Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130342e302f32342d3234203d3e20323633393631.roa
File:                     3133382e3235352e3130342e302f32342d3234203d3e20323633393631.roa (raw, json)
Hash identifier:          uBsRssHHpQqhm/I0HXUqOdYb455WPOe8YjBxXT48ihM=
Subject key identifier:   31:03:ED:84:49:67:F4:98:97:85:6D:10:CC:3D:AF:75:02:CB:AD:EC
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       30E22DE4D22C36DC3AE48D5D063DEDB2CA988936
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130342e302f32342d3234203d3e20323633393631.roa
Signing time:             Thu 06 Mar 2025 01:28:08 +0000
ROA not before:           Thu 06 Mar 2025 01:23:08 +0000
ROA not after:            Thu 05 Mar 2026 01:28:08 +0000
asID:                     263961
IP address blocks:        138.255.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl
                          rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e2:2d:e4:d2:2c:36:dc:3a:e4:8d:5d:06:3d:ed:b2:ca:98:89:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Mar  6 01:23:08 2025 GMT
            Not After : Mar  5 01:28:08 2026 GMT
        Subject: CN=3103ED844967F49897856D10CC3DAF7502CBADEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:86:09:19:bd:a5:30:16:36:76:e3:84:ac:
                    e2:66:01:10:35:a5:7d:a6:ca:d3:7b:f0:54:90:13:
                    e4:86:bc:a2:2d:c1:c3:dc:f8:f4:cc:64:47:04:cf:
                    68:74:34:ef:d3:b5:99:ae:7d:83:f7:0c:63:87:1f:
                    03:84:c0:6a:d5:48:e8:1f:87:b9:9b:05:0c:fa:25:
                    45:20:94:ca:86:56:83:d2:16:45:0c:28:5d:14:02:
                    3d:eb:d9:d0:96:ed:72:ec:b3:c6:de:9d:4f:8f:ae:
                    4f:b3:8c:26:65:7b:b8:e8:04:e1:59:df:07:c5:25:
                    a7:fe:91:09:da:ff:d0:d1:4f:0a:0c:b2:5c:cd:f2:
                    8f:b6:b6:e1:17:58:59:45:cd:53:fb:f7:44:d6:8b:
                    82:96:76:72:06:2f:3e:24:29:e3:1c:a7:64:35:c5:
                    83:54:85:e9:5f:37:e5:18:ff:e6:d6:d2:1f:22:0d:
                    27:fe:b8:2a:27:2d:6f:7c:e7:2f:37:f2:48:c8:1e:
                    87:ef:f4:bc:de:57:6c:aa:23:94:bd:a6:ca:0b:60:
                    13:c6:6e:46:ee:25:76:45:9a:9d:2f:95:b6:81:55:
                    c7:35:4e:bb:87:b4:9e:e7:36:b2:81:68:35:f4:f9:
                    b1:66:eb:83:43:7f:1c:e6:bd:24:7f:e4:02:d8:97:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:03:ED:84:49:67:F4:98:97:85:6D:10:CC:3D:AF:75:02:CB:AD:EC
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130342e302f32342d3234203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:6a:72:8d:e8:c4:6c:a5:93:7e:42:4d:fc:3b:5e:eb:b0:50:
         98:84:a9:12:ea:25:31:d9:32:53:08:95:0e:a3:ba:c7:3b:8a:
         86:27:d9:83:42:5e:f1:bc:fa:31:40:7c:ce:1b:ac:a4:63:b9:
         3d:b8:87:0b:15:34:47:e0:82:7d:d4:ce:e4:6f:91:d6:3e:77:
         74:81:84:a6:77:a1:38:15:8c:ef:8c:eb:51:25:ee:0d:03:82:
         1b:04:f3:39:70:6e:70:51:19:a5:b4:1b:f9:b2:0f:d6:f7:87:
         e1:4c:d9:26:ac:5a:c1:80:f2:33:96:3c:a9:f2:f2:d2:b2:40:
         4a:f7:9d:80:1b:85:57:5b:e7:5b:af:b3:2a:8c:82:bc:a8:56:
         6a:4a:21:ed:5f:b0:3f:52:77:75:08:5f:11:35:fa:65:eb:d0:
         23:e7:c4:83:8f:5f:ae:3d:85:67:5a:f8:9b:a9:5f:4e:8b:39:
         e6:3a:71:8d:8e:64:d3:d1:71:7d:db:cc:e1:52:cc:e6:55:55:
         48:de:f3:33:26:23:5a:84:fc:f4:82:bb:ec:b9:25:12:be:c9:
         a1:4c:e0:15:50:06:42:0e:56:58:2f:16:9a:25:62:b3:4a:23:
         53:52:1a:aa:dc:d5:16:7e:59:0d:43:45:c3:59:14:09:9e:e6:
         6e:7d:80:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:01 2025 by rpki-client on console.sobornost.net