Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32342d3234203d3e20323633353138.roa
File:                     3136382e3139372e38342e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          En1Pzb4OLycNTDr9hgss3rnSlqSqiAGEIJCfU/IKjwY=
Subject key identifier:   69:63:1B:85:F7:E7:DC:00:49:6D:A6:11:AD:D0:16:96:E8:48:73:8B
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       58C69D6B3DC4E4F18F98E0ACB7CB5B6B51C0DFB3
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 27 Mar 2025 17:28:46 +0000
ROA not before:           Thu 27 Mar 2025 17:23:46 +0000
ROA not after:            Thu 26 Mar 2026 17:28:46 +0000
asID:                     263518
IP address blocks:        168.197.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c6:9d:6b:3d:c4:e4:f1:8f:98:e0:ac:b7:cb:5b:6b:51:c0:df:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Mar 27 17:23:46 2025 GMT
            Not After : Mar 26 17:28:46 2026 GMT
        Subject: CN=69631B85F7E7DC00496DA611ADD01696E848738B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:4c:c5:b7:b9:cd:42:2b:f6:a9:fb:47:e7:
                    66:66:7c:b5:1c:e7:15:d7:a8:67:ff:00:53:99:72:
                    da:af:31:52:d4:6c:32:10:17:f5:72:4a:49:67:c1:
                    a8:19:26:a4:eb:d2:25:10:fc:84:71:09:b7:4f:c6:
                    c2:e8:4f:cc:a0:e8:1f:63:3e:7d:26:d5:d0:c2:12:
                    a8:cd:d0:ae:6a:cb:8e:a5:00:42:ed:7a:fc:11:2f:
                    fd:aa:f0:15:cf:1d:e8:33:86:39:2e:fe:d2:31:81:
                    bb:77:68:26:30:ab:22:29:c7:d2:1f:f7:d8:bc:f3:
                    42:de:25:45:34:1c:e5:f4:33:d8:56:13:5c:a1:7b:
                    09:55:8a:8f:6d:d0:c1:63:9e:bd:a6:1f:91:a6:48:
                    19:ea:84:51:c2:c6:92:d3:19:36:6b:32:4e:e6:d7:
                    2c:58:9f:a3:c7:2f:69:17:f7:4b:cb:a7:61:40:3d:
                    d6:ab:29:07:51:e2:bc:54:c7:6c:89:c0:84:da:47:
                    c9:cb:d5:8d:17:af:e6:1f:64:59:af:eb:e3:0e:e8:
                    0f:7c:ee:8c:7d:0e:8d:a7:e6:73:8f:56:64:b8:61:
                    0b:eb:4b:99:b4:c0:f1:fb:3a:71:b7:74:57:5f:ef:
                    32:9c:2d:38:0f:b7:b6:28:95:d7:43:33:1c:e9:93:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:63:1B:85:F7:E7:DC:00:49:6D:A6:11:AD:D0:16:96:E8:48:73:8B
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ec:1b:84:85:af:3a:7e:66:b3:f1:68:b9:64:5b:14:d2:45:
         86:4f:7d:1b:fa:4c:e3:2b:9f:80:9c:aa:2e:96:f6:fb:14:43:
         76:f0:f0:4c:51:6e:d2:f0:64:a3:a7:00:1f:b5:6a:3e:a5:df:
         fe:1e:06:ee:37:1d:56:4d:cc:28:4a:52:d0:b1:07:b0:ee:e4:
         92:39:78:1d:49:1d:46:04:ce:a9:bc:18:b7:1e:a9:b6:82:64:
         9a:93:17:2e:d7:ef:42:0c:0d:9a:ec:49:de:af:66:c4:65:ce:
         c8:74:5d:fb:6d:ee:84:f2:cd:3e:47:d4:ca:4b:37:2e:36:fd:
         ee:eb:0f:16:b4:2c:ed:b0:52:c9:79:e8:00:0d:cf:22:3b:d0:
         cf:78:60:6f:45:7a:e2:ad:33:a0:90:8c:28:37:42:17:39:53:
         b2:4e:03:c1:3a:4e:92:c1:1b:dd:a8:dc:88:bc:a0:76:65:a3:
         57:7e:0a:1d:c5:5b:a7:09:e3:fa:01:47:6a:cc:01:af:a1:d2:
         7f:9c:83:27:46:71:20:33:95:98:0f:24:9d:e2:25:4c:79:9e:
         a8:72:40:11:df:ce:cb:2b:85:b0:cd:d1:29:d5:8c:ec:3c:c2:
         e9:c9:63:bc:0d:80:57:cf:be:b2:0b:3f:1f:ff:6b:dc:93:2c:
         30:d6:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:53 2025 by rpki-client on console.sobornost.net