Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e34382e302f32322d3232203d3e20323635383934.roa
File:                     3133312e3139362e34382e302f32322d3232203d3e20323635383934.roa (raw, json)
Hash identifier:          sXUBZqaYet96O9Q45LWmn3MOSbVlIgKaOenKXtUbuGM=
Subject key identifier:   B3:78:5F:3E:09:14:3F:D3:FC:32:6A:B5:69:B7:A3:6C:11:D6:50:AA
Certificate issuer:       /CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
Certificate serial:       73807EB6E5339FA0911A43A4C9809A5510B880E1
Authority key identifier: 4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e34382e302f32322d3232203d3e20323635383934.roa
Signing time:             Tue 22 Apr 2025 20:16:48 +0000
ROA not before:           Tue 22 Apr 2025 20:11:48 +0000
ROA not after:            Tue 21 Apr 2026 20:16:48 +0000
asID:                     265894
IP address blocks:        131.196.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.crl
                          rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 16:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:80:7e:b6:e5:33:9f:a0:91:1a:43:a4:c9:80:9a:55:10:b8:80:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
        Validity
            Not Before: Apr 22 20:11:48 2025 GMT
            Not After : Apr 21 20:16:48 2026 GMT
        Subject: CN=B3785F3E09143FD3FC326AB569B7A36C11D650AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:55:87:3a:28:32:1b:62:be:83:5a:ad:ac:66:
                    20:a8:0a:da:c9:65:3d:ea:6e:81:eb:af:10:f8:c2:
                    0f:dc:fb:44:e7:02:89:73:57:2b:36:37:51:13:b4:
                    21:8a:5a:8b:9e:98:ee:dd:c5:93:1c:9d:b7:16:84:
                    da:35:08:a4:c6:2a:e4:c8:e4:fe:96:29:b6:5a:65:
                    5c:8f:ae:3f:bd:7e:60:f6:d0:7f:cd:19:19:d5:87:
                    27:7e:f3:9b:61:85:2b:22:bc:f4:64:0e:2a:a4:43:
                    a3:86:a6:7c:86:ac:a0:21:ff:fe:52:69:f3:be:d6:
                    c2:85:2b:53:b7:3c:c3:a3:ae:b5:fd:f7:e2:7d:73:
                    10:f5:96:09:77:04:8e:7f:c3:42:a0:74:ad:62:3d:
                    3b:1b:f8:84:dc:75:8e:3f:d0:5f:b1:0f:3a:85:e9:
                    ce:6f:84:4b:72:13:7e:55:0c:9f:ed:bf:02:b7:46:
                    24:c7:ce:77:29:1e:80:05:be:21:34:96:f7:93:0d:
                    0c:a7:02:01:45:97:91:c8:a2:14:31:95:db:f5:8a:
                    19:24:5d:0d:86:6b:18:7a:37:36:01:87:b2:30:dc:
                    53:64:43:65:b6:46:1b:77:fb:25:5f:a3:6f:05:69:
                    a8:30:73:13:05:bf:5f:1c:08:43:6e:d9:2f:4b:45:
                    3e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:78:5F:3E:09:14:3F:D3:FC:32:6A:B5:69:B7:A3:6C:11:D6:50:AA
            X509v3 Authority Key Identifier:
                keyid:4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e34382e302f32322d3232203d3e20323635383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:5a:1e:b0:ad:62:1d:18:47:27:0d:40:a4:11:18:18:9a:5f:
         7d:2c:87:23:9b:dc:e7:5e:0d:5c:20:a6:f3:3a:01:a3:d1:dc:
         8c:9f:54:f7:cf:b4:7a:1f:17:eb:01:b9:60:89:6a:56:4a:21:
         41:df:47:f0:99:b8:6a:d6:d2:30:fb:b9:26:44:96:6d:08:a4:
         9c:bb:cf:28:c0:df:c2:7a:8e:71:32:93:5c:09:ce:b4:e0:8a:
         df:1a:92:a9:30:d5:3d:42:48:80:e4:55:f8:70:0a:b4:70:86:
         c3:62:35:c3:b7:bb:2d:5c:9b:b6:3a:d7:3f:a3:e6:3b:a4:e6:
         20:92:67:d8:e9:97:58:02:ea:fa:88:92:09:e9:cd:91:19:89:
         8e:d3:30:7d:f8:b0:e5:bd:2f:2d:4c:84:5d:3e:e4:9f:c9:d3:
         5a:57:9e:d8:8b:20:3c:54:1b:ad:9a:0c:72:b4:8a:bb:df:6b:
         c2:d2:b6:90:6c:e1:c8:b3:41:6b:a9:e0:81:18:dc:0e:0a:74:
         5b:bd:a8:5d:00:49:09:7a:c3:ca:0e:9f:60:3e:7d:2d:a9:43:
         52:99:a4:84:4b:da:f1:36:29:b7:05:ad:cd:d8:22:65:9a:e4:
         13:e9:3a:e4:a5:17:d1:d3:d4:4b:fb:cc:5d:11:ec:01:57:fd:
         9d:d8:39:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:12 2025 by rpki-client on console.sobornost.net