Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/3133312e3232312e3139322e302f32322d3234203d3e20323634343432.roa
File:                     3133312e3232312e3139322e302f32322d3234203d3e20323634343432.roa (raw, json)
Hash identifier:          UsPk3BO7UGVcVC1VdaMx/5T0Hr2dvA8k3SzUTP0KlFU=
Subject key identifier:   74:34:57:58:0C:B5:FA:7F:30:07:AB:55:96:47:81:F3:33:76:1D:68
Certificate issuer:       /CN=56D283C6C96F8CDFF19FF9397DC907E8E53346E8
Certificate serial:       25910D866E2D35792DD701F1878530293988BA4B
Authority key identifier: 56:D2:83:C6:C9:6F:8C:DF:F1:9F:F9:39:7D:C9:07:E8:E5:33:46:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56D283C6C96F8CDFF19FF9397DC907E8E53346E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/3133312e3232312e3139322e302f32322d3234203d3e20323634343432.roa
Signing time:             Tue 25 Feb 2025 20:08:51 +0000
ROA not before:           Tue 25 Feb 2025 20:03:51 +0000
ROA not after:            Tue 24 Feb 2026 20:08:51 +0000
asID:                     264442
IP address blocks:        131.221.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/56D283C6C96F8CDFF19FF9397DC907E8E53346E8.crl
                          rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/56D283C6C96F8CDFF19FF9397DC907E8E53346E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56D283C6C96F8CDFF19FF9397DC907E8E53346E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 23:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:91:0d:86:6e:2d:35:79:2d:d7:01:f1:87:85:30:29:39:88:ba:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D283C6C96F8CDFF19FF9397DC907E8E53346E8
        Validity
            Not Before: Feb 25 20:03:51 2025 GMT
            Not After : Feb 24 20:08:51 2026 GMT
        Subject: CN=743457580CB5FA7F3007AB55964781F333761D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:50:15:3e:34:11:e9:bc:b0:3c:5d:1a:df:
                    ab:24:72:da:f4:47:18:6d:17:63:04:e9:4c:4a:ed:
                    08:2a:d9:bb:d8:ac:43:be:ad:d4:89:5b:a1:7e:95:
                    fd:7a:07:47:51:4f:7c:88:d6:6d:99:99:20:88:ac:
                    24:22:ad:f4:40:7c:5b:66:eb:9a:48:17:f6:66:97:
                    ea:c5:06:d2:f3:5c:c2:06:4e:ec:fc:9c:e5:f4:e7:
                    67:37:de:4c:7c:b7:5b:74:23:3d:8f:0d:8e:b9:0c:
                    c9:29:2d:07:f8:5b:f0:f8:4d:f5:80:ed:96:9b:09:
                    32:4b:6c:9f:76:f9:5c:1f:e3:9c:57:c2:eb:51:20:
                    bf:3e:4f:d5:e4:d4:bd:52:84:47:4e:23:bc:db:f0:
                    03:28:15:ba:30:08:05:3c:85:1f:b3:45:5d:49:a8:
                    cb:88:91:06:20:a5:b4:f2:c8:17:4b:35:9f:6c:e6:
                    c6:b5:0a:ee:f2:d7:30:5a:8c:3b:cf:ee:d9:4c:20:
                    cf:55:da:2b:34:bb:c0:f3:bc:78:b1:2f:35:66:3d:
                    9d:6b:be:7a:25:5f:e7:e5:6f:47:61:40:6c:e0:80:
                    85:20:af:35:11:2e:a6:be:45:85:2e:01:00:d3:26:
                    9f:6e:44:43:57:d7:d7:2f:25:b8:85:af:f9:fe:2e:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:34:57:58:0C:B5:FA:7F:30:07:AB:55:96:47:81:F3:33:76:1D:68
            X509v3 Authority Key Identifier:
                keyid:56:D2:83:C6:C9:6F:8C:DF:F1:9F:F9:39:7D:C9:07:E8:E5:33:46:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/56D283C6C96F8CDFF19FF9397DC907E8E53346E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56D283C6C96F8CDFF19FF9397DC907E8E53346E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/3133312e3232312e3139322e302f32322d3234203d3e20323634343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:87:f5:50:a4:3d:9d:de:ef:af:2e:92:15:8c:28:4f:7a:4a:
         e0:53:cd:76:93:b8:ef:d4:8e:24:e6:53:0f:50:ab:cb:89:5b:
         f7:4d:fb:00:72:eb:8d:38:77:7c:89:e1:3c:ac:3b:ff:12:1d:
         e5:ce:1f:85:d2:c5:db:59:a2:ad:e0:22:04:a2:f1:a0:10:8e:
         06:4f:5c:33:58:af:7a:90:23:b5:48:88:04:71:23:df:c1:f5:
         df:ac:b2:35:9e:e5:46:ff:ec:ee:c4:64:61:c6:9c:53:2b:63:
         18:ef:c5:a5:92:18:db:34:50:c5:da:bb:2e:1d:bb:d9:c3:c8:
         e8:c1:bf:bb:62:58:66:6a:6b:7c:8d:94:40:3a:b8:40:5e:5d:
         09:67:db:c1:1f:65:ca:da:95:db:9f:9d:ed:e8:ae:69:81:64:
         7f:29:b3:a8:d9:69:0b:0c:c8:92:ec:60:c2:e4:b7:50:8b:89:
         0c:ca:22:b4:4b:82:59:88:9a:0c:a7:a5:f1:ff:f9:14:9f:8f:
         e2:d9:5f:44:1c:3c:af:32:b0:23:98:90:e9:e1:53:07:13:f9:
         51:38:52:88:8d:5f:3b:f0:1c:b3:10:31:77:84:4a:09:ff:8c:
         ed:96:7f:d1:e3:f3:03:64:60:29:d1:2a:0d:de:d2:e8:d7:68:
         46:b2:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:10 2025 by rpki-client on console.sobornost.net