Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31362e302f32332d3233203d3e20323635383939.roa
File:                     3133312e3139362e31362e302f32332d3233203d3e20323635383939.roa (raw, json)
Hash identifier:          VOp6eodeSPWdYJuzLbRjca8uF0OVk6iurzFTIYV1kOI=
Subject key identifier:   C9:DF:BB:D2:FC:99:1F:CE:11:30:E2:06:1F:EE:91:CB:53:15:14:7D
Certificate issuer:       /CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
Certificate serial:       1A83CBA90508504D24592D8ED5D6A658B45D9348
Authority key identifier: 50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31362e302f32332d3233203d3e20323635383939.roa
Signing time:             Tue 31 Dec 2024 18:17:53 +0000
ROA not before:           Tue 31 Dec 2024 18:12:53 +0000
ROA not after:            Tue 30 Dec 2025 18:17:53 +0000
asID:                     265899
IP address blocks:        131.196.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl
                          rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:83:cb:a9:05:08:50:4d:24:59:2d:8e:d5:d6:a6:58:b4:5d:93:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
        Validity
            Not Before: Dec 31 18:12:53 2024 GMT
            Not After : Dec 30 18:17:53 2025 GMT
        Subject: CN=C9DFBBD2FC991FCE1130E2061FEE91CB5315147D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:38:cf:d8:50:85:97:09:78:33:83:a7:ef:
                    37:c6:b9:3a:04:4a:b4:17:d3:c1:27:ef:c6:fc:31:
                    f0:0a:6a:9a:a3:e7:a6:dd:7c:06:53:d1:e2:63:99:
                    08:5b:a8:7f:30:d6:bf:08:b4:c4:bf:18:e4:0d:9a:
                    7b:1a:9e:a4:9e:0a:92:cc:d1:d2:a0:c4:47:1d:ed:
                    fd:87:5d:c6:56:fe:b5:bd:e6:33:05:18:4b:ab:e3:
                    67:d0:67:8a:45:d9:06:c9:c0:05:aa:1d:1c:81:86:
                    27:a7:1d:e2:1f:5d:91:cb:d7:9b:39:be:cf:23:2d:
                    c9:bf:7e:45:76:df:bd:57:85:53:8b:98:ca:02:d0:
                    a0:3b:52:f7:19:0c:28:f6:90:2b:84:4c:aa:0c:7e:
                    f7:fd:ad:35:cf:ed:74:55:a4:5c:b1:36:b1:a7:3b:
                    dc:13:28:cd:8b:c3:62:ac:a6:e3:11:b1:95:bf:3f:
                    12:70:a4:e1:30:3e:41:2a:a2:f7:0d:50:07:f0:df:
                    c8:f2:3b:54:05:23:9a:35:09:f9:92:a1:e7:24:cf:
                    4b:53:21:12:63:22:a3:cf:44:2b:9c:de:6a:1a:e4:
                    da:12:bf:57:78:37:af:79:65:d8:0a:8c:0c:a2:9a:
                    60:2b:88:22:f6:66:84:60:4d:57:b0:81:2f:4f:a9:
                    e0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DF:BB:D2:FC:99:1F:CE:11:30:E2:06:1F:EE:91:CB:53:15:14:7D
            X509v3 Authority Key Identifier:
                keyid:50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/3133312e3139362e31362e302f32332d3233203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:38:19:a5:d2:f6:d5:2c:0a:6f:79:f4:58:43:1e:38:50:0c:
         30:56:83:d6:b5:68:b5:c6:65:de:e1:94:be:3b:78:ff:9b:bf:
         cd:a9:9c:ad:ca:65:41:db:3f:25:d9:a4:ac:d1:21:a6:ee:fc:
         1a:2d:34:ce:ed:8d:34:03:42:15:43:34:e0:89:67:c2:16:9b:
         84:72:a8:a6:28:56:92:41:78:f6:c4:dc:7a:3b:21:e1:f1:2d:
         6b:e2:a8:f7:73:e6:9b:f2:c8:5f:a0:8f:26:49:16:62:5c:fe:
         58:5a:03:64:80:fb:98:dc:c7:a9:ef:e3:9d:f5:6d:43:09:54:
         b5:1a:8c:73:dd:d4:75:c5:0d:33:56:d3:c2:d5:cc:8c:bb:3b:
         a9:b1:c8:6b:b3:40:c2:8c:bd:a1:d1:4b:33:3a:6c:d4:d6:6e:
         d1:29:64:a3:48:60:40:a5:4f:4a:11:4a:b6:cb:31:db:f5:4e:
         85:59:44:eb:ee:56:91:d8:ff:35:78:b7:83:6c:39:df:a6:fe:
         86:0d:52:af:38:60:31:bf:fa:cf:37:cc:15:16:b3:7f:e2:e7:
         91:b3:2e:4c:00:bb:ef:e2:8f:f6:47:ff:67:fb:73:1d:d2:2b:
         34:ec:2b:45:62:07:32:b8:ac:94:cd:66:83:d5:8b:42:f6:64:
         6b:9a:b1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:04 2025 by rpki-client on console.sobornost.net