Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa
File:                     3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa (raw, json)
Hash identifier:          Gk9N1G/CxoDed1v8uBSl6pTM1zGJ8HNUzy7cf4+lp4E=
Subject key identifier:   60:A6:5A:08:BD:51:30:B2:E6:F1:12:40:65:4D:2A:92:B1:13:04:FB
Certificate issuer:       /CN=51352D74D3778F2422CE0E96FC53071E18935405
Certificate serial:       07239F73EC7FECE9D64150D67BE7F3254EAFEBA0
Authority key identifier: 51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa
Signing time:             Wed 16 Apr 2025 19:47:57 +0000
ROA not before:           Wed 16 Apr 2025 19:42:57 +0000
ROA not after:            Wed 15 Apr 2026 19:47:57 +0000
asID:                     263049
IP address blocks:        170.84.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl
                          rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:23:9f:73:ec:7f:ec:e9:d6:41:50:d6:7b:e7:f3:25:4e:af:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51352D74D3778F2422CE0E96FC53071E18935405
        Validity
            Not Before: Apr 16 19:42:57 2025 GMT
            Not After : Apr 15 19:47:57 2026 GMT
        Subject: CN=60A65A08BD5130B2E6F11240654D2A92B11304FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:83:1f:d3:21:14:fa:77:0a:9a:b5:9b:c4:27:
                    f9:1e:9d:a7:3d:11:f4:d9:f5:42:72:32:9b:23:57:
                    58:40:db:b0:01:2b:42:05:2f:28:25:ed:2b:d6:4a:
                    2e:de:5a:f3:7d:19:ce:36:f2:c2:13:20:30:0f:f3:
                    bf:2b:a3:7a:69:5e:61:ea:92:0d:02:7b:41:6d:4b:
                    e8:17:26:8b:35:5b:15:b7:c6:b4:2e:df:d6:61:06:
                    8e:24:45:40:dd:9f:de:f9:76:1a:b5:7a:80:41:58:
                    b1:7b:81:2c:43:fa:4c:a5:ed:9a:a9:f0:bd:e5:bd:
                    19:9d:3a:fc:ad:11:7d:c2:ac:e0:ec:73:ba:1a:4c:
                    91:7c:84:26:ca:e2:f2:5d:d6:ab:41:21:5e:24:fa:
                    b1:26:07:61:54:38:41:f4:7f:47:d5:6d:94:3f:2f:
                    1e:36:5a:04:6a:5e:bd:94:52:48:59:69:c0:72:c8:
                    82:7b:05:1b:ec:f1:7b:cd:77:ab:4c:0a:49:e8:72:
                    94:3a:e9:df:12:01:6d:7b:ec:d2:b5:fd:5e:24:9b:
                    27:85:80:82:c8:9f:d6:8f:3d:d4:b5:b0:7e:d1:3f:
                    69:26:f7:14:f2:13:ae:12:23:82:4e:cc:f7:3b:80:
                    05:23:1d:57:f0:05:54:94:56:e5:9c:d6:40:f4:72:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A6:5A:08:BD:51:30:B2:E6:F1:12:40:65:4D:2A:92:B1:13:04:FB
            X509v3 Authority Key Identifier:
                keyid:51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:89:2a:cd:64:05:98:25:9b:7e:fd:d1:8e:b6:06:2a:ef:0b:
         29:4e:42:57:8d:4b:f2:ae:24:89:62:60:f4:71:a0:09:d1:5f:
         8e:f9:49:b5:3f:a2:eb:7f:57:58:2a:ce:11:44:a5:df:ae:11:
         fb:83:75:58:da:9f:14:e8:7c:e3:ed:10:bb:bd:64:17:d9:26:
         d6:e3:e1:a1:b4:67:b9:f9:13:c4:4d:71:79:44:7b:d1:98:f4:
         ce:eb:bd:e3:0e:99:53:00:96:18:b4:3b:62:2d:94:bb:a7:8b:
         f8:31:a9:ae:a8:0f:8a:d5:12:45:15:6c:54:52:19:c0:4d:ff:
         fa:3e:89:a9:7d:4b:eb:99:00:87:73:56:59:04:ec:02:d8:76:
         ff:c8:73:38:31:08:b8:2d:d6:8d:85:1c:94:95:32:55:e6:c4:
         15:98:0b:33:14:5f:48:36:7d:c5:56:71:5a:f3:b6:9f:5f:31:
         39:1f:2c:b1:66:65:f8:57:75:e4:2a:b6:e6:08:fd:a5:56:58:
         75:a1:87:af:7c:5b:a0:31:5d:3f:17:4d:a4:12:5a:90:2a:f1:
         1a:fa:43:5b:4f:29:b1:7c:fd:ec:46:e0:05:52:80:90:7f:c2:
         15:49:03:1d:38:84:d0:92:49:66:02:13:7b:a7:18:76:80:e6:
         42:07:45:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:47 2025 by rpki-client on console.sobornost.net