Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3234382e302f32332d3233203d3e20323636303332.roa
File:                     3137302e3234352e3234382e302f32332d3233203d3e20323636303332.roa (raw, json)
Hash identifier:          uG8j/9gUljrzf1kcqe/hNIsJoFsNH6phGtvhRgJU5/A=
Subject key identifier:   16:0E:02:FD:66:12:10:F8:02:31:90:33:F6:24:C4:6B:7A:DD:9F:EF
Certificate issuer:       /CN=2C4F416AD9F06A19B21E0483772F76BBAA08379D
Certificate serial:       28F92D1F2DCE94CD6BC633FD43D0552108B610A6
Authority key identifier: 2C:4F:41:6A:D9:F0:6A:19:B2:1E:04:83:77:2F:76:BB:AA:08:37:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3234382e302f32332d3233203d3e20323636303332.roa
Signing time:             Mon 31 Mar 2025 13:52:22 +0000
ROA not before:           Mon 31 Mar 2025 13:47:22 +0000
ROA not after:            Mon 30 Mar 2026 13:52:22 +0000
asID:                     266032
IP address blocks:        170.245.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.crl
                          rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f9:2d:1f:2d:ce:94:cd:6b:c6:33:fd:43:d0:55:21:08:b6:10:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4F416AD9F06A19B21E0483772F76BBAA08379D
        Validity
            Not Before: Mar 31 13:47:22 2025 GMT
            Not After : Mar 30 13:52:22 2026 GMT
        Subject: CN=160E02FD661210F802319033F624C46B7ADD9FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:a1:7f:9b:c7:78:d7:5a:ea:77:57:bb:38:
                    08:32:c6:28:d1:0d:9b:0a:6b:98:e7:dc:8d:ea:61:
                    6d:d1:34:99:d9:53:72:6f:52:08:02:57:5b:b1:31:
                    23:53:86:47:c9:35:71:b2:88:17:c2:2a:d1:bc:38:
                    0b:c1:59:e3:db:e3:9a:1d:a6:e4:8a:8a:0e:72:3d:
                    84:a6:6f:cb:1f:cd:cc:33:03:22:36:bf:75:2c:45:
                    3f:68:9d:f3:1f:be:dc:5a:33:4e:d1:5d:95:39:27:
                    83:67:62:03:ce:80:58:03:ac:81:44:aa:5d:b1:a2:
                    e9:01:e3:9b:06:ea:cd:70:2d:d7:70:88:e5:5b:46:
                    f8:91:4e:3c:7d:07:b2:5a:ab:52:f4:25:dd:ef:7b:
                    db:f7:88:3c:73:90:20:f2:b9:a7:00:b5:87:6f:9e:
                    7f:36:74:75:0e:b6:b9:19:f2:d2:3d:a8:ba:47:71:
                    f2:e8:fc:97:5c:ca:8f:c0:17:f4:fa:de:09:4f:f7:
                    cd:29:71:26:8a:2d:f5:ad:37:2b:71:c9:70:80:3c:
                    f3:71:da:94:99:89:66:34:b4:2c:2a:8e:30:3f:5c:
                    a9:d3:78:6d:2d:6c:5e:56:76:9f:2e:cb:0a:0a:04:
                    de:96:4d:e5:11:e7:37:fa:70:b4:e2:4d:c1:f6:fd:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0E:02:FD:66:12:10:F8:02:31:90:33:F6:24:C4:6B:7A:DD:9F:EF
            X509v3 Authority Key Identifier:
                keyid:2C:4F:41:6A:D9:F0:6A:19:B2:1E:04:83:77:2F:76:BB:AA:08:37:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3234382e302f32332d3233203d3e20323636303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:cd:48:6c:62:e5:2a:04:32:86:87:ba:7e:ff:d2:6b:8d:8e:
         19:ae:16:c9:0e:48:54:45:16:65:08:b5:ab:0a:d9:f4:c4:04:
         e1:90:f4:ef:c3:19:d6:51:6b:f6:0f:bf:e5:72:3f:09:9e:9b:
         df:f8:07:47:35:cb:6e:3d:51:52:af:7d:70:74:20:e6:15:00:
         6d:63:2c:1e:30:a1:f3:bf:d3:20:de:47:2a:b1:44:ce:40:77:
         8f:d2:75:58:cc:29:0b:e4:0d:07:12:fb:e3:78:eb:88:97:a3:
         ab:f4:e5:82:7e:f9:2f:87:6b:4e:c4:89:b0:b2:80:a2:71:f1:
         b3:55:01:0b:23:94:40:47:19:07:11:f2:c0:be:7e:f9:e5:96:
         06:4b:23:00:59:97:5a:bb:01:ec:2c:8a:63:80:90:a5:c0:b9:
         af:fb:3d:51:58:38:97:78:b0:bb:e7:70:fc:55:8a:61:90:21:
         88:44:ca:b9:a3:99:95:aa:02:c7:12:d9:78:be:98:21:54:6e:
         9e:2d:52:3a:7c:89:d4:b9:6d:80:17:d9:53:93:5b:7d:00:f6:
         d7:87:a5:72:59:bd:39:ce:31:e3:4a:b8:a0:1b:ea:21:05:00:
         fd:3d:83:c0:39:9e:37:f8:29:3d:58:50:47:ec:18:ef:51:56:
         7e:92:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:09 2025 by rpki-client on console.sobornost.net