Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa
File:                     3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          mvqMiFShrhl429jJZ2MEPX47X4Tu0n+8cbWaLIFXD74=
Subject key identifier:   69:1F:D3:7A:69:2E:71:E2:46:7C:A1:DA:3F:36:96:58:E0:AB:6D:CD
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       2A33708921C7639BE61E75E3F1ACF2A741B98A87
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa
Signing time:             Thu 06 Mar 2025 05:33:10 +0000
ROA not before:           Thu 06 Mar 2025 05:28:10 +0000
ROA not after:            Thu 05 Mar 2026 05:33:10 +0000
asID:                     264886
IP address blocks:        168.227.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:33:70:89:21:c7:63:9b:e6:1e:75:e3:f1:ac:f2:a7:41:b9:8a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Mar  6 05:28:10 2025 GMT
            Not After : Mar  5 05:33:10 2026 GMT
        Subject: CN=691FD37A692E71E2467CA1DA3F369658E0AB6DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:7c:c7:81:bd:f3:9e:98:51:6e:b6:df:86:
                    f7:33:e5:d8:ac:ac:df:7e:56:0b:78:f8:59:41:33:
                    74:57:15:0e:27:23:09:a3:b3:48:3f:b4:2c:09:ab:
                    f8:fe:c4:d8:5a:6d:71:fd:8f:22:24:92:a1:a3:5f:
                    4e:a6:04:68:9b:09:dc:cb:8c:7f:54:b1:5a:f0:ed:
                    e1:cb:1d:82:ba:6d:8d:43:08:45:1b:9a:fd:5d:0f:
                    19:e9:e1:cb:b6:67:9c:ea:d8:93:20:1e:91:9b:02:
                    a6:a8:38:23:d1:13:6b:2a:a0:9f:30:69:eb:12:66:
                    8b:94:5a:a2:a1:91:c8:fe:7a:39:f8:ea:60:49:11:
                    8f:4b:47:7b:48:7a:bc:10:01:89:98:37:9d:cc:a8:
                    3e:e7:e8:5f:b9:d5:88:66:d4:a1:c5:ff:85:bf:4b:
                    03:6a:d8:29:fb:ba:42:ec:7e:ad:5d:80:5e:ac:d1:
                    a3:2b:3e:7e:09:28:25:d9:2a:56:32:91:5e:14:cd:
                    3f:f0:9f:f2:b9:2a:35:5f:bf:3d:d2:6c:2e:07:53:
                    82:7e:a2:b2:8c:16:c5:c3:26:2a:d7:15:d4:00:ea:
                    f2:e8:5a:d2:5f:71:d8:99:70:42:6a:9e:79:95:1b:
                    1d:14:22:f3:fe:a6:3a:69:0c:88:fa:c5:32:d2:5e:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1F:D3:7A:69:2E:71:E2:46:7C:A1:DA:3F:36:96:58:E0:AB:6D:CD
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:1e:47:d5:c2:bd:fb:31:c2:9f:65:77:a9:ab:49:86:d8:dd:
         e0:db:b9:52:ca:a3:19:39:64:d9:b4:f7:51:6b:1b:a0:7c:c5:
         cc:bc:35:7f:aa:51:4f:67:99:36:cb:f2:56:e7:69:f2:0f:a2:
         ba:0c:2f:d4:d0:ad:d4:73:98:b4:d7:aa:56:a3:60:c4:13:25:
         4f:d3:f4:86:6c:65:22:3a:ca:b8:4f:5f:55:5a:d3:d3:ea:a2:
         61:22:bf:c3:92:14:82:e5:3f:e6:6e:06:5a:aa:9b:b4:13:a3:
         9d:2e:a5:57:15:43:c2:e8:7e:48:06:a4:88:f9:82:db:09:43:
         bf:9f:ba:bf:ff:8d:82:b7:33:b1:99:bb:06:1d:f4:0c:58:35:
         78:72:6d:46:39:fa:0c:43:d2:c3:b6:f0:d9:db:b6:31:ad:4d:
         bd:b4:b3:2c:02:ce:e9:35:ff:a9:5a:44:34:07:e8:65:c2:ce:
         03:d0:c0:13:56:cb:43:91:54:02:41:38:28:5a:f1:b2:1a:b8:
         b6:a4:27:b3:b3:e0:39:3d:46:56:24:22:d1:cb:7e:19:99:8f:
         01:00:0c:0f:71:14:59:20:91:33:80:16:aa:07:ca:2b:bc:b7:
         7a:3b:22:2b:fb:bb:4b:c6:c6:b7:1b:cb:ed:98:53:ba:28:53:
         ee:bb:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:34 2025 by rpki-client on console.sobornost.net