Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa
File:                     3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa (raw, json)
Hash identifier:          9qI1j80SisNpEFrkVgnZx2fMMWt5iqrs2+4KLEk1aLI=
Subject key identifier:   54:3B:DD:78:E7:2F:E9:92:12:F1:C2:3D:9D:D3:BF:2C:8D:83:DA:C9
Certificate issuer:       /CN=D903348767481BAEFE2C4B534D22308FC61456DE
Certificate serial:       02ADE11AABB0DC8A0F16E42A06BA264B491C83BE
Authority key identifier: D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa
Signing time:             Thu 06 Mar 2025 18:52:23 +0000
ROA not before:           Thu 06 Mar 2025 18:47:23 +0000
ROA not after:            Thu 05 Mar 2026 18:52:23 +0000
asID:                     265421
IP address blocks:        168.195.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl
                          rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 14:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ad:e1:1a:ab:b0:dc:8a:0f:16:e4:2a:06:ba:26:4b:49:1c:83:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D903348767481BAEFE2C4B534D22308FC61456DE
        Validity
            Not Before: Mar  6 18:47:23 2025 GMT
            Not After : Mar  5 18:52:23 2026 GMT
        Subject: CN=543BDD78E72FE99212F1C23D9DD3BF2C8D83DAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:b4:c0:f1:6f:f2:fc:8d:f9:fc:86:fa:cb:
                    b8:c3:8c:52:5a:60:56:b9:68:b7:47:64:65:78:82:
                    f9:5e:6b:31:3c:ad:ad:a9:da:03:32:9c:2b:e1:c1:
                    cf:f8:ac:06:5b:e0:c6:83:96:d6:ed:ab:40:b4:7a:
                    a3:83:56:cc:3f:2c:ec:7b:f1:bf:db:ce:54:6e:a3:
                    29:e0:13:33:50:83:e7:06:fe:85:4c:d8:93:ae:da:
                    de:1b:86:f8:68:81:c3:73:b8:6f:c1:56:3a:ab:cf:
                    d5:cd:f5:06:e3:4c:b7:03:ad:dc:7c:d2:02:99:ad:
                    a2:46:19:e7:70:d2:ae:fb:10:04:60:9f:f8:bd:f2:
                    b3:dd:c8:62:88:e9:a0:65:f2:ff:c5:8c:32:10:b6:
                    f7:eb:c3:1a:e4:57:12:2e:6f:fb:49:2f:7e:fa:f0:
                    98:c4:7a:87:86:bb:46:56:4b:b7:cb:b6:95:76:c9:
                    01:22:ad:2d:15:d5:e4:6c:89:43:6d:f6:66:c9:0b:
                    cc:80:b4:95:a1:3c:1f:25:ff:47:f1:5a:66:57:ac:
                    af:92:25:8b:1f:65:b1:0e:3c:d4:a6:16:60:d1:64:
                    97:b0:09:14:32:2c:9a:e5:60:6f:9b:03:dc:6a:52:
                    9c:2c:2a:64:bb:a0:e5:32:14:4d:a8:92:00:4e:ea:
                    51:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3B:DD:78:E7:2F:E9:92:12:F1:C2:3D:9D:D3:BF:2C:8D:83:DA:C9
            X509v3 Authority Key Identifier:
                keyid:D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:46:d1:5e:ed:24:8c:d5:af:74:6a:ff:4b:1e:89:df:96:db:
         16:d2:7c:9c:97:ad:bc:65:1d:58:b4:fa:f3:f9:54:12:51:ce:
         e9:c2:5b:19:35:7e:77:99:36:85:86:0c:d2:e1:d4:80:52:70:
         91:91:9f:97:0f:e4:cf:6a:80:da:24:0e:c6:64:f7:81:84:40:
         bd:c3:5c:d6:4c:e8:86:30:1b:4e:47:79:81:23:fb:49:c9:07:
         a2:dc:c6:c5:ac:2d:a1:e2:8e:40:17:fa:f7:0d:38:c8:0c:5b:
         80:a6:cd:bf:03:91:82:ff:9f:d7:d7:ef:14:43:18:0b:35:ee:
         b0:8f:04:65:d9:51:a6:5a:68:fd:61:87:f0:a9:eb:9d:6e:6a:
         67:2b:c2:27:c8:46:7d:7b:29:56:09:bc:6f:da:ac:6d:08:5c:
         2c:b2:17:d7:4a:99:1f:34:51:fa:b9:a9:cc:d5:36:4e:1c:76:
         6f:44:5f:51:ab:3c:d8:2e:cd:a2:64:f1:07:8b:56:34:7d:cf:
         e7:2d:1f:ba:b1:8f:75:e2:51:ef:be:5f:27:e8:88:aa:e8:82:
         68:5a:04:ab:4f:50:aa:1d:7d:7e:e9:b5:18:c3:40:39:73:b3:
         96:20:c1:71:0c:b5:c3:6a:0f:5b:1e:39:fb:af:58:29:2c:5d:
         14:c2:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:30 2025 by rpki-client on console.sobornost.net