority key identifier: 3F:61:C5:70:04:30:17:F9:66:E8:F8:38:4C:4F:D1:BC:3F:52:88:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F61C570043017F966E8F8384C4FD1BC3F5288AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136302e302f32322d3234203d3e20323636333237.roa
Signing time:             Tue 15 Apr 2025 13:25:13 +0000
ROA not before:           Tue 15 Apr 2025 13:20:13 +0000
ROA not after:            Tue 14 Apr 2026 13:25:13 +0000
asID:                     266327
IP address blocks:        170.238.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3F61C570043017F966E8F8384C4FD1BC3F5288AD.crl
                          rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3F61C570043017F966E8F8384C4FD1BC3F5288AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F61C570043017F966E8F8384C4FD1BC3F5288AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 19:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:de:23:35:d7:e0:c7:08:11:71:bc:74:a6:a6:4c:07:e2:93:20:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F61C570043017F966E8F8384C4FD1BC3F5288AD
        Validity
            Not Before: Apr 15 13:20:13 2025 GMT
            Not After : Apr 14 13:25:13 2026 GMT
        Subject: CN=277B2D38F67659E37D7F569D3839DDBDAFA389D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:b3:ac:c5:4d:8b:f2:8c:9b:0b:29:43:1b:
                    67:99:21:2c:0e:22:26:df:5c:ca:d3:a0:3c:68:c8:
                    f2:eb:3d:18:9e:38:74:c0:13:98:99:99:f5:19:1e:
                    36:9b:ed:0b:51:95:ec:ab:bd:f5:70:ef:48:f9:10:
                    75:fb:93:b6:b1:52:28:70:2b:8f:27:fd:c5:94:8e:
                    9b:69:04:91:4d:ee:16:c9:27:b5:e4:ff:73:1c:f4:
                    29:e7:b9:ed:93:62:05:b5:23:95:ce:9c:2b:d7:70:
                    fa:e5:b8:a6:02:6c:b9:02:2c:3e:f8:7c:02:64:66:
                    e2:c0:d5:19:26:33:e7:91:ef:7a:2d:10:5b:c4:e4:
                    ea:1d:2e:bb:5e:9e:43:be:7c:9f:56:4a:3e:55:b6:
                    ba:17:4e:c4:21:47:b8:9a:a8:7c:17:dc:d8:52:60:
                    e7:55:dc:10:7a:d2:68:48:17:7d:34:38:cd:e6:b4:
                    7a:08:a3:33:73:ad:5e:68:5f:aa:0b:8b:54:b6:86:
                    1d:3e:8d:2e:b7:3d:62:b7:1a:6d:9c:ee:77:55:32:
                    7e:85:b2:c5:41:62:e4:07:56:82:c8:b3:1c:11:a6:
                    a7:cb:05:43:12:20:7c:65:e9:86:c1:99:24:7b:03:
                    b9:14:38:be:c6:fd:bc:f0:3d:c3:f9:33:9e:a1:03:
                    df:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7B:2D:38:F6:76:59:E3:7D:7F:56:9D:38:39:DD:BD:AF:A3:89:D3
            X509v3 Authority Key Identifier:
                keyid:3F:61:C5:70:04:30:17:F9:66:E8:F8:38:4C:4F:D1:BC:3F:52:88:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3F61C570043017F966E8F8384C4FD1BC3F5288AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F61C570043017F966E8F8384C4FD1BC3F5288AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136302e302f32322d3234203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:8f:30:e4:b3:41:01:f4:f5:46:26:52:dc:c1:15:63:dd:c5:
         12:cf:af:6b:31:3c:f5:a2:87:c1:a8:20:1a:3d:a1:f0:fa:26:
         a3:08:6d:33:3f:d4:f9:7b:1a:cd:8c:9d:a3:2c:7b:88:46:5e:
         cc:b6:af:41:52:db:2e:f4:03:cd:bb:85:9b:42:ff:97:4a:d9:
         35:f0:7f:e4:b9:92:a9:7c:df:b9:e7:33:ff:81:63:db:ee:8e:
         64:38:9a:f3:35:4b:62:6b:5b:b0:fe:f3:76:a3:15:a0:5f:30:
         7f:1e:12:73:d5:b9:55:f3:e9:44:e6:64:90:75:5e:26:12:59:
         a6:e7:36:37:a6:f3:c0:f8:55:1f:24:96:2d:b6:85:9b:85:3d:
         b3:d8:b5:f5:0f:41:3e:ae:68:7a:be:f3:61:7a:0b:a3:91:b0:
         b3:f2:03:80:19:aa:63:f5:10:9b:c0:8c:aa:cf:ae:34:00:d0:
         7c:04:f8:53:1c:49:5f:98:e8:4d:92:37:76:f5:5c:52:f5:22:
         5b:dc:64:17:ee:fb:74:aa:b5:a1:5d:3d:ea:98:e7:e5:d5:a7:
         3c:c1:13:b5:f0:19:b5:80:47:bd:15:a6:2c:f5:a6:e4:5a:a2:
         c4:e0:1f:a9:c7:75:c8:24:59:13:eb:f3:6e:00:50:d6:98:89:
         6e:d1:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:27 2025 by rpki-client on console.sobornost.net