Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138312e302f32342d3234203d3e203631373936.roa
File:                     3230312e3135392e3138312e302f32342d3234203d3e203631373936.roa (raw, json)
Hash identifier:          fmLlQhOUR9qmLTw92J5SMuGh4akyJt119NtRHuQgB8A=
Subject key identifier:   D9:04:EF:D3:75:25:01:71:9C:09:B7:C2:C5:91:FD:02:DF:C1:47:B1
Certificate issuer:       /CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
Certificate serial:       4F41C1827E2C5987B317A17AB38D07EB133577C1
Authority key identifier: B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138312e302f32342d3234203d3e203631373936.roa
Signing time:             Wed 23 Apr 2025 08:03:44 +0000
ROA not before:           Wed 23 Apr 2025 07:58:44 +0000
ROA not after:            Wed 22 Apr 2026 08:03:44 +0000
asID:                     61796
IP address blocks:        201.159.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:41:c1:82:7e:2c:59:87:b3:17:a1:7a:b3:8d:07:eb:13:35:77:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
        Validity
            Not Before: Apr 23 07:58:44 2025 GMT
            Not After : Apr 22 08:03:44 2026 GMT
        Subject: CN=D904EFD3752501719C09B7C2C591FD02DFC147B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:08:8f:09:99:f6:80:15:ab:b4:8e:68:96:a6:
                    b0:b6:f5:49:f3:da:6d:1f:54:34:b2:36:dd:7e:1d:
                    8b:15:fb:87:d2:56:78:1b:3b:f5:5f:6c:b7:6e:28:
                    94:26:0a:d3:f3:05:87:dd:71:98:a8:f0:56:13:5e:
                    f5:69:a9:b1:3e:e4:b1:8b:67:b7:da:c0:19:17:81:
                    ca:b3:14:d3:dc:6f:e0:c3:95:cd:9a:ee:08:4c:83:
                    29:ee:aa:bf:24:35:9c:c6:5f:75:df:ce:3e:a2:93:
                    ae:77:92:62:a3:43:5a:d5:b1:59:a0:00:25:94:62:
                    6f:b6:34:64:26:a4:1a:65:98:64:b3:7a:aa:0a:7f:
                    fe:0d:69:e4:d3:b1:0c:84:c2:7b:6f:d1:fd:e4:c3:
                    bb:a3:b6:b6:77:21:4e:ca:8d:0c:2c:cf:c6:46:8d:
                    39:fb:7c:40:a1:13:90:06:5d:c1:07:5f:06:53:86:
                    c5:5a:d6:04:d5:d0:8f:0f:0b:0a:e6:bc:90:a3:d0:
                    d5:ad:aa:9b:13:1e:18:cd:d3:a0:c2:a3:8d:e0:ca:
                    36:2b:ec:26:3a:b0:a9:cd:0d:00:dc:21:d8:ef:26:
                    29:26:22:aa:ee:6c:db:4c:df:b2:0a:d2:ec:88:ec:
                    01:97:a3:38:9d:ae:74:03:69:7a:e2:57:ec:b2:b1:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:04:EF:D3:75:25:01:71:9C:09:B7:C2:C5:91:FD:02:DF:C1:47:B1
            X509v3 Authority Key Identifier:
                keyid:B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138312e302f32342d3234203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:b8:e5:40:21:81:2b:7f:7f:b5:fc:b8:98:4f:0d:59:44:09:
         b4:48:92:5b:76:8e:ed:4a:50:8d:93:f9:e1:1b:69:f8:b3:7a:
         a9:76:5f:39:f0:8d:71:11:da:b7:70:b5:c1:3b:f6:08:c8:fe:
         a5:30:10:73:89:d7:e5:ab:3a:9d:73:f6:8d:24:a1:e0:5b:7f:
         a5:20:8b:62:61:df:c2:c8:52:59:ab:e9:da:55:b0:e8:ae:5f:
         73:ff:63:36:fc:e9:2c:a2:6a:40:35:22:24:ac:8e:70:a6:de:
         87:e7:b2:76:50:8d:95:41:28:9c:7f:96:b1:ea:07:15:99:2f:
         69:fe:7d:da:66:ad:35:1e:19:48:d9:79:38:0e:3e:a4:08:73:
         8d:b8:e1:da:6b:f6:0a:0e:28:21:8a:50:3e:a8:c1:6d:f0:73:
         f5:4f:02:3b:62:89:b7:92:fb:e5:06:e2:98:13:0e:8c:07:ca:
         16:dc:64:83:6c:dc:ea:b1:e9:e7:f5:6f:2c:c3:c0:49:fa:4b:
         02:28:cc:16:26:77:04:a6:19:3a:8e:94:98:35:96:93:32:90:
         02:99:b8:af:92:41:3c:b1:a9:cb:e8:fc:68:94:ac:38:7b:70:
         72:2d:09:69:f3:b9:5d:65:89:b8:a0:c6:33:4a:73:09:5d:8e:
         61:c6:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:20 2025 by rpki-client on console.sobornost.net