Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa
File:                     3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa (raw, json)
Hash identifier:          oDlwzoC0zIt57AbbkE8OesG195+/GwvNJGcag+iX+6U=
Subject key identifier:   71:BC:6E:A1:AE:04:44:9A:D1:EB:04:3F:9F:90:BF:32:BE:AC:7D:08
Certificate issuer:       /CN=2C4F416AD9F06A19B21E0483772F76BBAA08379D
Certificate serial:       3CAF05AD2C6864BA3DC065EB0C763A600B2A2518
Authority key identifier: 2C:4F:41:6A:D9:F0:6A:19:B2:1E:04:83:77:2F:76:BB:AA:08:37:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa
Signing time:             Mon 31 Mar 2025 13:52:11 +0000
ROA not before:           Mon 31 Mar 2025 13:47:11 +0000
ROA not after:            Mon 30 Mar 2026 13:52:11 +0000
asID:                     266032
IP address blocks:        170.245.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.crl
                          rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:af:05:ad:2c:68:64:ba:3d:c0:65:eb:0c:76:3a:60:0b:2a:25:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4F416AD9F06A19B21E0483772F76BBAA08379D
        Validity
            Not Before: Mar 31 13:47:11 2025 GMT
            Not After : Mar 30 13:52:11 2026 GMT
        Subject: CN=71BC6EA1AE04449AD1EB043F9F90BF32BEAC7D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:91:f4:98:d1:89:f6:e8:2d:5d:3e:e0:74:
                    f0:9a:e0:d2:c8:50:fb:d5:be:e1:bf:28:ec:c5:0a:
                    01:e8:84:3c:29:de:3a:b1:58:88:57:37:da:4b:d4:
                    9e:e4:95:6e:9d:e2:46:89:63:75:85:69:6e:32:c7:
                    ae:c6:29:36:34:80:25:99:ab:f5:fe:11:a0:af:ac:
                    7e:44:b7:66:6c:76:90:38:7b:47:fe:25:31:f9:43:
                    8f:07:a2:d5:e2:94:4d:81:a5:78:ef:6f:54:6b:c1:
                    9c:41:db:0e:7e:a4:8f:1b:d0:73:9c:8a:41:59:9a:
                    0f:28:90:26:d0:77:a2:16:64:9b:5e:e2:f1:19:4c:
                    4a:c6:66:af:db:fb:d4:a5:a0:9e:ba:bb:7b:0d:32:
                    84:7d:99:8d:33:ee:d3:8d:b7:97:f0:e6:9f:9a:6d:
                    b0:e7:a5:59:3f:34:42:4a:22:cf:ae:a9:e1:eb:ed:
                    06:41:39:8e:cc:fe:cf:4f:25:2c:c5:c2:8d:e4:37:
                    71:bf:e3:c9:b5:73:10:51:c1:46:fd:bf:20:2d:25:
                    63:7c:26:4c:97:08:bc:8c:2d:3d:48:c7:18:2c:09:
                    b3:43:c8:0c:35:bb:50:df:35:1b:d7:c0:c4:09:5b:
                    9d:33:48:35:7c:c9:d2:0d:17:11:eb:0f:52:0d:93:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BC:6E:A1:AE:04:44:9A:D1:EB:04:3F:9F:90:BF:32:BE:AC:7D:08
            X509v3 Authority Key Identifier:
                keyid:2C:4F:41:6A:D9:F0:6A:19:B2:1E:04:83:77:2F:76:BB:AA:08:37:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:9a:09:86:cd:ec:5d:c3:19:dc:67:43:f3:0b:36:9a:33:d7:
         d4:33:ca:45:87:6e:e6:d2:65:6d:dd:3e:9e:e3:e7:10:14:0d:
         2c:69:d4:9a:e1:3c:57:59:5d:ab:30:87:1a:fa:6c:1b:1f:77:
         15:4d:5e:67:02:52:1f:36:bb:10:b7:77:ef:ca:95:1c:e2:f2:
         e8:22:52:f4:eb:b1:c9:2d:fc:de:0b:5d:2b:c2:b2:e7:71:2a:
         75:61:66:62:88:95:26:c1:86:39:04:2e:6a:6e:d7:c5:1f:76:
         0c:a9:81:06:06:0d:fc:e4:b3:8c:6b:b0:f3:31:c9:9e:a3:6a:
         b3:01:17:61:12:c5:45:4a:b3:78:69:68:53:c1:3c:98:20:70:
         9b:36:26:70:3e:71:dd:cc:00:a0:f5:cc:1e:01:fe:cd:f1:26:
         d7:70:5d:47:96:5e:d7:de:ad:95:6b:80:96:31:a9:02:30:40:
         45:16:e6:e8:a5:95:9c:2f:16:c4:86:70:8c:5c:8f:7f:55:40:
         83:e6:16:27:a8:c6:49:98:6a:90:cc:96:cc:30:e1:15:04:c2:
         28:93:cf:a3:36:81:a2:0e:24:69:d5:f6:f6:97:97:44:17:a0:
         c8:80:3a:dc:90:2b:78:fd:0e:fa:4f:cf:c4:ee:9f:d7:4d:18:
         da:e9:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:09 2025 by rpki-client on console.sobornost.net