Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35342e302f32332d3233203d3e203238333532.roa
File:                     3138372e302e35342e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          4iwb30dEt0D/qkTiF2GNp9foTara4BkqO8jSZAd4y68=
Subject key identifier:   14:27:0E:3E:1F:CF:F9:AB:9D:F5:69:2A:41:E0:8A:F2:F9:0F:31:7B
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       0152E47098B8F6C470812A24AA5F190CA1C4AC7F
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35342e302f32332d3233203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:23 +0000
ROA not before:           Tue 04 Feb 2025 12:01:23 +0000
ROA not after:            Tue 03 Feb 2026 12:06:23 +0000
asID:                     28352
IP address blocks:        187.0.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:52:e4:70:98:b8:f6:c4:70:81:2a:24:aa:5f:19:0c:a1:c4:ac:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:23 2025 GMT
            Not After : Feb  3 12:06:23 2026 GMT
        Subject: CN=14270E3E1FCFF9AB9DF5692A41E08AF2F90F317B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:d2:44:de:37:a4:ed:c9:4b:3e:8a:4b:ad:
                    37:22:27:b5:46:7c:a8:56:a4:3b:7e:a1:8f:72:1c:
                    cf:ae:7d:27:94:77:6b:c8:98:cc:91:0d:dd:ee:00:
                    0d:05:99:e2:97:4f:c6:00:06:8f:2a:61:36:73:6b:
                    b8:27:95:66:6b:56:10:2a:4a:dc:cd:bc:26:1a:a9:
                    6b:9f:5d:64:e0:90:6a:3f:5f:e4:56:a6:31:05:71:
                    6f:4e:6a:43:3a:8c:7c:d7:c6:ea:12:56:0c:c0:fd:
                    25:13:21:03:26:38:5e:99:59:87:23:61:12:e6:9b:
                    18:23:da:45:a4:77:67:ce:87:4e:a4:0c:de:f3:26:
                    83:4e:fb:77:67:6a:0c:ab:73:dd:3c:5c:0e:b9:3e:
                    e4:86:2f:d8:ce:24:ba:0e:83:e1:f4:f9:b0:f0:c4:
                    2c:aa:4e:d0:0e:d0:26:b9:99:8c:7a:29:92:67:72:
                    32:ba:66:69:60:91:e0:e4:a1:68:ca:fe:50:4d:75:
                    3b:89:e4:cc:b2:aa:a8:d5:ab:23:94:b0:56:a7:f1:
                    4e:79:47:49:8b:05:b4:89:57:37:c1:e2:e9:07:d1:
                    20:fb:f4:1d:27:0d:37:d1:38:ff:21:04:a7:cd:d7:
                    16:66:b7:53:48:25:bc:23:84:08:7a:a4:6b:a9:4f:
                    70:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:27:0E:3E:1F:CF:F9:AB:9D:F5:69:2A:41:E0:8A:F2:F9:0F:31:7B
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35342e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:4a:8c:b7:eb:57:70:d4:fa:0d:37:f1:5a:b0:79:2a:28:ff:
         96:41:a0:42:b3:93:76:72:ee:f4:95:93:d7:fc:9c:63:81:4a:
         fe:72:72:93:09:97:4e:da:97:01:29:98:a5:19:37:bd:4b:5c:
         f4:51:ba:62:4a:2f:93:ce:0f:25:68:1e:ab:c0:c3:ab:1b:58:
         0b:68:1d:17:ff:56:44:5b:3f:4f:00:41:34:f1:72:b0:44:8a:
         a4:30:ba:e3:f8:7f:f1:51:88:68:94:12:f0:52:72:3d:9a:2a:
         02:29:d1:76:94:22:49:0c:e2:45:b9:ea:4e:7e:e2:78:ab:65:
         23:50:d7:27:c0:34:e5:45:2a:30:3d:6d:ee:ad:57:4c:39:b3:
         1b:96:38:f2:fd:cb:60:b2:e9:c3:48:72:41:71:c4:77:0d:03:
         af:4f:61:1a:19:0f:c8:47:73:11:17:b7:e5:87:ae:05:6c:ce:
         28:53:8f:47:a9:17:5a:15:24:55:e5:2f:ac:e4:58:fd:d4:6e:
         c1:77:ff:5d:f1:ba:09:54:4c:60:b9:7e:4f:06:75:1a:72:ec:
         d8:5e:7f:a6:19:ff:94:dd:13:82:dd:a1:9e:07:83:d7:4b:53:
         c9:25:9f:3f:fa:db:73:29:6b:2a:00:2e:56:de:a6:20:29:df:
         86:04:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:57 2025 by rpki-client on console.sobornost.net