Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa
File:                     3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa (raw, json)
Hash identifier:          a5PrF0/f461Ynit6WvECovL5BWmEJeQoBlDUQq7HxQo=
Subject key identifier:   DF:D9:8B:2F:DA:98:F5:14:83:F2:09:0F:3D:4B:35:52:09:B8:F6:1E
Certificate issuer:       /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial:       34BFF86591CA80BF022CDFC3891AAB0936AE51F1
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa
Signing time:             Sat 25 Jan 2025 14:23:34 +0000
ROA not before:           Sat 25 Jan 2025 14:18:34 +0000
ROA not after:            Sat 24 Jan 2026 14:23:34 +0000
asID:                     270551
IP address blocks:        189.50.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
                          rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bf:f8:65:91:ca:80:bf:02:2c:df:c3:89:1a:ab:09:36:ae:51:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Validity
            Not Before: Jan 25 14:18:34 2025 GMT
            Not After : Jan 24 14:23:34 2026 GMT
        Subject: CN=DFD98B2FDA98F51483F2090F3D4B355209B8F61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:a9:a9:c7:af:c1:74:fd:07:1f:d2:14:27:
                    f3:c1:45:08:a4:11:f5:b9:fa:6d:c4:4d:9e:0a:7b:
                    30:76:ab:f2:35:fc:5b:8d:7c:89:30:e4:ab:d3:71:
                    81:48:24:22:06:f6:96:6a:68:e9:02:69:03:49:24:
                    e2:e1:40:91:fc:37:3d:d0:19:03:8c:d2:30:01:2f:
                    ce:e6:6d:1a:74:df:f5:b4:b5:ce:c0:8e:31:5a:30:
                    eb:7b:9a:dc:2e:d4:66:f2:9c:d2:3d:a3:fc:db:17:
                    61:46:ae:1f:72:6e:48:55:81:60:ca:ce:39:84:24:
                    ec:99:54:fb:1d:a7:59:80:d8:86:2a:95:8d:e2:d8:
                    02:d5:a4:5f:b8:19:5b:df:72:e2:55:cb:a4:fd:b7:
                    5a:b9:c2:ac:72:3f:5e:cd:cf:29:ff:96:68:b0:de:
                    6d:d0:26:dc:a6:55:bc:9d:2f:66:d2:e0:fc:f1:42:
                    8f:8b:dd:ff:2c:f2:81:1a:bb:c4:93:a4:58:3e:e2:
                    9b:f7:a5:c6:73:79:f1:a8:b9:74:c8:ca:da:e8:9e:
                    76:67:5e:7a:9f:1e:1f:8e:b9:5b:78:78:a9:d3:3f:
                    59:19:18:f3:87:c8:2b:71:01:8e:93:4f:a2:09:58:
                    42:cb:eb:0d:4f:7c:92:70:d7:76:db:1d:89:2c:60:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D9:8B:2F:DA:98:F5:14:83:F2:09:0F:3D:4B:35:52:09:B8:F6:1E
            X509v3 Authority Key Identifier:
                keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f9:8b:1b:60:5b:94:b6:d2:6a:53:c7:8c:f5:ef:e7:f4:d1:
         a3:48:d4:19:e0:6c:c2:c1:c2:d2:ab:79:04:77:d5:4b:fd:a7:
         3e:cc:d7:57:cc:4b:96:ae:54:d9:0d:23:f1:9e:ca:46:a8:32:
         47:3d:42:66:9b:a6:9d:bf:57:08:09:ac:62:70:ab:c4:52:67:
         f6:4e:b3:57:a4:e0:22:ee:b4:2c:6c:56:9f:c5:9d:da:f5:0f:
         f7:c3:d0:87:cb:4e:c6:1e:6a:85:07:ba:2f:bf:06:f2:dd:3f:
         18:ac:e2:7a:83:7a:21:ab:e3:11:40:dd:8a:f1:2d:e5:74:e0:
         d4:a7:fc:d4:06:1f:6e:9e:62:fe:32:ca:59:b9:19:50:a2:d6:
         65:9d:ba:81:b8:a7:b3:e8:46:e9:9a:e6:90:8a:cd:83:28:fd:
         07:1d:f2:b4:ea:01:44:9d:15:6c:ed:40:d6:13:1a:f4:53:fa:
         8d:49:13:5c:32:20:73:14:86:6b:cb:01:75:20:ca:3c:5b:3a:
         e5:f2:88:7d:b5:dd:25:79:d8:ef:aa:93:ab:51:9f:97:f8:f7:
         c2:c7:f1:59:dc:6e:d8:19:92:98:ca:d9:ae:28:8f:d1:85:08:
         bb:42:c8:d5:f6:84:ea:97:ee:ac:77:39:56:60:00:87:c9:ed:
         71:e4:29:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:40 2025 by rpki-client on console.sobornost.net