Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa
File:                     3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa (raw, json)
Hash identifier:          tgESvBp/KUEWpZwMiNdesFWAdFP81oBbf4Kzc7TWEx4=
Subject key identifier:   E9:2E:FA:36:53:5D:E7:BC:E0:C7:81:77:46:D1:E5:E9:3B:0A:42:A0
Certificate issuer:       /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial:       41F0DE0DBC3FC53B7D3E58DEB2BDAF504CDD75C5
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa
Signing time:             Mon 07 Apr 2025 15:27:18 +0000
ROA not before:           Mon 07 Apr 2025 15:22:18 +0000
ROA not after:            Mon 06 Apr 2026 15:27:18 +0000
asID:                     264915
IP address blocks:        168.228.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
                          rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f0:de:0d:bc:3f:c5:3b:7d:3e:58:de:b2:bd:af:50:4c:dd:75:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
        Validity
            Not Before: Apr  7 15:22:18 2025 GMT
            Not After : Apr  6 15:27:18 2026 GMT
        Subject: CN=E92EFA36535DE7BCE0C7817746D1E5E93B0A42A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:c7:3f:cf:fa:28:23:d2:69:f6:0c:4b:25:
                    5d:ee:e2:6b:48:a6:41:54:a3:d7:96:0d:47:53:a1:
                    81:ec:36:15:9e:5e:ab:91:d2:f0:22:2b:1f:24:69:
                    5c:63:12:b7:8b:a4:b9:d8:a0:9a:77:88:46:7f:20:
                    3c:01:a2:41:91:e9:f4:92:1d:12:3f:e5:66:35:14:
                    cf:db:42:ed:15:9d:1f:2e:21:d8:bb:b5:98:56:5f:
                    89:6f:d8:80:59:ba:15:90:5c:31:25:7e:c3:3b:8e:
                    13:ba:bb:ea:ed:c7:11:2a:9c:b1:3c:91:d2:a2:fd:
                    40:ef:96:23:75:b7:fe:64:d3:a8:d9:48:55:96:7c:
                    4c:af:8b:3b:41:93:ca:9f:65:bd:2e:c6:52:3f:cd:
                    c3:77:9c:c1:4f:00:bd:40:b9:1e:ab:0c:a2:99:76:
                    f9:99:84:b2:72:2f:ce:13:15:80:2f:03:7b:e6:89:
                    c0:12:cb:d5:ba:c4:84:a9:2a:28:9d:d7:17:3f:a8:
                    38:05:8e:a7:44:56:b6:53:d8:05:b0:5d:e1:02:e1:
                    72:f1:bb:1a:2c:a1:e5:5c:b3:56:f0:00:56:3e:88:
                    f3:9c:16:86:95:48:2d:b3:68:9b:68:6e:58:8e:e6:
                    20:1d:37:87:c3:aa:80:3f:fb:e4:f0:29:ec:af:33:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2E:FA:36:53:5D:E7:BC:E0:C7:81:77:46:D1:E5:E9:3B:0A:42:A0
            X509v3 Authority Key Identifier:
                keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:90:ac:b7:07:97:24:06:9f:36:9a:72:57:d9:6a:2e:4d:77:
         00:bd:11:52:4d:a4:75:11:a0:9a:53:a9:f3:e1:46:c0:12:3f:
         70:e4:ba:7f:95:15:3d:6b:e4:db:c7:9e:88:59:54:40:35:c2:
         bd:b5:b1:77:7a:4a:57:ff:41:1e:43:2f:f8:fd:f7:4b:4d:92:
         91:33:4d:e5:a2:bf:eb:95:6d:a8:1c:aa:4b:74:ff:e4:cf:52:
         3a:75:56:20:84:c3:b2:f5:66:5c:e5:2a:3f:89:ed:31:24:22:
         c2:e5:d3:f4:5f:19:ac:13:9b:11:0e:2d:a4:91:1b:bf:67:f5:
         ff:18:7b:c5:9b:67:c7:e1:d7:b7:a0:0f:01:d7:f2:ad:61:80:
         88:da:86:98:ba:63:61:7d:42:b2:3f:ca:b2:a1:fc:3e:c2:04:
         a6:ee:c8:fa:e0:ca:ac:d7:72:0c:80:f6:15:64:cc:94:d5:4c:
         17:c4:9e:89:9e:50:84:bf:a4:12:56:35:12:c3:5e:66:d5:30:
         40:d0:dd:43:2c:af:6b:ba:86:7b:2e:12:94:c4:9e:40:86:66:
         fa:08:b4:f5:cc:f1:5c:d6:f2:19:3c:8b:4f:85:b3:68:dd:aa:
         d4:39:da:62:7c:ea:52:59:da:83:f2:59:19:57:79:32:45:c8:
         b4:9f:ee:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:55 2025 by rpki-client on console.sobornost.net