Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/3137372e38362e32382e302f32322d3234203d3e20323632343932.roa
File:                     3137372e38362e32382e302f32322d3234203d3e20323632343932.roa (raw, json)
Hash identifier:          9zvqJCYnKEtUNbM/ae4VOODWqhE9lxRoy7o8+V2M39Y=
Subject key identifier:   49:98:C8:0C:5A:04:19:68:61:5F:41:78:02:E0:3F:09:8F:D0:AF:B6
Certificate issuer:       /CN=13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE
Certificate serial:       5901041A625BC50E674142B7DB1D5A2D9C4BE941
Authority key identifier: 13:A7:F6:C1:A7:DF:9B:0A:1A:93:E5:01:C5:79:1D:83:5F:C2:61:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/3137372e38362e32382e302f32322d3234203d3e20323632343932.roa
Signing time:             Thu 06 Mar 2025 04:00:18 +0000
ROA not before:           Thu 06 Mar 2025 03:55:18 +0000
ROA not after:            Thu 05 Mar 2026 04:00:18 +0000
asID:                     262492
IP address blocks:        177.86.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.crl
                          rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:01:04:1a:62:5b:c5:0e:67:41:42:b7:db:1d:5a:2d:9c:4b:e9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE
        Validity
            Not Before: Mar  6 03:55:18 2025 GMT
            Not After : Mar  5 04:00:18 2026 GMT
        Subject: CN=4998C80C5A041968615F417802E03F098FD0AFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:cd:11:5e:e4:b0:21:9e:2b:ae:c8:81:c4:
                    14:42:2a:77:ad:05:09:19:f4:3d:78:c0:59:7b:33:
                    80:52:04:38:09:ef:e4:58:7d:64:4e:4e:0b:20:d2:
                    10:d8:50:1e:2f:94:b5:5b:8e:63:fd:cb:6c:3b:36:
                    b9:e6:ba:08:36:16:ac:c9:fd:c6:2f:6d:75:ad:41:
                    ab:7b:5d:23:e3:c8:d2:9c:5a:39:4d:7b:9f:7c:8b:
                    33:ac:47:b8:64:46:8a:5c:eb:fb:c1:04:e7:f6:07:
                    7f:5d:ca:8f:31:23:51:ee:75:67:2a:c4:6f:aa:6d:
                    ab:76:68:81:69:dc:e6:31:77:a6:f5:c6:90:46:73:
                    57:4d:8f:28:06:1e:57:fe:33:1f:88:e2:67:fe:6c:
                    24:18:28:2e:09:af:a9:fb:7c:ff:7f:d4:a9:98:0f:
                    50:10:70:0a:50:60:e0:7a:f3:e2:8d:12:f3:fc:b8:
                    d3:98:c6:d4:0c:35:1a:34:99:44:5d:92:fb:c2:b7:
                    d7:c4:16:92:f7:51:a7:d0:40:7b:ac:4d:f1:fa:3c:
                    6b:dd:c6:7c:76:78:92:01:4f:89:44:66:b6:c1:4b:
                    c0:6c:cd:35:75:4e:de:a2:11:55:0b:d2:75:d4:53:
                    c7:bb:04:68:14:47:5b:92:f1:3c:8f:25:d2:c0:7d:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:98:C8:0C:5A:04:19:68:61:5F:41:78:02:E0:3F:09:8F:D0:AF:B6
            X509v3 Authority Key Identifier:
                keyid:13:A7:F6:C1:A7:DF:9B:0A:1A:93:E5:01:C5:79:1D:83:5F:C2:61:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/3137372e38362e32382e302f32322d3234203d3e20323632343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:23:27:62:04:61:55:28:be:2c:ff:04:ff:ba:63:ad:f8:7c:
         7f:07:94:c6:2c:e0:83:91:af:3f:fc:07:b3:4a:10:a0:fc:be:
         07:86:14:7e:95:64:04:b0:6a:7d:e1:5f:0c:6b:05:c5:c6:63:
         e1:61:e7:b1:fb:67:1d:95:70:6c:90:f6:4c:bd:b6:42:47:e2:
         7d:63:bf:e9:0b:13:77:b1:11:54:93:45:a7:ca:5e:0c:e0:ee:
         25:8d:07:48:cb:db:84:ac:62:5a:61:2b:27:39:b9:58:47:16:
         0a:f6:0a:7c:34:7d:a8:23:67:40:b6:41:7c:d2:29:07:34:e7:
         3f:3f:c7:d1:7e:6c:bf:5e:ed:20:8e:22:ca:77:16:8f:be:8c:
         15:bc:a6:77:47:4d:79:bc:da:a9:2f:08:1e:8e:b8:10:43:93:
         b8:2e:28:62:0a:7d:77:b3:f3:9d:2f:ba:83:1d:0e:3f:bd:12:
         71:c8:69:ea:71:27:8d:e4:73:39:d0:71:c8:3f:6a:3b:3b:ec:
         15:ef:f2:54:a5:90:64:ef:4e:57:c6:0a:b9:b5:10:4e:f3:7f:
         29:2b:91:64:eb:17:b2:96:9a:d9:05:5c:2d:39:7e:98:72:2d:
         f8:49:4a:9d:1f:73:57:79:d6:1d:78:7a:db:09:d6:8c:bd:bd:
         51:b9:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:47 2025 by rpki-client on console.sobornost.net