Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/3138392e3132362e31302e302f32342d3234203d3e20323730333938.roa
File:                     3138392e3132362e31302e302f32342d3234203d3e20323730333938.roa (raw, json)
Hash identifier:          onmvtbSgOL+r75kR2G7hGwFpda1ISmlV4UfmueNPAKA=
Subject key identifier:   22:E5:E0:59:3C:FE:5F:6B:70:A0:7B:C5:3B:01:53:66:17:8B:F7:75
Certificate issuer:       /CN=0B87152C81608FF3E967A3FEF41277E924CC8816
Certificate serial:       1C04AFA32A33885C373A64632346052386C5D263
Authority key identifier: 0B:87:15:2C:81:60:8F:F3:E9:67:A3:FE:F4:12:77:E9:24:CC:88:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B87152C81608FF3E967A3FEF41277E924CC8816.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/3138392e3132362e31302e302f32342d3234203d3e20323730333938.roa
Signing time:             Sat 11 Jan 2025 00:02:31 +0000
ROA not before:           Fri 10 Jan 2025 23:57:31 +0000
ROA not after:            Sat 10 Jan 2026 00:02:31 +0000
asID:                     270398
IP address blocks:        189.126.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/0B87152C81608FF3E967A3FEF41277E924CC8816.crl
                          rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/0B87152C81608FF3E967A3FEF41277E924CC8816.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B87152C81608FF3E967A3FEF41277E924CC8816.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:04:af:a3:2a:33:88:5c:37:3a:64:63:23:46:05:23:86:c5:d2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B87152C81608FF3E967A3FEF41277E924CC8816
        Validity
            Not Before: Jan 10 23:57:31 2025 GMT
            Not After : Jan 10 00:02:31 2026 GMT
        Subject: CN=22E5E0593CFE5F6B70A07BC53B015366178BF775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:72:36:5b:b6:f4:f4:f9:38:72:5c:1a:e8:69:
                    96:28:9e:b3:1d:4a:8f:be:fb:7c:29:05:66:46:ba:
                    61:b9:77:75:90:3b:94:70:35:db:a9:52:b9:e3:e8:
                    61:02:09:20:2c:8d:38:44:63:04:fb:8d:91:04:40:
                    02:f6:dd:23:d8:d8:f8:1a:00:56:0f:c8:3e:95:fd:
                    a4:0b:05:dd:67:70:64:77:b4:e7:cd:d8:8a:90:a6:
                    a6:b5:81:a5:af:86:91:ec:c5:21:60:d9:2c:ea:53:
                    dd:1d:cb:36:af:f7:04:b1:25:44:9f:16:33:c1:be:
                    9d:c2:4d:71:35:63:16:96:94:39:5d:1f:d5:e2:89:
                    19:3b:e4:7b:72:61:bc:b8:67:c1:3d:89:ee:12:5a:
                    8c:18:a4:ba:d8:7b:db:af:92:56:31:93:67:9a:26:
                    03:0a:cb:fb:43:dc:2c:69:10:67:05:9c:17:85:9e:
                    38:c4:fb:f8:e9:6c:aa:ea:21:4a:9b:17:04:bb:67:
                    e0:c9:8e:eb:89:51:1c:4f:68:85:12:a7:e0:ce:10:
                    85:4f:b6:b4:fe:ab:7a:aa:06:75:c6:07:ff:45:e8:
                    4b:e8:95:07:16:db:c8:2c:98:a4:49:97:9a:93:2c:
                    09:2b:ca:77:57:69:a1:3a:3c:29:4f:72:ea:bc:0a:
                    32:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E5:E0:59:3C:FE:5F:6B:70:A0:7B:C5:3B:01:53:66:17:8B:F7:75
            X509v3 Authority Key Identifier:
                keyid:0B:87:15:2C:81:60:8F:F3:E9:67:A3:FE:F4:12:77:E9:24:CC:88:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/0B87152C81608FF3E967A3FEF41277E924CC8816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B87152C81608FF3E967A3FEF41277E924CC8816.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/3138392e3132362e31302e302f32342d3234203d3e20323730333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:67:0c:68:4a:32:eb:92:d9:78:c5:cc:12:b3:86:a1:86:9f:
         50:0f:1a:e5:bb:ea:75:f0:9b:70:1f:c9:25:a6:0e:06:b3:97:
         f9:84:68:6e:14:f0:57:14:70:df:51:c4:9c:9f:84:db:7d:4b:
         87:e6:7a:b2:21:dc:60:33:e3:3a:44:66:8e:23:70:75:6c:c9:
         a5:64:d8:5a:37:21:dc:8c:79:02:31:a6:63:6b:0e:47:01:a9:
         81:29:2e:5d:31:92:89:7d:ee:e5:c0:e8:57:72:f4:ea:84:2e:
         f7:23:52:bc:68:e7:4b:37:d8:9c:4a:93:fc:58:eb:1d:66:40:
         e2:c9:6a:ec:32:0d:7e:b9:f3:94:a9:24:5e:c8:68:c2:81:3b:
         66:d8:a4:82:48:3a:d8:b3:e9:88:42:0c:dd:83:95:63:67:f0:
         61:4b:8d:ae:7b:71:63:6f:3a:95:43:f5:6c:b2:94:4e:f1:de:
         ca:e3:54:ee:9c:88:16:74:56:34:b9:fb:2e:55:7d:d9:64:e9:
         83:a8:66:fa:14:8e:24:c1:65:3b:13:9c:aa:07:bc:4e:c8:2a:
         d6:51:07:68:8e:81:6c:54:86:c0:30:47:b2:e3:60:1d:49:7b:
         d0:af:a0:81:46:22:1b:a7:0c:b9:18:be:c5:3d:cf:84:59:f8:
         72:67:1a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:47 2025 by rpki-client on console.sobornost.net