Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e31302e302f32332d3234203d3e203631393030.roa
File:                     3139312e3234332e31302e302f32332d3234203d3e203631393030.roa (raw, json)
Hash identifier:          2AZYYvkn4pTxo7/KM55Jyz4+qQLx/byfcUECzhoNRSM=
Subject key identifier:   FC:81:D9:68:81:1A:2A:5E:D0:74:CB:72:75:1B:35:38:6D:46:F6:12
Certificate issuer:       /CN=717D62DB604520975DE382D0D3273E1BDB591D67
Certificate serial:       6EE0A92D4465557AAAFA3A6E936CCF41C627A9E0
Authority key identifier: 71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e31302e302f32332d3234203d3e203631393030.roa
Signing time:             Wed 16 Apr 2025 18:35:02 +0000
ROA not before:           Wed 16 Apr 2025 18:30:02 +0000
ROA not after:            Wed 15 Apr 2026 18:35:02 +0000
asID:                     61900
IP address blocks:        191.243.10.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e0:a9:2d:44:65:55:7a:aa:fa:3a:6e:93:6c:cf:41:c6:27:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717D62DB604520975DE382D0D3273E1BDB591D67
        Validity
            Not Before: Apr 16 18:30:02 2025 GMT
            Not After : Apr 15 18:35:02 2026 GMT
        Subject: CN=FC81D968811A2A5ED074CB72751B35386D46F612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:39:f0:b6:a0:36:c2:55:8d:19:1c:35:33:
                    18:11:fd:09:12:06:d5:69:96:09:aa:a8:c6:c9:f3:
                    9a:2e:62:68:d4:5c:91:7e:6c:84:4d:26:f9:06:f2:
                    8f:b6:f7:57:ba:e1:bf:f9:3f:55:fe:26:27:d6:0c:
                    e3:ed:30:b2:0f:ab:59:88:3d:5e:12:d6:df:ae:d8:
                    7b:3b:b0:11:db:12:11:c7:a5:d3:2a:c1:2e:5e:92:
                    65:7d:7b:d5:4e:fa:54:5b:89:96:b3:25:5c:e0:70:
                    32:82:ff:56:13:f1:48:aa:04:fc:64:57:f0:f1:85:
                    69:91:02:fc:9c:73:f9:49:a3:87:67:43:03:b4:30:
                    47:c3:50:4f:0e:d2:a7:6b:7c:c7:a0:0d:31:8a:b5:
                    2e:af:d3:d3:8b:4a:dc:0f:03:6f:8b:a4:e9:0e:3c:
                    9d:92:17:f3:bf:01:11:04:7e:52:cb:40:dc:5d:48:
                    34:e7:e1:37:39:7b:50:9a:e9:84:38:47:9b:96:23:
                    12:94:f5:89:4b:1e:d1:48:43:b6:7a:28:d7:60:ea:
                    ed:5e:60:ee:e1:98:72:60:d3:69:1a:6e:c2:b0:a4:
                    2f:d7:ea:6c:20:ed:9b:71:9a:3c:ff:2f:b4:63:b7:
                    6e:e5:34:94:d7:07:70:91:69:f2:9a:14:fe:2e:6f:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:81:D9:68:81:1A:2A:5E:D0:74:CB:72:75:1B:35:38:6D:46:F6:12
            X509v3 Authority Key Identifier:
                keyid:71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e31302e302f32332d3234203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:70:42:70:96:f6:aa:5e:d6:0a:e9:5d:27:ab:c0:78:67:
