Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31392e302f32342d3234203d3e20323730393736.roa
File:                     3137392e34332e31392e302f32342d3234203d3e20323730393736.roa (raw, json)
Hash identifier:          GiYpCYSpyn4QqUgUWhRYgkf1Z3r51cnfM6atBkRLB68=
Subject key identifier:   8E:ED:A0:69:55:0C:4F:A6:63:5E:B0:D2:98:0E:5F:73:0A:4E:3A:16
Certificate issuer:       /CN=4A3F13967BD1598A8FC3B219CC9900A809C37494
Certificate serial:       48DB1BAF7DC83CFA9E50443DA85ED6F24BF34627
Authority key identifier: 4A:3F:13:96:7B:D1:59:8A:8F:C3:B2:19:CC:99:00:A8:09:C3:74:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31392e302f32342d3234203d3e20323730393736.roa
Signing time:             Fri 28 Mar 2025 19:40:33 +0000
ROA not before:           Fri 28 Mar 2025 19:35:33 +0000
ROA not after:            Fri 27 Mar 2026 19:40:33 +0000
asID:                     270976
IP address blocks:        179.43.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4A3F13967BD1598A8FC3B219CC9900A809C37494.crl
                          rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4A3F13967BD1598A8FC3B219CC9900A809C37494.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:db:1b:af:7d:c8:3c:fa:9e:50:44:3d:a8:5e:d6:f2:4b:f3:46:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3F13967BD1598A8FC3B219CC9900A809C37494
        Validity
            Not Before: Mar 28 19:35:33 2025 GMT
            Not After : Mar 27 19:40:33 2026 GMT
        Subject: CN=8EEDA069550C4FA6635EB0D2980E5F730A4E3A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:fd:6e:24:0f:f2:c6:c7:82:a9:af:61:c8:
                    fb:ed:7d:f9:da:41:51:cd:76:f4:0f:a9:7e:15:90:
                    60:cf:a1:42:05:20:2f:07:ab:cd:10:ac:46:02:ec:
                    7b:71:0a:51:b6:05:28:f3:3b:21:a0:c9:3a:6f:12:
                    e9:91:09:11:df:d9:47:4d:0b:44:b8:cb:97:88:fc:
                    79:c6:aa:f4:48:e7:08:b9:cb:34:49:88:8e:ab:92:
                    99:20:4e:db:d3:3b:1e:91:b8:98:74:55:2a:da:7b:
                    4e:b9:8e:6c:12:cb:ae:cc:d1:83:65:99:f0:68:37:
                    a9:cb:ac:4a:9b:3f:17:66:8e:75:6e:46:3c:95:45:
                    c5:c6:06:1c:46:c1:c9:d6:57:7a:f1:3b:76:0a:b6:
                    cd:63:5f:34:8c:4d:c3:80:1a:21:fe:c4:7f:eb:c6:
                    05:e5:45:90:7b:19:a3:e0:0e:ff:44:d1:3e:fe:44:
                    b3:5b:05:a6:74:8f:76:d4:03:54:ae:85:75:6d:01:
                    55:11:20:d5:cf:d3:9f:02:39:f3:bf:4a:8c:5d:74:
                    40:2f:fe:32:0f:1d:1f:75:7e:e1:8a:da:9f:3a:36:
                    1e:67:37:1e:47:50:6d:45:ca:b4:23:7b:e4:bf:0c:
                    50:ae:4f:e3:c1:db:ac:1d:d0:96:f0:04:8a:87:32:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:ED:A0:69:55:0C:4F:A6:63:5E:B0:D2:98:0E:5F:73:0A:4E:3A:16
            X509v3 Authority Key Identifier:
                keyid:4A:3F:13:96:7B:D1:59:8A:8F:C3:B2:19:CC:99:00:A8:09:C3:74:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4A3F13967BD1598A8FC3B219CC9900A809C37494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31392e302f32342d3234203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:3a:b0:8a:d4:91:1c:9b:8a:8d:79:9c:47:14:64:e5:c2:6a:
         55:59:06:76:34:1a:a1:a1:e4:76:d9:3c:42:92:c4:fa:2d:84:
         32:cb:0c:f7:20:3d:d8:c3:54:93:51:dc:5d:97:84:8a:87:f2:
         fa:7e:80:10:54:9d:e5:8c:b9:e8:d4:30:0b:f2:f1:6d:f4:2e:
         7f:91:9b:4b:45:2a:2b:86:36:37:36:19:64:9b:ea:08:8b:be:
         28:50:57:98:09:93:a3:80:85:dd:63:07:c8:f9:2c:2f:b1:7a:
         e5:df:a4:da:8b:91:5e:be:5c:b2:50:ae:af:c6:f6:03:dc:d9:
         15:7f:f5:05:a5:cb:02:99:29:7c:57:89:ef:c2:b8:c1:af:9d:
         36:72:70:52:50:23:cf:5b:c2:8f:e0:2b:6c:fe:5e:49:9e:86:
         aa:4c:25:de:3d:35:10:37:1f:51:a3:ba:ca:b9:75:0c:9f:32:
         4f:49:c8:a8:33:a4:27:66:7a:d0:3c:09:d7:22:50:7b:d3:cc:
         db:16:72:19:62:31:fd:f1:d4:ba:de:bb:80:03:a5:f1:ba:00:
         1e:ed:91:ca:a9:1c:74:e2:e4:1a:ba:73:71:51:e6:7b:11:21:
         80:e4:15:10:67:b0:03:a2:a1:7c:1c:f1:3d:40:57:11:c4:10:
         5b:b8:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:07 2025 by rpki-client on console.sobornost.net