Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e35312e302f32342d3234203d3e20323635383934.roa
File:                     3133312e3139362e35312e302f32342d3234203d3e20323635383934.roa (raw, json)
Hash identifier:          Od+dmL6w8DDvacBEUaoH/8j2IdIJNHOqxr3Gasp54ng=
Subject key identifier:   8C:1A:10:CF:32:48:FC:D6:AC:A5:3C:F2:A7:8B:6C:55:8E:3E:AC:72
Certificate issuer:       /CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
Certificate serial:       3393193E0492772C0FA98B69155595AEECD75831
Authority key identifier: 4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e35312e302f32342d3234203d3e20323635383934.roa
Signing time:             Tue 22 Apr 2025 20:16:47 +0000
ROA not before:           Tue 22 Apr 2025 20:11:47 +0000
ROA not after:            Tue 21 Apr 2026 20:16:47 +0000
asID:                     265894
IP address blocks:        131.196.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.crl
                          rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:93:19:3e:04:92:77:2c:0f:a9:8b:69:15:55:95:ae:ec:d7:58:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
        Validity
            Not Before: Apr 22 20:11:47 2025 GMT
            Not After : Apr 21 20:16:47 2026 GMT
        Subject: CN=8C1A10CF3248FCD6ACA53CF2A78B6C558E3EAC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:74:0b:1b:4c:c8:ef:e2:8f:8e:9c:8b:83:8d:
                    aa:a0:1f:b1:28:e7:99:78:32:ff:a7:99:3f:1d:ba:
                    03:81:99:16:90:cf:25:2a:df:eb:aa:1c:47:8e:e8:
                    90:ee:3d:c1:aa:24:7d:ec:8a:07:fc:96:5f:47:b7:
                    5e:ed:56:85:96:f8:95:01:12:5e:6d:fd:0e:1e:28:
                    f5:cb:49:55:d4:cb:8e:bf:5a:89:16:d7:cd:70:8a:
                    25:b7:f0:b7:16:69:e7:ab:c7:86:68:e8:65:ec:94:
                    a7:03:5c:53:1b:e2:bb:58:2d:31:94:4c:17:79:ef:
                    b0:aa:07:27:f2:bd:72:c3:fc:6a:17:59:b7:3f:6f:
                    c0:d4:a6:7f:5c:f8:30:5b:d1:4b:31:e8:22:bd:bb:
                    74:d6:d4:69:2d:c8:de:98:13:02:39:36:5c:64:c8:
                    e7:12:6d:c5:37:e1:d2:dc:38:64:4f:e2:e5:7c:8c:
                    bb:ef:14:d6:d4:f1:d4:04:c4:19:85:68:51:05:7e:
                    f9:1f:2a:8d:97:f2:de:ac:18:6e:04:16:c3:65:c6:
                    97:5e:67:89:2e:56:78:7e:b1:c6:d7:f3:43:ec:19:
                    89:5f:b4:c1:13:43:d3:2a:f4:3a:15:d3:c1:b8:4e:
                    1d:4e:f9:c5:0b:fc:4e:f3:ca:5b:15:55:30:ef:3f:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1A:10:CF:32:48:FC:D6:AC:A5:3C:F2:A7:8B:6C:55:8E:3E:AC:72
            X509v3 Authority Key Identifier:
                keyid:4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e35312e302f32342d3234203d3e20323635383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c4:c9:95:31:63:85:43:b8:2c:f3:2f:91:98:7f:3b:1f:18:
         43:60:d9:77:4b:6d:0c:83:b4:2a:1b:ad:0c:5b:60:a9:ee:ca:
         47:1d:a5:2c:83:5c:d1:e6:6f:d7:d9:4b:12:f7:47:f8:b3:04:
         4d:9a:f6:5c:e0:d2:03:a0:b6:03:ac:41:44:49:57:51:3a:a5:
         92:b1:87:28:18:e5:9e:d2:86:75:73:2a:82:8f:c4:eb:f7:25:
         6b:69:e5:e1:2e:9e:a1:5a:14:41:0c:07:e7:93:2c:ab:32:5c:
         29:e0:ab:74:23:11:a6:ac:3d:93:8f:2a:ea:18:d0:f6:83:57:
         b9:61:fb:8d:04:b1:27:fd:37:33:1c:5b:c9:34:5e:33:fa:4c:
         31:53:a2:9f:a2:5d:29:e1:c3:9f:6d:a8:9e:4e:b6:de:05:90:
         00:dc:aa:03:d0:d6:d9:c4:6a:5c:55:3a:0f:8e:de:a4:8f:75:
         69:e9:0e:8d:db:1b:96:57:4d:0a:5e:80:c8:dc:ee:b9:80:77:
         71:80:81:44:fa:96:99:a9:11:aa:d6:ba:1b:40:80:11:31:86:
         41:16:ac:b0:be:90:90:3f:62:07:74:7e:3e:7d:f6:b1:73:43:
         0f:0c:62:ed:e6:83:0b:62:10:04:cd:63:93:e5:9c:02:78:86:
         4f:7b:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:09 2025 by rpki-client on console.sobornost.net