Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e362e302f32342d3332203d3e20323633393830.roa
File:                     3139312e33372e362e302f32342d3332203d3e20323633393830.roa (raw, json)
Hash identifier:          4BY9w56MwkjQqe6hStlP2HHH3GlAaDg5iyTlf/HzEG0=
Subject key identifier:   82:0F:7A:60:02:21:36:82:03:1D:EA:22:3E:1D:27:A8:AF:4C:B7:56
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       57CD7B48EA77F65CF315B48E37E1825C82315A69
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e362e302f32342d3332203d3e20323633393830.roa
Signing time:             Thu 16 Jan 2025 12:22:38 +0000
ROA not before:           Thu 16 Jan 2025 12:17:38 +0000
ROA not after:            Thu 15 Jan 2026 12:22:38 +0000
asID:                     263980
IP address blocks:        191.37.6.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cd:7b:48:ea:77:f6:5c:f3:15:b4:8e:37:e1:82:5c:82:31:5a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Jan 16 12:17:38 2025 GMT
            Not After : Jan 15 12:22:38 2026 GMT
        Subject: CN=820F7A6002213682031DEA223E1D27A8AF4CB756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:46:22:e8:ea:c0:9e:36:43:b2:a3:1d:a9:
                    4d:1e:4a:67:83:7b:bc:b1:49:54:f9:f0:84:49:2d:
                    3a:ac:dd:3e:0d:47:c8:f0:a0:71:03:d7:ae:a6:09:
                    e3:5c:6d:b7:73:75:f1:56:51:d7:f1:1f:53:84:cb:
                    6c:67:13:33:dc:c3:b2:d3:bc:5b:b9:e0:10:54:b6:
                    19:93:a1:72:72:c9:f0:e3:5a:fb:20:0e:7c:df:24:
                    b0:40:60:40:86:c6:37:f8:59:c3:d0:48:e4:bf:ca:
                    ba:22:45:02:1a:ff:8d:e8:65:5e:32:58:b6:b8:b9:
                    3a:1e:e3:8f:9c:39:67:40:be:3b:d9:db:b0:41:42:
                    92:fa:b1:84:13:14:00:70:3b:98:be:b0:7a:24:8b:
                    c7:89:d3:1e:d7:27:dc:41:cc:eb:eb:d5:53:7e:b6:
                    c5:42:29:49:60:f0:cf:4a:cf:c7:ba:04:9f:50:37:
                    79:b2:1b:bf:60:83:49:38:d5:69:6d:7b:6c:cf:fb:
                    03:cf:83:b7:be:52:44:96:8b:12:5e:8b:5f:76:7b:
                    19:f3:79:4d:08:2c:ae:4a:10:f5:91:56:a7:40:52:
                    02:64:6d:51:52:f6:3c:2d:36:7f:9e:2b:87:16:68:
                    f0:9f:ac:2e:48:08:24:4b:10:b6:c9:cd:94:25:3f:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0F:7A:60:02:21:36:82:03:1D:EA:22:3E:1D:27:A8:AF:4C:B7:56
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e362e302f32342d3332203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:c5:4a:5a:e0:88:03:8a:c3:dd:6d:23:02:bd:bc:5f:cf:2d:
         cf:50:d8:6c:03:75:e9:8d:a1:ef:49:48:f0:f6:96:5a:d3:c3:
         b3:d2:3d:45:cb:79:8a:55:ab:67:0b:5e:a9:55:1e:d2:ec:f2:
         3a:57:54:c5:07:f1:5b:69:02:34:96:92:7a:7a:f6:cd:18:c2:
         c7:04:2d:93:80:0a:fa:17:b6:dc:03:fc:b2:ce:9f:d7:8f:19:
         89:1a:94:5c:7c:40:9d:ec:86:45:bd:bb:b9:e5:8f:87:dd:e9:
         cd:7c:36:83:bc:fa:38:6b:e1:30:99:9f:f0:fc:7b:a8:68:7e:
         41:dd:71:0e:9a:35:05:b2:ee:3e:a5:be:13:cd:5f:18:f0:43:
         a3:c6:ec:a5:ec:3a:48:0d:e9:f5:f1:05:f2:a5:45:55:bc:a7:
         f8:b1:1a:0c:da:80:c0:05:7c:0d:94:97:74:3e:4b:f4:48:33:
         6c:cd:d0:01:96:50:97:90:d2:a7:df:bf:f3:05:eb:03:c7:49:
         de:67:31:58:4e:52:7a:50:63:8a:e8:7d:6d:b4:9a:ef:9a:44:
         96:7c:d0:9f:b8:81:68:91:8b:7d:de:06:0f:31:f3:71:fa:8a:
         e2:83:ef:0d:46:d1:f1:86:7b:55:00:f8:e5:a6:10:90:31:11:
         d9:a7:c6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:10 2025 by rpki-client on console.sobornost.net