Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/3133382e39372e36382e302f32322d3234203d3e20323634313437.roa
File:                     3133382e39372e36382e302f32322d3234203d3e20323634313437.roa (raw, json)
Hash identifier:          NJdz4fRP8TAfc+ECIjk8uV3hRUpspXET/BvMehFEyq8=
Subject key identifier:   5B:72:64:AE:FF:5F:FC:04:D9:39:F1:2A:72:44:69:AC:CC:6C:85:5C
Certificate issuer:       /CN=58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08
Certificate serial:       1993A41DB7EE18D393339466E8CE9718E8D56623
Authority key identifier: 58:DB:73:64:C6:7F:7B:C3:1B:4F:78:54:DC:F1:B0:55:0C:5C:FC:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/3133382e39372e36382e302f32322d3234203d3e20323634313437.roa
Signing time:             Thu 06 Mar 2025 20:17:01 +0000
ROA not before:           Thu 06 Mar 2025 20:12:01 +0000
ROA not after:            Thu 05 Mar 2026 20:17:01 +0000
asID:                     264147
IP address blocks:        138.97.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.crl
                          rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:93:a4:1d:b7:ee:18:d3:93:33:94:66:e8:ce:97:18:e8:d5:66:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08
        Validity
            Not Before: Mar  6 20:12:01 2025 GMT
            Not After : Mar  5 20:17:01 2026 GMT
        Subject: CN=5B7264AEFF5FFC04D939F12A724469ACCC6C855C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:06:d4:9d:69:ff:74:0a:5a:57:13:26:ce:
                    a3:a1:5c:b4:ef:dd:88:08:8e:f2:05:b5:59:d1:32:
                    5d:87:b8:c3:44:86:fb:8d:26:8a:f9:8e:c9:b8:57:
                    d9:ac:74:79:4a:fa:59:fc:7b:8e:fa:d1:96:96:6f:
                    a7:59:91:7b:f6:22:51:cb:05:56:cc:e2:9a:0a:7d:
                    4d:5d:1a:05:9c:46:5a:7a:e0:10:84:1b:58:5e:fa:
                    b3:e0:88:43:9f:63:d9:05:97:96:8a:49:8a:56:14:
                    0a:d2:5b:82:bf:67:3e:d9:a7:47:65:13:42:f9:d1:
                    f7:9c:09:e5:8c:c7:83:5a:8d:c7:dc:c9:ee:ec:fd:
                    1c:f2:2d:c0:43:d2:92:f5:dc:52:50:fa:07:0b:91:
                    8d:59:00:68:31:c1:d8:e1:62:70:9f:5c:e6:5b:20:
                    b3:03:9b:bd:a0:74:9f:01:10:04:8e:7b:07:8c:c0:
                    6a:ed:13:60:4b:27:f3:c4:ba:aa:b4:2d:b4:05:76:
                    d4:17:13:c3:96:83:2d:42:a3:4f:46:60:e4:2d:78:
                    c5:66:bb:ab:18:ee:bf:17:a3:f9:a0:3b:91:f1:29:
                    e0:b2:d5:06:52:9c:44:6a:a5:42:b8:77:52:a0:35:
                    54:f5:27:b9:9f:bf:df:d5:cb:64:85:83:33:6f:b1:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:72:64:AE:FF:5F:FC:04:D9:39:F1:2A:72:44:69:AC:CC:6C:85:5C
            X509v3 Authority Key Identifier:
                keyid:58:DB:73:64:C6:7F:7B:C3:1B:4F:78:54:DC:F1:B0:55:0C:5C:FC:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58DB7364C67F7BC31B4F7854DCF1B0550C5CFC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/1/3133382e39372e36382e302f32322d3234203d3e20323634313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:4a:58:dc:cf:8e:04:c3:1a:87:66:5e:28:50:12:9b:06:cc:
         ea:4f:99:1c:03:0f:76:b8:89:c3:c6:11:d7:be:19:8d:a3:7a:
         52:54:25:37:5c:bb:f7:50:a3:9a:16:b9:70:58:ef:05:9c:9d:
         45:3f:3b:f3:00:fb:ff:b2:fc:db:c6:df:95:84:52:59:3e:c8:
         cb:9b:e8:06:07:56:1b:6b:5f:73:9b:e7:aa:a5:d4:42:ab:9d:
         3e:b3:d3:9b:c9:26:f0:d6:7e:aa:a6:71:71:2b:70:5a:b3:43:
         31:d1:e1:a1:77:72:75:70:87:d2:d3:7f:6e:8e:bb:ac:69:5a:
         5a:83:37:1c:95:c2:f5:c3:ec:46:5c:53:ac:b6:27:88:25:fe:
         42:cc:be:03:07:1c:ed:1c:d9:2c:0a:89:4b:76:6a:0a:f7:b8:
         cf:e0:c7:8a:ea:c4:10:65:ed:5a:81:c5:f6:53:58:a4:a3:f2:
         fa:7b:c1:58:86:f2:96:a2:57:28:09:d3:62:47:63:07:6a:38:
         d8:b2:df:7a:98:7c:3d:67:94:c6:9d:64:c7:6f:b4:37:d3:2c:
         e1:40:b3:d1:50:da:73:79:2f:fb:e1:ee:09:b0:7e:ef:ed:d6:
         c1:89:81:cc:f3:2f:9e:32:78:cf:4b:f3:19:da:e9:7e:95:98:
         a4:7a:66:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:52 2025 by rpki-client on console.sobornost.net