Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136312e302f32342d3234203d3e20323633353038.roa
File:                     3139312e3234332e3136312e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier:          qBfXOg+r/YQnFmRCN1vXOwdzzU1lIYgU+b9DCN2rbtU=
Subject key identifier:   E5:BD:C6:61:C5:E7:2D:FD:4E:01:23:22:4D:49:41:56:FD:D6:30:A5
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       79FAD40E7CD9400D51D14759BB828DB2DCE982F0
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136312e302f32342d3234203d3e20323633353038.roa
Signing time:             Thu 27 Feb 2025 15:57:57 +0000
ROA not before:           Thu 27 Feb 2025 15:52:57 +0000
ROA not after:            Thu 26 Feb 2026 15:57:57 +0000
asID:                     263508
IP address blocks:        191.243.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fa:d4:0e:7c:d9:40:0d:51:d1:47:59:bb:82:8d:b2:dc:e9:82:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Feb 27 15:52:57 2025 GMT
            Not After : Feb 26 15:57:57 2026 GMT
        Subject: CN=E5BDC661C5E72DFD4E0123224D494156FDD630A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:b4:25:98:69:6f:6f:06:d6:36:81:d9:53:
                    62:5f:c7:2e:83:1d:4f:6d:c1:8c:32:a0:ff:9e:27:
                    ed:b3:68:5e:ad:6c:73:1b:be:0a:e5:33:21:ee:03:
                    75:53:4d:a6:57:1d:91:7f:d3:ce:97:76:23:72:4b:
                    14:6f:0d:29:b1:be:04:45:c2:10:a7:55:09:dd:7f:
                    58:88:5f:32:64:16:82:6f:91:74:3d:e4:41:1d:a3:
                    ee:ac:0d:c3:ec:53:91:b7:ee:3e:af:e9:06:ab:c4:
                    5b:8f:0c:00:85:f6:3e:f5:05:85:4e:38:50:d0:8f:
                    18:42:2d:80:21:ba:fe:17:5e:d7:61:25:d3:c2:0a:
                    27:9d:4b:a5:06:90:77:66:de:54:f6:41:60:2f:1f:
                    2e:a5:7b:cc:4a:c5:4a:e8:12:ae:b2:da:3c:17:be:
                    01:7d:a8:ee:d5:ca:16:47:b7:15:c9:be:2b:4a:74:
                    3d:5d:82:74:e9:80:51:c0:ec:af:d6:f2:0d:76:e5:
                    d9:e7:f6:e4:e7:b9:81:6b:d9:93:21:1e:df:16:6e:
                    88:8f:d2:c5:00:b6:27:9a:c4:a1:0a:74:0a:20:07:
                    cf:30:1a:10:4a:78:4c:18:d5:79:03:38:65:10:5b:
                    fe:66:f9:e1:d3:6c:ba:62:84:9b:33:54:97:38:a2:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BD:C6:61:C5:E7:2D:FD:4E:01:23:22:4D:49:41:56:FD:D6:30:A5
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136312e302f32342d3234203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:28:34:57:65:93:da:f4:16:be:6b:a9:15:c8:c3:06:e7:ab:
         c5:f3:e9:58:4b:e3:a0:c9:6d:c8:11:96:51:00:4c:57:c6:f5:
         8f:a4:6b:5d:9a:34:0a:71:63:4d:cc:cd:19:7d:02:6b:82:8c:
         33:69:33:9f:ec:b2:47:ac:e2:11:0a:a6:99:3d:cb:ce:7c:0e:
         44:41:fc:f5:ad:3a:60:94:47:42:af:9c:59:c6:4e:89:31:ad:
         34:90:c8:ca:ca:76:33:65:73:03:ae:8c:23:e8:a7:aa:64:98:
         94:ce:15:44:da:22:f6:33:b2:0c:f8:5d:c4:a0:0a:68:7b:e8:
         fa:20:b2:ad:d2:9b:03:b1:53:6f:7a:7b:8a:cc:47:4f:93:11:
         d2:07:ab:0c:5e:d2:e2:49:7b:0a:fd:a0:9b:e2:51:4c:3b:46:
         93:cc:52:26:af:29:be:1f:28:d5:66:36:28:78:2c:7d:af:d0:
         90:6b:ed:5d:b6:98:fb:cd:d2:b7:f7:68:65:af:27:c8:cb:ec:
         fd:87:a3:44:fb:e3:a9:2d:06:20:ae:a1:f3:5c:a6:34:66:74:
         68:c4:2a:b2:2e:19:a3:9e:db:ff:56:1a:5a:34:34:ca:29:18:
         d5:07:1c:55:9b:46:14:65:95:44:14:13:2b:d3:3f:d3:c5:e3:
         f6:c8:9a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:56 2025 by rpki-client on console.sobornost.net