Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137332e302f32342d3234203d3e20323633353038.roa
File:                     3139312e3234332e3137332e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier:          XCAkYOJ8mCO8rAcNOs9kne64qsoHpJBd5hRd92N0SvQ=
Subject key identifier:   BD:2F:17:B4:80:69:4B:E6:0C:AE:54:0B:8D:40:6F:6C:CF:3F:0E:7B
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       51BA3A8C8F4866F6EBE4CF022B59AA6715CE36AD
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137332e302f32342d3234203d3e20323633353038.roa
Signing time:             Thu 27 Feb 2025 15:58:45 +0000
ROA not before:           Thu 27 Feb 2025 15:53:45 +0000
ROA not after:            Thu 26 Feb 2026 15:58:45 +0000
asID:                     263508
IP address blocks:        191.243.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ba:3a:8c:8f:48:66:f6:eb:e4:cf:02:2b:59:aa:67:15:ce:36:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Feb 27 15:53:45 2025 GMT
            Not After : Feb 26 15:58:45 2026 GMT
        Subject: CN=BD2F17B480694BE60CAE540B8D406F6CCF3F0E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:1e:09:52:58:bd:2a:49:c0:14:48:5a:d2:
                    50:6e:f8:90:b5:f1:84:00:c6:48:0e:59:17:90:73:
                    9b:98:ca:07:b4:f5:8a:4a:9a:43:8c:18:8b:6e:fe:
                    71:21:1e:92:78:f2:ca:bf:5e:03:4d:12:b7:65:0e:
                    e2:38:27:2e:20:11:10:7a:74:8e:fd:37:fb:84:41:
                    c3:13:2c:be:1a:c1:c0:b8:6c:01:a5:eb:d8:22:f3:
                    f1:d4:ee:b8:87:38:29:e1:12:19:f6:58:3e:51:c0:
                    c1:46:29:47:c5:e8:02:4b:b3:47:81:e7:d5:77:fc:
                    af:e8:cb:f2:dd:20:e7:ee:e1:96:b0:8b:b9:d6:ee:
                    c4:57:5c:a5:f5:f8:45:27:4f:1c:82:e7:53:da:ed:
                    86:73:3c:eb:4f:41:35:43:96:24:d8:fa:b7:65:db:
                    88:b3:59:eb:19:b5:16:4e:85:71:ee:e9:37:f6:39:
                    0e:60:6a:93:a8:e6:c5:ac:b6:da:3c:ae:37:fd:0a:
                    9d:7a:f7:40:dd:33:c4:76:b0:a6:eb:90:47:1a:d7:
                    6a:19:10:f2:55:1e:5b:a3:cc:24:39:0d:f8:84:f2:
                    98:8e:90:00:b3:eb:fe:f9:e0:2e:1b:aa:6e:b5:c6:
                    aa:52:15:d2:e5:0c:29:87:dd:48:f5:1b:94:0c:71:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2F:17:B4:80:69:4B:E6:0C:AE:54:0B:8D:40:6F:6C:CF:3F:0E:7B
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137332e302f32342d3234203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:31:f8:bc:f2:2b:a2:ad:d4:c3:65:0d:a1:13:64:8f:7f:21:
         ca:a5:bf:5c:03:48:81:b8:38:12:5c:45:77:01:e9:62:39:1e:
         4f:09:31:c6:ff:ad:99:15:ae:40:52:a7:fd:4f:8e:b0:5a:3b:
         30:2a:a4:41:fa:89:a5:55:bf:9b:5e:dd:9b:f1:d2:4b:7a:8d:
         9e:56:e6:ac:cb:91:b6:28:b4:4c:13:5e:f5:dc:a4:25:1d:ab:
         2b:60:4f:28:d7:63:9c:d2:d5:aa:46:39:ff:85:1b:a2:bc:c0:
         26:c3:1a:6a:86:94:34:65:17:b6:c9:00:d9:8d:df:a9:99:93:
         68:b9:eb:cc:23:b5:7a:a3:08:b0:e5:b0:da:c1:17:f8:4e:2c:
         a8:da:2a:ad:a0:90:b7:13:f5:6c:e0:e3:4e:ee:9f:9f:8d:37:
         c4:4e:50:3e:11:2f:c7:7d:99:30:04:71:b5:75:7b:71:ae:80:
         e1:81:61:98:9e:ca:00:13:92:d6:61:4b:d9:05:97:6e:82:b8:
         3b:33:6b:25:d4:ee:eb:5a:f1:be:36:83:2f:b3:fe:62:13:a5:
         75:be:f0:7b:03:39:a2:38:3c:23:ee:a4:bd:15:c1:5f:54:53:
         58:19:f2:7b:93:d0:d3:bc:24:80:3f:68:51:1e:23:10:43:b3:
         ee:e4:53:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:56 2025 by rpki-client on console.sobornost.net