Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa
File:                     3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa (raw, json)
Hash identifier:          JulP3DMhqYm/tVYr+66IvqjP/M4lo8+glOTbtmROB94=
Subject key identifier:   36:3D:8A:C7:FA:4D:E8:DE:A6:DF:C3:50:28:CF:42:D9:80:C9:21:7F
Certificate issuer:       /CN=21F56257920CE88D55FEE0E1D369CE905FA2782B
Certificate serial:       2853C40AB1EFFC5EA5513D77469EECEAD53E6DF6
Authority key identifier: 21:F5:62:57:92:0C:E8:8D:55:FE:E0:E1:D3:69:CE:90:5F:A2:78:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa
Signing time:             Thu 06 Mar 2025 05:48:20 +0000
ROA not before:           Thu 06 Mar 2025 05:43:20 +0000
ROA not after:            Thu 05 Mar 2026 05:48:20 +0000
asID:                     264415
IP address blocks:        131.221.20.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.crl
                          rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 10:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:53:c4:0a:b1:ef:fc:5e:a5:51:3d:77:46:9e:ec:ea:d5:3e:6d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F56257920CE88D55FEE0E1D369CE905FA2782B
        Validity
            Not Before: Mar  6 05:43:20 2025 GMT
            Not After : Mar  5 05:48:20 2026 GMT
        Subject: CN=363D8AC7FA4DE8DEA6DFC35028CF42D980C9217F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:01:ef:9f:8e:73:b8:e7:73:c2:a1:b9:ec:
                    1e:77:26:bd:de:1e:df:5f:65:cb:18:c4:69:04:8b:
                    1f:b3:de:68:05:c3:35:fa:52:16:31:40:45:90:3e:
                    5b:50:f9:b9:50:c0:fa:57:72:cb:d5:62:9d:51:e1:
                    87:65:bc:fc:7a:58:ea:ca:79:55:0b:16:b6:3b:a7:
                    09:eb:79:3f:66:35:7f:f7:10:db:1e:0b:6d:23:3b:
                    e7:73:6e:92:f0:e6:79:4b:b5:1f:a7:ed:da:10:19:
                    d7:f8:0b:52:36:96:59:ac:f2:3a:82:23:cd:23:3c:
                    0a:07:97:54:e7:fc:1b:77:33:f2:ea:49:63:d1:d0:
                    85:a3:8a:0b:ca:03:9c:72:80:d2:96:e1:73:99:07:
                    7b:ec:4e:7d:23:1d:5d:97:d4:cd:2f:74:6d:66:6f:
                    5b:5c:1e:e3:72:71:f9:63:1f:7c:5a:07:37:e3:07:
                    1f:6e:67:88:6f:0d:d5:c2:35:48:a0:83:ee:2f:18:
                    91:2d:f0:c6:2d:e2:87:08:e0:fb:0c:54:f4:fd:b8:
                    9d:eb:bd:cc:fa:34:76:dd:62:49:81:b6:93:45:6e:
                    8b:0e:09:85:56:56:37:eb:4d:cc:12:08:b9:10:3f:
                    36:bd:da:56:ad:96:42:3e:45:b7:92:96:d8:16:be:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3D:8A:C7:FA:4D:E8:DE:A6:DF:C3:50:28:CF:42:D9:80:C9:21:7F
            X509v3 Authority Key Identifier:
                keyid:21:F5:62:57:92:0C:E8:8D:55:FE:E0:E1:D3:69:CE:90:5F:A2:78:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:e1:65:c7:c3:be:49:c2:74:cc:92:76:52:f1:ff:42:ab:1e:
         5f:d3:6f:ba:1f:98:48:d3:80:5c:b6:ff:63:c2:4a:19:3d:dc:
         20:00:39:59:b5:44:a6:ef:25:34:c0:c7:9c:44:77:bd:8e:b4:
         d0:52:8b:7c:12:1a:38:03:72:a3:45:45:aa:56:3e:08:75:d5:
         1d:65:52:56:78:40:fb:6f:89:68:37:78:7c:83:e9:a4:05:d1:
         5f:81:3a:1d:77:6c:17:c1:a6:cd:23:16:d8:e2:a7:b8:43:70:
         f8:ac:c8:31:44:af:b8:14:f1:04:44:d0:da:15:c1:9c:40:b3:
         28:53:c9:36:1b:00:4d:99:c2:40:d1:e0:c7:ec:84:b5:ea:6e:
         b5:ec:92:b7:90:26:0e:ae:21:22:39:c7:5d:df:c9:8e:9b:47:
         b2:3f:21:7b:44:b7:73:1f:c8:fc:2a:bd:37:b1:e6:e9:3d:5c:
         cc:88:68:e4:7d:59:8a:16:e4:2d:20:1e:5a:fa:b7:7e:a6:9f:
         2e:aa:61:ef:d6:3f:e6:8f:6e:e1:05:69:44:6f:ae:68:16:89:
         65:5b:e9:d2:ea:cb:df:57:81:43:66:3f:16:c6:8e:e9:08:a1:
         5f:2c:ba:a1:e0:51:b1:21:19:b4:89:3a:c9:32:ed:7a:61:e6:
         3f:9a:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:55 2025 by rpki-client on console.sobornost.net