Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136382e302f32342d3234203d3e20323633353038.roa
File:                     3139312e3234332e3136382e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier:          Jm6RPTjMbKjcCpksX9/Vghi4t3v/7Mbli9AOmcwcDKs=
Subject key identifier:   E1:7E:10:B3:36:EE:24:7C:1C:C1:42:CE:D9:3A:3E:4F:95:1F:34:88
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       509D9651A77DE7C7C91D18929A37FB12DAA502CC
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136382e302f32342d3234203d3e20323633353038.roa
Signing time:             Thu 27 Feb 2025 15:58:27 +0000
ROA not before:           Thu 27 Feb 2025 15:53:27 +0000
ROA not after:            Thu 26 Feb 2026 15:58:27 +0000
asID:                     263508
IP address blocks:        191.243.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9d:96:51:a7:7d:e7:c7:c9:1d:18:92:9a:37:fb:12:da:a5:02:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Feb 27 15:53:27 2025 GMT
            Not After : Feb 26 15:58:27 2026 GMT
        Subject: CN=E17E10B336EE247C1CC142CED93A3E4F951F3488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:c6:ff:4a:4f:c1:0c:13:96:ec:81:a3:63:
                    25:c3:b3:1a:4e:f0:bf:fe:4d:7d:df:72:e6:11:4b:
                    48:72:4e:cb:74:2b:73:cd:3f:2b:cc:75:3c:30:7f:
                    50:98:d7:9b:cc:b7:67:34:82:53:46:32:f2:d3:c0:
                    37:a2:0c:06:8c:a4:7d:8b:3d:be:1b:2c:19:4c:df:
                    01:eb:d2:0b:81:77:ae:01:fe:90:c1:1f:66:5f:7d:
                    1e:4b:16:61:2b:38:19:65:b6:3b:c2:3f:0e:68:d4:
                    7f:f4:ed:ad:7e:e1:54:14:c6:d4:b6:74:9c:a6:f9:
                    4b:46:dd:bf:04:eb:a4:0d:b4:0e:7c:8b:a1:37:0c:
                    ca:98:b4:cb:78:1e:28:e6:a1:af:fc:9f:f8:71:c8:
                    30:35:d1:1a:ce:4c:02:45:8b:09:72:62:84:9d:32:
                    41:6a:f9:76:83:84:e5:73:1d:83:9f:06:14:7b:c9:
                    2b:a6:5c:fb:1c:ba:95:08:1a:26:92:13:17:ac:1f:
                    25:9b:a8:d7:b4:5e:65:a5:11:76:eb:2b:34:f1:2e:
                    f6:dc:4f:39:a0:8b:d9:8e:78:4d:80:84:fc:a6:af:
                    3b:e7:d1:aa:07:bd:a3:d4:18:d9:83:1d:a4:90:35:
                    ec:97:dc:46:3f:2c:75:ed:69:4c:55:01:04:04:d1:
                    e7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7E:10:B3:36:EE:24:7C:1C:C1:42:CE:D9:3A:3E:4F:95:1F:34:88
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136382e302f32342d3234203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:0c:eb:c8:fe:69:70:5b:5d:3f:12:56:39:d5:e7:df:d1:bc:
         3f:74:fb:75:1c:bb:3f:5f:b8:45:de:90:c0:12:93:81:8d:97:
         e6:4a:25:f2:3f:f8:ff:b0:18:65:10:03:4a:2c:49:23:19:d7:
         3a:a7:9f:e2:e6:5d:ba:76:17:b2:83:42:13:0b:eb:ab:cb:ab:
         48:60:4c:86:30:45:22:0a:e3:fc:65:36:d6:90:19:b3:3a:17:
         13:e2:cb:c8:0c:14:37:b2:92:d8:27:85:4e:6d:1f:fd:48:10:
         85:47:c1:d3:48:1e:be:a7:04:fb:9b:9c:53:46:64:2d:19:ea:
         fb:e1:01:7b:1c:31:5d:6c:ae:92:36:a0:fc:29:2f:7f:18:89:
         f1:2c:69:cd:12:fe:94:c7:e2:b5:ce:e6:6b:c8:83:f7:d7:6c:
         5f:de:fa:bd:23:cb:be:e7:a7:42:4e:48:31:1a:df:a3:7f:33:
         f5:f3:60:f6:07:d8:d8:6d:b5:71:90:9a:0f:ba:8a:aa:4a:3c:
         c8:d4:26:4a:af:ce:f6:a7:49:5a:2d:03:e9:57:b0:f9:a9:af:
         6e:47:d3:67:82:e8:04:1c:6c:91:ce:e1:d9:9b:c1:5e:c7:42:
         53:85:1f:ca:bd:9c:1a:3d:5d:0f:27:8f:87:34:86:ef:7f:d9:
         40:a8:5a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:56 2025 by rpki-client on console.sobornost.net