Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3234382e302f32342d3234203d3e20323636303332.roa
File:                     3137302e3234352e3234382e302f32342d3234203d3e20323636303332.roa (raw, json)
Hash identifier:          7Gy/2zxvP1q9dA5l4/POwRKUVYyaHmlKAN9UzceULUw=
Subject key identifier:   A8:21:5C:7F:A5:2C:DD:D8:C9:B4:C2:A9:B0:45:EB:DB:05:1B:3B:97
Certificate issuer:       /CN=2C4F416AD9F06A19B21E0483772F76BBAA08379D
Certificate serial:       08FB0EE1691C2AF352CFBF1AE495769A60F6AFD6
Authority key identifier: 2C:4F:41:6A:D9:F0:6A:19:B2:1E:04:83:77:2F:76:BB:AA:08:37:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3234382e302f32342d3234203d3e20323636303332.roa
Signing time:             Mon 31 Mar 2025 13:51:51 +0000
ROA not before:           Mon 31 Mar 2025 13:46:51 +0000
ROA not after:            Mon 30 Mar 2026 13:51:51 +0000
asID:                     266032
IP address blocks:        170.245.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.crl
                          rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fb:0e:e1:69:1c:2a:f3:52:cf:bf:1a:e4:95:76:9a:60:f6:af:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4F416AD9F06A19B21E0483772F76BBAA08379D
        Validity
            Not Before: Mar 31 13:46:51 2025 GMT
            Not After : Mar 30 13:51:51 2026 GMT
        Subject: CN=A8215C7FA52CDDD8C9B4C2A9B045EBDB051B3B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:f7:4d:93:1b:67:db:fc:ad:9f:5c:9a:3e:
                    c7:ab:45:ff:df:b1:8f:9d:eb:cc:05:6c:8d:6b:18:
                    18:e7:63:7c:78:e1:cb:ea:97:fc:d3:ea:1a:61:37:
                    3b:15:8b:c3:d1:d0:97:b8:8f:0a:78:bd:6f:3d:eb:
                    61:9f:25:a8:b3:2b:66:2d:06:49:1d:ae:9b:d3:1b:
                    66:ab:db:26:20:67:4a:15:42:11:d5:45:e4:38:97:
                    ab:3d:08:19:86:ae:e8:f1:93:11:81:9c:f1:6a:ba:
                    b8:d8:51:d6:d7:87:4b:b2:99:db:b6:16:99:59:b2:
                    7b:73:30:31:50:49:18:cc:a3:a6:a5:91:8a:d2:43:
                    c7:fd:9b:f5:e8:19:ec:f1:4e:6a:1b:04:8a:0a:2f:
                    88:63:ae:3a:41:d8:43:eb:51:25:d2:ec:45:1d:9b:
                    6d:5e:18:69:87:73:28:8a:9c:da:37:ff:21:a1:92:
                    a1:07:95:c1:34:00:66:67:75:d1:f0:02:86:31:e7:
                    28:aa:24:c5:71:f6:77:e4:11:fb:1c:20:e7:f3:4f:
                    f1:a6:3d:65:c4:70:77:65:c2:d6:57:4a:db:59:53:
                    83:ba:a2:da:39:73:06:f5:45:9f:20:70:a2:f0:01:
                    e7:73:24:a3:bc:3b:28:d8:c7:ea:7d:68:7f:7f:b1:
                    50:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:21:5C:7F:A5:2C:DD:D8:C9:B4:C2:A9:B0:45:EB:DB:05:1B:3B:97
            X509v3 Authority Key Identifier:
