Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e3233362e302e302f31392d3234203d3e203130383831.roa
File:                     3230302e3233362e302e302f31392d3234203d3e203130383831.roa (raw, json)
Hash identifier:          OyN30w34v+XEYJuBDNPpHRW8FgoEgFZORPe14ApOCOM=
Subject key identifier:   F6:7B:FD:F9:79:03:78:A4:EF:9D:A7:45:10:91:DB:64:DB:F3:A2:9D
Certificate issuer:       /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial:       1CC457AD4A9255534F65C09F5676FA0E9CD0EB74
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e3233362e302e302f31392d3234203d3e203130383831.roa
Signing time:             Thu 06 Mar 2025 15:13:43 +0000
ROA not before:           Thu 06 Mar 2025 15:08:43 +0000
ROA not after:            Thu 05 Mar 2026 15:13:43 +0000
asID:                     10881
IP address blocks:        200.236.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c4:57:ad:4a:92:55:53:4f:65:c0:9f:56:76:fa:0e:9c:d0:eb:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
        Validity
            Not Before: Mar  6 15:08:43 2025 GMT
            Not After : Mar  5 15:13:43 2026 GMT
        Subject: CN=F67BFDF9790378A4EF9DA7451091DB64DBF3A29D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:7a:3e:16:da:4f:e8:33:fd:68:a2:62:2d:
                    91:38:1e:96:12:05:ed:65:c9:23:39:80:87:e3:da:
                    aa:4e:80:e8:08:3d:94:37:d5:a2:7b:ed:79:70:0a:
                    37:a8:7e:28:c9:d3:95:10:8c:b4:6d:00:35:88:5f:
                    56:03:e8:c6:d1:23:6c:e7:a2:1b:fc:a6:26:29:97:
                    2c:f6:79:ed:a2:da:04:fa:77:17:00:6b:50:9a:8e:
                    50:34:62:4f:3c:87:44:2c:f9:8e:e6:a3:c3:73:ed:
                    b8:5b:3f:d4:a2:b9:0c:32:bb:13:82:d4:16:18:79:
                    b2:20:36:98:c5:45:cb:d9:d7:6b:b4:4f:e1:81:05:
                    73:79:b2:57:0e:55:7e:df:b9:af:aa:71:3e:98:ce:
                    47:da:64:7b:56:29:fa:ac:d1:e9:7a:3f:a2:6d:8b:
                    c4:8d:bb:07:57:f7:5c:09:e3:60:ba:a4:5d:24:7c:
                    f2:e8:39:d2:13:d4:d2:f7:35:9e:5f:6e:f7:e0:3c:
                    e0:45:db:38:69:f6:9c:b8:df:c2:97:46:1f:e8:21:
                    ad:c9:ae:78:7e:2e:86:92:4c:23:38:6a:41:38:87:
                    9c:7f:67:10:78:6f:26:ba:0a:ad:1b:f5:5f:3f:9c:
                    43:ed:4c:2f:b0:ec:4a:41:b3:76:af:d7:20:63:66:
                    0c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7B:FD:F9:79:03:78:A4:EF:9D:A7:45:10:91:DB:64:DB:F3:A2:9D
            X509v3 Authority Key Identifier:
                keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e3233362e302e302f31392d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.236.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:10:38:f8:77:70:53:30:ba:f1:73:ad:69:56:21:48:42:7f:
         58:46:04:31:c9:6c:46:00:6e:28:6b:e2:c0:c7:1a:8e:6d:7b:
         2b:6d:b1:1a:66:d5:9e:52:21:5b:fb:fb:b4:42:88:30:9e:c2:
         bb:95:3c:e9:c8:70:8d:db:28:73:56:26:f8:a8:01:c5:db:61:
         7b:b3:ea:43:f6:ef:54:72:2c:32:bd:22:57:85:8b:57:15:f4:
         3c:ee:02:56:7e:a3:ab:ea:bf:be:54:b2:c4:85:67:b8:61:64:
         a7:19:1d:35:c3:1a:10:3b:c7:c7:58:a4:0e:4b:11:ab:99:9f:
         94:c2:8e:ac:31:14:a6:0c:46:46:e1:dc:94:f7:41:e6:2f:55:
         58:54:3c:9b:d9:d1:c1:97:d7:da:2a:a4:15:2a:e4:0a:41:65:
         f3:b8:58:1f:7e:b7:7d:00:dd:af:bb:48:06:46:aa:f3:50:bb:
         36:60:0f:63:27:80:af:8e:49:ed:4c:0a:27:f1:93:d9:50:8b:
         c2:1b:c3:13:1d:b9:37:55:90:57:3b:f6:38:5a:1f:89:4a:81:
         78:7f:9f:a7:b4:56:8a:d0:26:25:05:bd:24:3d:6e:61:f7:22:
         a5:cc:15:61:1b:e6:b8:27:67:f9:79:01:a0:35:f0:12:07:a5:
         eb:06:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:19 2025 by rpki-client on console.sobornost.net