Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32342d3234203d3e20323634393135.roa
File:                     3136382e3232382e3232302e302f32342d3234203d3e20323634393135.roa (raw, json)
Hash identifier:          6/yTNex6IntQYhUz6vi+cHEYw+gJitKV5gSRTj+KSn8=
Subject key identifier:   BD:88:C0:CC:02:56:11:F2:CE:C0:AA:A8:37:43:01:7B:01:89:F4:0C
Certificate issuer:       /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial:       32D33AC9F4AA60F100F11ED0C2AF90AD0C6B81F4
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32342d3234203d3e20323634393135.roa
Signing time:             Mon 07 Apr 2025 15:27:16 +0000
ROA not before:           Mon 07 Apr 2025 15:22:16 +0000
ROA not after:            Mon 06 Apr 2026 15:27:16 +0000
asID:                     264915
IP address blocks:        168.228.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
                          rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d3:3a:c9:f4:aa:60:f1:00:f1:1e:d0:c2:af:90:ad:0c:6b:81:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
        Validity
            Not Before: Apr  7 15:22:16 2025 GMT
            Not After : Apr  6 15:27:16 2026 GMT
        Subject: CN=BD88C0CC025611F2CEC0AAA83743017B0189F40C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:64:c2:d9:b2:30:1c:e8:b8:95:63:a9:b6:
                    28:2b:e0:9d:96:75:38:df:de:57:55:ad:df:09:15:
                    3d:1c:3b:24:47:05:81:c4:51:a8:2a:cc:ff:92:c3:
                    dd:78:5b:7e:41:17:34:fe:40:30:ec:ea:24:4b:6e:
                    97:76:f6:8b:6b:96:89:f9:de:29:6c:ce:39:93:09:
                    36:b7:2a:38:47:37:dd:31:55:32:1e:e1:a5:3b:91:
                    86:0e:d3:6a:09:86:47:0d:5e:67:a6:18:a9:0d:79:
                    ee:c9:f7:db:24:c4:80:3a:4f:1f:4d:20:41:1b:12:
                    2b:65:90:6a:8d:31:15:d6:96:b1:b3:f3:26:a5:f8:
                    66:f9:4d:08:74:96:3d:a7:19:34:48:75:7e:be:3b:
                    0a:7f:15:2c:c1:48:09:16:9c:42:fd:ce:5d:bf:01:
                    72:f1:7a:1f:e4:0f:20:4a:58:91:43:89:2a:c0:c6:
                    c4:14:f3:56:e8:92:7b:3c:33:f5:b7:93:f1:2a:b5:
                    5a:33:b7:64:24:30:b1:e8:3f:a9:42:9f:75:e9:96:
                    ba:ee:f6:a8:26:2b:fe:2e:f1:a2:f6:34:02:4e:02:
                    16:38:63:b4:b4:0e:e0:dc:38:da:12:2a:4f:62:09:
                    51:ef:35:f6:64:3d:a4:4c:b5:d7:bf:44:8a:2b:70:
                    1e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:88:C0:CC:02:56:11:F2:CE:C0:AA:A8:37:43:01:7B:01:89:F4:0C
            X509v3 Authority Key Identifier:
                keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32342d3234203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:6b:a2:ed:b4:75:a3:a7:18:d6:11:18:40:47:b3:3e:fe:4e:
         dd:3f:e6:f9:5d:f8:67:39:df:37:41:88:ff:e2:97:f3:2f:bc:
         39:e7:61:c0:d3:a9:87:0d:1c:fc:4c:8b:46:a7:c2:c2:c0:f2:
         e9:83:b6:10:6f:5b:7e:ce:05:fd:52:56:e4:aa:2c:f7:3c:d1:
         29:5e:d1:8a:9b:ce:c1:36:af:a3:96:d0:d1:f1:ce:18:33:59:
         84:15:24:4e:47:ba:43:a5:10:e9:02:74:bf:84:94:cb:2d:b9:
         4c:67:2b:a7:aa:ae:b8:3e:a0:33:db:0d:3e:5a:3b:2d:f9:59:
         c6:16:1f:78:87:a2:8b:64:b9:f5:ae:6a:cf:83:6f:91:ff:ac:
         96:c3:3a:41:d6:d8:12:ed:80:6f:3d:61:38:26:fa:08:b8:04:
         e2:3b:2f:5c:f8:3e:3e:39:7f:56:2d:59:2c:e3:54:ae:5a:49:
         ad:9f:80:f8:8f:53:d7:91:2a:15:0b:51:7a:14:64:1e:72:10:
         d3:b1:e8:d3:88:f4:38:ee:f4:54:1e:bb:d1:f1:77:2b:dd:9f:
         9b:d4:18:9a:5c:c9:9d:f3:29:a0:c5:4f:c8:41:d5:d1:12:28:
         81:e9:05:89:f8:40:91:97:46:53:16:ef:e8:23:ad:14:e7:34:
         05:c8:5c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:55 2025 by rpki-client on console.sobornost.net