Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32322d3232203d3e203631373936.roa
File:                     3230312e3135392e3138302e302f32322d3232203d3e203631373936.roa (raw, json)
Hash identifier:          6pxf7bTSp6XCEYyZlSIb8uR/dRWNe3lLjQdACnRWO2o=
Subject key identifier:   EF:04:74:67:50:18:63:7C:BC:8B:BD:96:82:BC:06:12:D4:EF:16:B7
Certificate issuer:       /CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
Certificate serial:       1FB4F50808BC808A0EB89A15F6A5B99534011D38
Authority key identifier: B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32322d3232203d3e203631373936.roa
Signing time:             Tue 04 Feb 2025 12:10:29 +0000
ROA not before:           Tue 04 Feb 2025 12:05:29 +0000
ROA not after:            Tue 03 Feb 2026 12:10:29 +0000
asID:                     61796
IP address blocks:        201.159.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b4:f5:08:08:bc:80:8a:0e:b8:9a:15:f6:a5:b9:95:34:01:1d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
        Validity
            Not Before: Feb  4 12:05:29 2025 GMT
            Not After : Feb  3 12:10:29 2026 GMT
        Subject: CN=EF0474675018637CBC8BBD9682BC0612D4EF16B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:1c:c9:12:db:28:aa:e1:89:54:ec:9e:32:
                    bc:e7:9e:b2:b8:b8:07:5c:60:ec:81:c2:25:19:19:
                    06:ec:08:37:f2:41:1f:0c:78:42:a5:96:3b:60:39:
                    bb:1f:22:d4:94:19:d2:ee:39:a6:9f:a9:f8:ce:7a:
                    69:f0:38:84:0d:00:fa:df:e8:45:fc:d3:40:d4:aa:
                    18:b2:4f:99:51:49:9b:65:6b:fb:7c:42:43:b5:20:
                    c2:a0:35:70:4c:a4:84:1e:c2:40:77:46:8c:db:2b:
                    ea:3b:0e:89:44:71:2e:3c:17:c9:7d:6e:f0:3d:f5:
                    81:f2:e4:27:e9:41:16:99:bf:bf:34:a0:3b:bf:5f:
                    26:9b:f9:2c:87:a7:88:28:b5:98:88:f3:ac:15:2f:
                    a5:c3:b0:1f:c4:23:11:fe:e1:80:c3:ab:2c:8d:b9:
                    65:6a:fc:f9:23:54:ef:f8:ba:71:46:4c:7f:33:3c:
                    b5:11:c5:6f:bc:6f:ad:f0:b1:47:eb:af:1f:3e:c7:
                    79:de:fe:83:94:e5:fd:d3:35:8a:e2:6f:bf:46:79:
                    55:8f:06:54:dc:5b:4d:21:af:5d:0c:ca:3c:46:4f:
                    43:09:48:32:3b:77:73:7b:ca:fc:8f:2d:ab:27:ad:
                    4b:66:e0:b7:e3:ca:98:3d:2c:78:f7:b8:ab:fc:35:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:04:74:67:50:18:63:7C:BC:8B:BD:96:82:BC:06:12:D4:EF:16:B7
            X509v3 Authority Key Identifier:
                keyid:B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32322d3232203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:6b:54:aa:ba:3b:21:26:73:73:64:42:28:08:d7:04:e8:9b:
         75:8a:81:cd:ab:c9:9f:03:ba:05:1e:a1:b0:5e:07:51:ca:71:
         49:af:64:3a:a0:1e:7f:c5:0d:ce:53:fa:b3:9b:6b:ff:d1:44:
         27:9a:62:80:b4:92:06:d4:07:30:7f:b5:f8:54:b4:b5:5b:4d:
         98:d2:3d:da:93:6b:fb:d7:b3:2b:ac:72:7b:ca:c4:e8:5c:81:
         db:c8:41:7b:1f:dd:2f:dc:cd:19:f4:30:31:55:21:38:9d:05:
         99:b3:d8:f5:55:a5:30:94:57:6d:48:82:fa:98:e6:f5:01:00:
         7c:b9:c8:21:90:b6:d8:e6:ed:17:94:e8:82:7b:b8:76:49:38:
         92:8c:7a:f7:34:d7:07:61:72:d6:da:86:ff:09:b2:9d:77:e8:
         62:3e:c7:dc:4f:e0:10:6d:92:93:54:10:f5:e2:ff:c0:28:64:
         19:c4:eb:fc:40:77:f4:72:88:e8:5d:dd:47:5c:d1:10:2c:3c:
         a3:bc:1f:a8:6a:ba:67:9c:32:ac:1e:fd:78:f5:a1:cf:c4:dd:
         77:04:82:33:f6:a4:7a:40:a4:9e:5d:60:86:b2:f1:46:3b:f4:
         4f:d1:22:c7:8d:c1:b4:e0:00:16:04:68:8f:21:f9:b9:b1:fc:
         d7:f0:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:20 2025 by rpki-client on console.sobornost.net