                keyid:2C:4F:41:6A:D9:F0:6A:19:B2:1E:04:83:77:2F:76:BB:AA:08:37:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3234382e302f32342d3234203d3e20323636303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f9:27:41:df:cb:b0:03:be:33:a7:d2:a1:83:62:eb:0e:a9:
         bf:67:b8:0a:75:16:ef:61:34:39:ff:c9:23:b8:29:40:05:ad:
         95:ff:da:51:69:9c:2b:42:7d:be:48:cf:d8:00:e4:2f:3f:f0:
         09:c3:02:5f:7c:87:b6:b1:e7:94:d1:d7:26:be:c0:2c:4f:e1:
         ef:ab:95:3b:cc:f2:bc:30:29:45:43:e4:82:ee:e9:e3:2a:a2:
         ba:f1:c9:31:2e:15:0d:55:6f:c9:0e:f4:ca:ba:d3:31:4b:3b:
         3f:27:aa:49:6d:8d:a0:aa:17:ea:05:d4:56:19:bf:9a:38:1a:
         7a:dd:5d:e2:af:64:01:e7:84:d5:8f:29:fb:56:ab:bc:de:90:
         45:c6:96:41:82:f0:53:ee:9d:02:4e:fb:8b:47:a9:f2:92:1d:
         7e:29:85:e3:25:03:44:a1:4e:81:0e:02:35:98:c2:1f:ff:84:
         86:c9:6d:28:4f:52:b8:77:90:2b:11:b0:9e:a0:14:45:0a:e2:
         0e:d7:4b:4d:f2:cc:18:8b:40:67:74:05:9f:10:99:fe:3f:76:
         60:cd:98:63:8d:10:aa:52:ad:d2:6b:6d:ee:5c:38:6c:bd:12:
         e2:dc:b2:a5:0e:2c:e9:77:74:12:60:67:37:13:3c:f4:aa:a6:
         14:ed:b8:f3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCPsO4WkcKvNSz78a5JV2mmD2r9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM0RjQxNkFEOUYwNkExOUIyMUUwNDgzNzcyRjc2QkJB
QTA4Mzc5RDAeFw0yNTAzMzExMzQ2NTFaFw0yNjAzMzAxMzUxNTFaMDMxMTAvBgNV
BAMTKEE4MjE1QzdGQTUyQ0RERDhDOUI0QzJBOUIwNDVFQkRCMDUxQjNCOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkPdNkxtn2/ytn1yaPserRf/f
sY+d68wFbI1rGBjnY3x44cvql/zT6hphNzsVi8PR0Je4jwp4vW8962GfJaizK2Yt
BkkdrpvTG2ar2yYgZ0oVQhHVReQ4l6s9CBmGrujxkxGBnPFqurjYUdbXh0uymdu2
FplZsntzMDFQSRjMo6alkYrSQ8f9m/XoGezxTmobBIoKL4hjrjpB2EPrUSXS7EUd
m21eGGmHcyiKnNo3/yGhkqEHlcE0AGZnddHwAoYx5yiqJMVx9nfkEfscIOfzT/Gm
PWXEcHdlwtZXSttZU4O6oto5cwb1RZ8gcKLwAedzJKO8OyjYx+p9aH9/sVAFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqCFcf6Us3djJtMKpsEXr2wUbO5cwHwYDVR0j
BBgwFoAULE9BatnwahmyHgSDdy92u6oIN50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFVLSmtoNkxzdnlrZXB0bUJxcVVwakFZa1pBOW8ybTFBektUOUh3MnZ3
azcvMC8yQzRGNDE2QUQ5RjA2QTE5QjIxRTA0ODM3NzJGNzZCQkFBMDgzNzlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDNEY0MTZBRDlGMDZBMTlC
MjFFMDQ4Mzc3MkY3NkJCQUEwODM3OUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hVS0praDZMc3Z5a2VwdG1CcXFVcGpBWWtaQTlvMm0xQXpLVDlIdzJ2d2s3LzAv
MzEzNzMwMmUzMjM0MzUyZTMyMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMwMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr1+DANBgkqhkiG9w0BAQsFAAOCAQEAi/kn
Qd/LsAO+M6fSoYNi6w6pv2e4CnUW72E0Of/JI7gpQAWtlf/aUWmcK0J9vkjP2ADk
Lz/wCcMCX3yHtrHnlNHXJr7ALE/h76uVO8zyvDApRUPkgu7p4yqiuvHJMS4VDVVv
yQ70yrrTMUs7PyeqSW2NoKoX6gXUVhm/mjgaet1d4q9kAeeE1Y8p+1arvN6QRcaW
QYLwU+6dAk77i0ep8pIdfimF4yUDRKFOgQ4CNZjCH/+EhsltKE9SuHeQKxGwnqAU
RQriDtdLTfLMGItAZ3QFnxCZ/j92YM2YY40QqlKt0mtt7lw4bL0S4tyypQ4s6Xd0
EmBnNxM89KqmFO248w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:09 2025 by rpki-client on console.sobornost.net