Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/3133382e33362e34342e302f32322d3234203d3e20323634353635.roa
File:                     3133382e33362e34342e302f32322d3234203d3e20323634353635.roa (raw, json)
Hash identifier:          UvH9nIlLV7MTTlk+ySp3aQIuOQfzxZDqD2RXeggUE+U=
Subject key identifier:   27:97:F6:B1:80:1A:C8:DA:5C:DE:0F:B1:6D:1E:14:A5:A8:B1:07:92
Certificate issuer:       /CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Certificate serial:       1A9B6B9FBDC39F1CA38DBE9F63533AA991DB5513
Authority key identifier: AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/3133382e33362e34342e302f32322d3234203d3e20323634353635.roa
Signing time:             Fri 07 Mar 2025 00:39:05 +0000
ROA not before:           Fri 07 Mar 2025 00:34:05 +0000
ROA not after:            Fri 06 Mar 2026 00:39:05 +0000
asID:                     264565
IP address blocks:        138.36.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
                          rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9b:6b:9f:bd:c3:9f:1c:a3:8d:be:9f:63:53:3a:a9:91:db:55:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
        Validity
            Not Before: Mar  7 00:34:05 2025 GMT
            Not After : Mar  6 00:39:05 2026 GMT
        Subject: CN=2797F6B1801AC8DA5CDE0FB16D1E14A5A8B10792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ad:36:ae:fa:63:7b:30:c1:46:9c:c1:93:ed:
                    c4:97:0f:59:04:88:69:79:b6:19:43:1d:d4:44:6f:
                    db:79:91:8a:91:d3:75:c1:3f:15:6f:dd:48:d4:9b:
                    38:bc:2f:cc:a0:a5:9e:a1:9e:c0:99:7b:d1:e8:c2:
                    f4:3f:16:96:c4:2d:20:f3:07:a0:a8:1c:92:8d:03:
                    5b:47:c5:e0:84:8d:bf:12:0c:a0:db:26:d9:af:2b:
                    74:7f:db:af:27:fe:11:15:56:dd:63:3e:ac:0f:c5:
                    3a:e9:c7:51:16:f0:7d:42:c0:a2:8b:c2:bd:5b:37:
                    9e:2e:ca:95:71:77:77:e2:7c:94:ab:70:42:30:a5:
                    0e:98:18:90:ff:ff:e4:23:9d:dc:0f:6b:a6:db:49:
                    b2:c6:e2:27:97:b3:a9:96:77:4a:70:03:76:07:ea:
                    3f:f5:e0:ab:e2:a4:5a:41:5b:12:71:b5:8b:88:92:
                    04:0b:79:8d:bd:c4:a9:a6:30:78:19:ba:83:df:fb:
                    ca:16:c0:d0:31:15:38:92:21:8a:48:2c:2c:e7:19:
                    a3:e2:af:a2:f1:23:b1:0a:92:c4:0d:42:b6:e3:d0:
                    81:2a:99:eb:e3:d2:c3:e5:1d:72:5c:1d:4c:cc:f5:
                    ff:e8:38:10:1b:12:1b:e2:01:52:ff:c7:af:b9:6f:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:97:F6:B1:80:1A:C8:DA:5C:DE:0F:B1:6D:1E:14:A5:A8:B1:07:92
            X509v3 Authority Key Identifier:
                keyid:AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/3133382e33362e34342e302f32322d3234203d3e20323634353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:81:20:fc:fe:4a:9c:fd:80:7d:7b:8c:8d:db:21:ff:44:71:
         b8:8b:04:e4:51:23:a2:a6:b8:8a:ce:30:1b:75:14:cd:2d:b9:
         60:c0:0b:6f:86:b7:19:a7:a0:70:59:d2:6d:6d:7e:fe:ce:51:
         3b:85:a6:0c:1b:0d:b5:63:5f:27:9a:14:12:99:3c:9a:12:6f:
         0a:a3:82:b9:2b:d8:4c:f6:18:2e:7c:d8:8b:a2:db:9c:cb:9e:
         97:1d:32:ba:ee:23:22:57:6d:fc:fa:66:fe:0e:75:39:24:a2:
         0b:06:22:2e:bf:26:44:ea:02:dd:02:3e:8c:de:54:aa:22:a3:
         09:3a:f9:dc:69:ca:5a:98:f6:cd:65:8e:4e:8e:18:6f:3b:0e:
         b6:00:c8:d1:27:cd:6d:b5:8c:21:5e:f0:90:7a:2a:92:87:dc:
         1b:b4:0f:49:67:0f:46:b6:e6:58:ec:81:c1:23:5d:80:76:fb:
         6e:78:36:a6:94:a8:f1:23:a9:0e:78:ff:2c:47:6e:8e:7c:47:
         eb:61:27:ac:8e:45:7c:43:48:4e:21:be:a9:f8:28:3d:ee:f5:
         3f:12:6f:79:dc:0e:45:10:44:73:7e:04:6d:bd:3b:0a:09:bd:
         67:99:34:68:7c:2c:fb:d2:1a:0f:1d:43:3b:c3:72:8e:82:d6:
         5f:34:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:07 2025 by rpki-client on console.sobornost.net