Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38352e302f32342d3234203d3e20323633353138.roa
File:                     3136382e3139372e38352e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          JSPzPWmec0wfx9VWFPSfcBVbfXbN8vrV/CAJvefXysg=
Subject key identifier:   40:49:45:C3:43:C8:67:70:DA:1C:FF:11:D8:83:E9:F4:A1:1B:8C:AC
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       2DBBEA7E95BFB38A9E99F6F7151234478653B57B
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38352e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 27 Mar 2025 17:28:46 +0000
ROA not before:           Thu 27 Mar 2025 17:23:46 +0000
ROA not after:            Thu 26 Mar 2026 17:28:46 +0000
asID:                     263518
IP address blocks:        168.197.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bb:ea:7e:95:bf:b3:8a:9e:99:f6:f7:15:12:34:47:86:53:b5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Mar 27 17:23:46 2025 GMT
            Not After : Mar 26 17:28:46 2026 GMT
        Subject: CN=404945C343C86770DA1CFF11D883E9F4A11B8CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:95:64:b4:72:12:69:c1:1b:6a:68:e2:ee:
                    62:4d:6c:da:9b:69:d4:49:b7:45:1e:c2:64:32:89:
                    00:23:52:5b:c7:56:55:74:89:9f:81:f6:7a:d5:2a:
                    56:7e:b4:87:3e:2b:67:12:4f:1b:3a:b5:4f:93:f0:
                    6d:37:f9:d2:1f:17:fd:c3:43:60:bb:e9:82:44:c2:
                    a4:2f:b6:87:84:dc:bf:82:4c:6e:e7:91:fa:98:41:
                    f1:47:10:2b:29:0a:40:66:44:52:7d:8b:e1:3a:6e:
                    97:11:6d:3d:fd:3f:86:b3:17:ce:09:d5:5f:21:cc:
                    22:5c:43:6f:44:06:20:8f:b4:5e:12:ab:f7:26:a4:
                    1d:0d:8b:00:0c:3d:d1:83:3b:4a:77:8b:68:74:77:
                    cb:6e:a4:14:d3:ee:2d:35:8e:c2:92:28:35:9e:fc:
                    63:67:d1:75:6a:73:9f:03:87:8f:14:fc:a6:2a:68:
                    9a:cf:0f:83:aa:d8:50:c4:09:ef:8c:3b:50:05:68:
                    5d:3c:8e:4c:14:af:94:e9:e4:eb:ee:18:3e:94:70:
                    af:0c:4f:84:80:a0:7a:25:82:d3:9f:95:4d:03:bd:
                    45:0a:76:77:d0:59:08:98:6a:f1:e0:ca:78:10:01:
                    82:37:15:b6:4b:e7:7d:13:43:37:1a:ee:43:a0:5e:
                    45:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:49:45:C3:43:C8:67:70:DA:1C:FF:11:D8:83:E9:F4:A1:1B:8C:AC
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38352e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:75:ee:5c:1a:e9:8f:32:ea:a1:01:e0:21:04:f3:05:8e:e3:
         3b:b5:72:c8:44:df:40:00:4e:cc:d1:42:17:63:8a:ac:54:9c:
         3e:57:a4:8d:8b:ee:48:cf:dd:50:fe:73:77:cb:a4:15:d2:88:
         89:1c:26:bc:76:b2:8e:3d:81:82:fe:14:27:72:0f:51:02:77:
         78:ec:6a:d2:02:47:60:4c:de:90:03:90:6d:2f:a4:71:3d:04:
         73:a7:86:32:20:af:91:a5:99:e4:68:2a:26:17:0f:03:f2:5a:
         51:da:25:4b:ac:17:34:67:40:34:f7:0a:9a:b7:d3:e9:a0:92:
         c2:03:41:8a:59:6e:59:3f:e6:1e:a2:6f:1b:27:df:28:17:18:
         a8:f9:1a:49:39:3e:02:f9:3c:80:bb:18:39:4f:83:89:15:c3:
         aa:ac:f1:82:fe:2a:0f:f2:3c:a0:1f:f0:2e:b4:8e:18:fa:dd:
         98:af:07:9b:3e:0c:fa:90:fa:ab:ef:3b:01:89:56:bc:d4:af:
         65:f3:f3:92:78:25:2b:3e:09:40:29:bd:1b:14:58:e4:43:8b:
         5a:c7:02:f9:5e:2f:fd:c4:94:bc:bf:0a:31:23:46:e0:13:72:
         a0:71:c1:ac:be:ad:c4:c0:a3:0c:4c:df:10:d9:46:1a:be:76:
         71:f1:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:36 2025 by rpki-client on console.sobornost.net