Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e38382e302f32332d3233203d3e20323634393133.roa
File:                     3136382e3232382e38382e302f32332d3233203d3e20323634393133.roa (raw, json)
Hash identifier:          MLbNiWHMYM2RhBX9j4L6Gcf6Gs6+nJJ916N7c9HQBss=
Subject key identifier:   42:71:9A:74:78:4D:2C:D9:A0:DB:80:B1:E4:0E:BF:50:88:75:B0:19
Certificate issuer:       /CN=6FD7780130A5D3BF04E958422A80B35362959A11
Certificate serial:       734C9A3ACFF0BF45D1CEAACB6E573A037B75A873
Authority key identifier: 6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e38382e302f32332d3233203d3e20323634393133.roa
Signing time:             Thu 06 Mar 2025 04:54:19 +0000
ROA not before:           Thu 06 Mar 2025 04:49:19 +0000
ROA not after:            Thu 05 Mar 2026 04:54:19 +0000
asID:                     264913
IP address blocks:        168.228.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl
                          rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 18:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4c:9a:3a:cf:f0:bf:45:d1:ce:aa:cb:6e:57:3a:03:7b:75:a8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD7780130A5D3BF04E958422A80B35362959A11
        Validity
            Not Before: Mar  6 04:49:19 2025 GMT
            Not After : Mar  5 04:54:19 2026 GMT
        Subject: CN=42719A74784D2CD9A0DB80B1E40EBF508875B019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:e5:81:be:de:a9:48:e2:a9:c0:f0:07:fc:
                    55:01:f0:8b:dc:c0:68:12:7b:67:eb:31:8f:bf:95:
                    23:f8:3f:e5:a8:1d:40:33:5c:a7:46:6a:c8:9a:43:
                    da:1c:2f:de:29:61:9b:97:06:67:2b:d7:cb:b7:e9:
                    b7:47:5d:23:4c:b6:03:b5:18:f6:b3:ea:6a:2d:5d:
                    d8:cb:1d:d8:9e:df:ef:09:a9:3d:5b:78:e2:39:61:
                    69:69:66:f6:b0:92:94:d8:21:cc:2b:a4:e3:5a:9e:
                    6b:e1:11:f8:e5:9a:0d:0d:7e:23:9e:57:e1:aa:4e:
                    7f:61:4e:4f:66:d4:82:c9:12:a9:69:be:42:a6:94:
                    a3:d5:50:2a:b4:1b:df:16:84:85:59:47:4a:bf:ad:
                    93:8f:72:c3:90:f5:bb:12:b0:12:91:e1:4f:01:60:
                    cd:44:aa:25:e5:0e:77:9a:06:0d:83:35:38:2b:51:
                    4d:f2:cb:de:df:a7:a1:de:49:fe:7e:6a:43:c8:7c:
                    ac:1d:06:b8:36:24:b1:bf:65:55:47:73:6a:47:9a:
                    3c:1a:63:03:b1:8d:28:2a:73:99:d0:e2:c1:b3:4a:
                    6b:6d:ea:05:8d:8f:75:bc:c9:b8:f3:6a:da:9d:f7:
                    84:9a:eb:52:7f:91:4d:e1:2c:ca:bb:b0:62:02:c6:
                    26:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:71:9A:74:78:4D:2C:D9:A0:DB:80:B1:E4:0E:BF:50:88:75:B0:19
            X509v3 Authority Key Identifier:
                keyid:6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e38382e302f32332d3233203d3e20323634393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:ab:55:9e:30:4d:5f:ef:56:77:7d:8d:6d:2f:74:82:e0:
         24:8f:6c:f3:20:31:a9:48:80:f0:6f:af:8d:00:cb:db:b3:b7:
         8d:bf:3a:76:2c:3d:c2:6d:52:31:a8:2e:de:63:09:d6:5f:38:
         a9:45:f7:3f:25:d2:a1:e1:7f:dd:9b:1b:29:41:be:36:11:7b:
         a7:ee:f4:1e:35:a3:80:03:27:7c:e7:fe:7b:08:82:67:69:c9:
         eb:3f:8c:f3:af:f2:d1:b5:5d:45:ca:75:a1:30:a7:b2:af:70:
         3a:90:59:1b:bb:f1:ff:a2:b4:8a:dd:32:5c:b5:02:65:78:28:
         8f:87:de:5d:aa:8d:08:74:96:f6:8e:78:18:e4:5b:1a:8e:41:
         a9:c2:78:24:f5:4f:ea:27:7d:0a:d4:8c:ea:0e:47:7b:67:8b:
         19:4e:5c:8c:ae:91:60:29:82:af:32:06:57:a6:19:c9:c6:29:
         31:48:ee:32:0c:36:bb:65:d6:d9:1c:d3:b2:f5:ca:eb:8a:d5:
         7d:8d:a5:8d:5f:e9:6f:81:0f:4f:06:d7:1c:c1:1b:c4:4c:af:
         91:91:9a:b6:12:25:11:68:00:47:60:c9:97:21:fe:1c:ef:44:
         68:95:bb:a3:93:7c:5e:7a:f1:35:9d:a0:e0:7b:2f:d4:7a:9a:
         fb:be:69:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:19 2025 by rpki-client on console.sobornost.net