Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa
File:                     3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          3lrRZ88ALQ/YEae09+IqsEdagITWdjR3q3G5UsvfNxw=
Subject key identifier:   BC:99:65:D8:FB:EB:E7:C0:4D:0A:4A:4C:92:5E:3B:A8:DD:8F:B5:CF
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       639FD56D17118AE7588D58AF3A8530117B22F221
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa
Signing time:             Wed 16 Apr 2025 13:55:55 +0000
ROA not before:           Wed 16 Apr 2025 13:50:55 +0000
ROA not after:            Wed 15 Apr 2026 13:55:55 +0000
asID:                     262316
IP address blocks:        138.117.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 17:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9f:d5:6d:17:11:8a:e7:58:8d:58:af:3a:85:30:11:7b:22:f2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: Apr 16 13:50:55 2025 GMT
            Not After : Apr 15 13:55:55 2026 GMT
        Subject: CN=BC9965D8FBEBE7C04D0A4A4C925E3BA8DD8FB5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:24:2e:97:e0:26:4f:6e:b8:e3:b2:9b:cb:
                    f3:15:2f:de:21:33:bc:09:52:13:bb:54:57:93:11:
                    18:dc:64:1b:90:23:d8:bc:0e:a9:72:8a:c6:d4:4b:
                    a4:76:88:4d:af:1c:fb:bc:12:3a:79:f4:f2:0f:b9:
                    05:65:9b:d9:6b:e8:b4:20:54:29:84:8b:db:6d:28:
                    e8:2c:c1:99:63:34:ea:ad:c6:00:a3:03:24:c0:be:
                    50:39:e4:cd:c9:8c:fb:8e:c1:98:21:4d:99:4c:bc:
                    23:71:14:ab:8a:ba:03:bd:e7:4c:67:04:5c:18:5c:
                    a9:5b:4e:f3:9d:12:05:d0:9e:db:54:98:6a:fc:62:
                    8b:0a:22:ca:f7:b8:f0:92:54:c5:d0:93:ea:50:05:
                    80:88:93:5c:40:ce:a9:df:b1:fa:ba:24:66:a2:11:
                    02:3d:91:40:a7:41:e3:e4:f5:4a:a7:03:d8:72:e3:
                    32:40:56:54:e0:d6:ca:50:09:77:17:85:73:32:2a:
                    8d:76:a1:ca:01:f5:01:f4:79:4e:5c:96:7c:2a:17:
                    56:f7:c2:63:15:c2:aa:e3:69:58:4c:53:c8:08:02:
                    ad:de:75:32:1c:c2:eb:ff:5b:18:2e:eb:32:31:f3:
                    1a:ec:c7:e8:4c:8f:e3:10:9b:4c:d6:ec:76:ef:8e:
                    c1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:99:65:D8:FB:EB:E7:C0:4D:0A:4A:4C:92:5E:3B:A8:DD:8F:B5:CF
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:31:e0:c6:c6:6f:9d:3d:c1:db:71:7e:9c:78:90:d6:1f:
         1a:89:2f:18:76:42:41:eb:af:b4:84:9d:0f:2b:e0:e2:19:f2:
         6c:ec:99:71:1d:c2:f6:6b:4e:4e:4a:76:c3:80:ae:1a:3c:99:
         e1:2d:14:c5:cc:53:2f:76:2c:65:71:42:4c:09:4a:13:3f:35:
         ae:82:c6:cd:2e:13:c8:d2:80:df:d6:7e:a2:2f:b2:c8:1e:d1:
         d5:49:35:b0:cd:01:be:62:cc:b1:4c:0d:b4:e8:41:14:57:1d:
         d5:01:7d:94:99:be:3e:ab:13:df:9c:eb:4e:07:4a:cc:57:b1:
         47:5d:63:35:98:c4:10:49:75:3b:32:41:7e:f4:16:6e:2e:dc:
         16:7d:be:27:18:60:01:4c:44:5a:cf:29:86:39:7d:47:72:04:
         70:94:61:68:f6:34:2a:f5:b1:a3:39:64:4c:56:87:b9:e3:e9:
         8f:6d:37:91:4c:6b:b8:67:b3:58:4a:f1:02:f5:9f:de:fd:8a:
         02:6a:90:15:c0:8f:bd:30:5d:12:7b:28:1e:da:b1:a2:a8:35:
         f1:15:22:49:c7:d0:ed:0f:4a:14:af:6c:b6:f8:81:28:f2:b8:
         6f:14:f1:f9:8a:de:3f:55:4b:6f:c8:a5:0d:6c:fd:76:04:ef:
         fa:c8:d2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:13 2025 by rpki-client on console.sobornost.net