Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa
File:                     3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa (raw, json)
Hash identifier:          BksfCh97P3skr/KAnxWeqB1LtsBmdcir2+ii7/6vkbQ=
Subject key identifier:   6D:5E:60:FE:23:B2:1B:79:A0:7A:84:99:E6:D9:CA:37:04:E8:D2:B4
Certificate issuer:       /CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Certificate serial:       1695EC0B861F56FB9E22F92C32BF44D0EAD2DDF6
Authority key identifier: 3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa
Signing time:             Mon 07 Apr 2025 18:12:36 +0000
ROA not before:           Mon 07 Apr 2025 18:07:36 +0000
ROA not after:            Mon 06 Apr 2026 18:12:36 +0000
asID:                     53062
IP address blocks:        170.254.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:95:ec:0b:86:1f:56:fb:9e:22:f9:2c:32:bf:44:d0:ea:d2:dd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
        Validity
            Not Before: Apr  7 18:07:36 2025 GMT
            Not After : Apr  6 18:12:36 2026 GMT
        Subject: CN=6D5E60FE23B21B79A07A8499E6D9CA3704E8D2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:03:75:a7:50:e3:a0:85:61:c1:99:6c:96:
                    83:7f:16:2e:ea:48:5c:53:a5:44:f0:3a:00:cc:9c:
                    15:4f:dc:ea:cd:34:d3:f0:88:1a:73:69:c2:57:d6:
                    80:43:dd:ea:71:d4:48:8d:65:19:54:dc:4c:23:3d:
                    ec:c8:e2:5a:c2:1b:07:e1:6b:df:18:32:9a:53:1c:
                    c4:18:ac:40:cb:47:7a:8d:18:78:58:7f:60:a8:0f:
                    9f:45:e2:f0:51:33:c1:2e:cf:bb:07:90:ae:59:68:
                    1a:81:5c:d9:bd:67:d6:e2:1e:a8:97:96:39:c1:d9:
                    a2:9f:23:84:af:62:26:96:bb:ec:48:e1:05:be:55:
                    eb:86:ec:5b:73:01:60:6e:b4:5b:35:28:a6:8c:05:
                    a3:bd:42:46:60:3f:c1:c1:b8:f3:34:3d:f7:28:7a:
                    9e:37:0d:da:e1:21:49:27:47:83:d4:2a:58:11:6e:
                    36:ec:98:92:4d:6d:46:01:1e:40:20:fd:3b:c8:cb:
                    ee:46:df:dd:a5:fa:a1:f1:45:df:ee:ac:ff:06:69:
                    f8:df:c5:ee:d8:5f:c6:0b:a2:05:1b:48:37:20:dc:
                    0b:56:9b:b4:f1:c1:2c:f4:4f:e3:7d:ec:9a:50:5e:
                    d9:fb:fd:48:e0:cc:53:90:6e:d4:27:89:01:fb:cf:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5E:60:FE:23:B2:1B:79:A0:7A:84:99:E6:D9:CA:37:04:E8:D2:B4
            X509v3 Authority Key Identifier:
                keyid:3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d3:a0:5e:67:94:22:f7:9d:fe:50:0c:48:99:23:d3:ec:89:
         f7:7f:d5:a1:8b:4a:14:09:74:8f:fd:c8:d3:a8:e9:b6:5b:7f:
         d0:99:2e:ff:ee:f7:4f:9d:a1:db:69:c9:55:22:a1:80:ae:f8:
         b7:a3:c4:2f:fe:f8:0c:3e:16:a0:70:6c:fe:53:e2:4d:56:dc:
         8a:47:bc:d2:98:38:2d:14:42:a9:33:ce:76:5f:aa:7c:1d:78:
         3a:be:96:24:4d:b5:73:60:ad:e2:e4:0d:9c:9a:c6:70:c3:57:
         95:6d:26:ad:94:65:63:77:5a:ee:7c:a8:6a:60:fb:b8:76:e3:
         03:5d:3f:e7:60:b6:53:50:4a:d6:41:d5:6a:18:29:df:59:21:
         7d:c1:26:15:bd:04:61:3c:cc:27:24:14:2f:75:b4:03:15:3c:
         93:b0:a3:e3:45:b1:ff:54:61:26:63:db:78:f4:7f:e5:9d:96:
         84:be:1a:2c:33:f2:1d:9b:d0:d1:e5:1b:9d:cc:0f:58:76:3a:
         a6:6f:15:56:e2:4d:08:72:79:55:68:80:f2:58:51:84:b1:b6:
         cc:46:ab:91:ed:17:26:48:fd:3f:f3:f7:81:c6:9e:90:88:cb:
         f5:57:e7:bb:89:81:7d:77:92:42:7b:5a:13:a7:42:41:96:e3:
         03:e2:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:49 2025 by rpki-client on console.sobornost.net