         ed:ed:20:50:e5:11:88:6a:f0:e8:d8:c6:98:af:c7:c5:ef:d3:
         7e:87:3c:e9:42:fa:7f:d3:88:c6:aa:a0:1d:25:ba:10:84:29:
         8f:60:52:1e:2f:e8:58:c2:f3:8b:3f:dd:18:a1:b7:c3:0f:0b:
         65:eb:42:54:cb:2f:f9:e0:b6:6f:9e:a5:e2:09:f8:c6:25:88:
         56:e8:ab:f6:29:6b:a5:ba:44:98:5d:ff:41:68:a7:66:fc:03:
         9a:39:e4:81:8b:08:65:b3:60:22:79:06:9e:b0:74:68:71:78:
         e1:4f:bf:53:ed:68:11:fe:0f:14:a8:32:ce:41:6f:c9:2c:d6:
         94:5b:73:b5:52:7f:84:03:90:23:a5:a2:d6:9d:f7:b5:ee:af:
         a6:5c:8e:fd:e9:77:9f:31:f9:ad:13:97:d2:7f:e8:2a:83:53:
         94:44:2f:88:c1:0b:b0:58:96:0d:e0:87:a9:3f:a8:07:65:5b:
         17:5a:0c:aa:62:94:ff:52:55:ec:ff:c6:8b:91:c3:fe:6b:38:
         4f:b6:e3:ba:67:4c:4b:ad:38:bc:0f:27:7d:17:c3:85:a3:59:
         e0:b8:60:dc:70:c6:46:8c:b5:57:8d:48:77:26:37:54:4b:93:
         95:cd:3c:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbuCpLURlVXqq+jpuk2zPQcYnqeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE3RDYyREI2MDQ1MjA5NzVERTM4MkQwRDMyNzNFMUJE
QjU5MUQ2NzAeFw0yNTA0MTYxODMwMDJaFw0yNjA0MTUxODM1MDJaMDMxMTAvBgNV
BAMTKEZDODFEOTY4ODExQTJBNUVEMDc0Q0I3Mjc1MUIzNTM4NkQ0NkY2MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmjnwtqA2wlWNGRw1MxgR/QkS
BtVplgmqqMbJ85ouYmjUXJF+bIRNJvkG8o+291e64b/5P1X+JifWDOPtMLIPq1mI
PV4S1t+u2Hs7sBHbEhHHpdMqwS5ekmV9e9VO+lRbiZazJVzgcDKC/1YT8UiqBPxk
V/DxhWmRAvycc/lJo4dnQwO0MEfDUE8O0qdrfMegDTGKtS6v09OLStwPA2+LpOkO
PJ2SF/O/AREEflLLQNxdSDTn4Tc5e1Ca6YQ4R5uWIxKU9YlLHtFIQ7Z6KNdg6u1e
YO7hmHJg02kabsKwpC/X6mwg7Ztxmjz/L7Rjt27lNJTXB3CRafKaFP4ub4m3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/IHZaIEaKl7QdMtydRs1OG1G9hIwHwYDVR0j
BBgwFoAUcX1i22BFIJdd44LQ0yc+G9tZHWcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG80MTRyOGtKWmloUURDdHBMakhFUm1QamN5anB4UFV5d2FSaDllaGNQ
SlgvMC83MTdENjJEQjYwNDUyMDk3NURFMzgyRDBEMzI3M0UxQkRCNTkxRDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxN0Q2MkRCNjA0NTIwOTc1
REUzODJEMEQzMjczRTFCREI1OTFENjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvNDE0cjhrSlppaFFEQ3RwTGpIRVJtUGpjeWpweFBVeXdhUmg5ZWhjUEpYLzAv
MzEzOTMxMmUzMjM0MzMyZTMxMzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNjMx
MzkzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBv/MKMA0GCSqGSIb3DQEBCwUAA4IBAQAXCnBCcJb2
ql7WCuldJ6vAeGft7SBQ5RGIavDo2MaYr8fF79N+hzzpQvp/04jGqqAdJboQhCmP
YFIeL+hYwvOLP90YobfDDwtl60JUyy/54LZvnqXiCfjGJYhW6Kv2KWulukSYXf9B
aKdm/AOaOeSBiwhls2AieQaesHRocXjhT79T7WgR/g8UqDLOQW/JLNaUW3O1Un+E
A5AjpaLWnfe17q+mXI796XefMfmtE5fSf+gqg1OURC+IwQuwWJYN4IepP6gHZVsX
WgyqYpT/UlXs/8aLkcP+azhPtuO6Z0xLrTi8Dyd9F8OFo1nguGDccMZGjLVXjUh3
JjdUS5OVzTxR
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:37 2025 by rpki-client on console.sobornost.net