Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa
File:                     3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa (raw, json)
Hash identifier:          6x2xsFBD2P/55Dl56701iN6H+pgj3ghYFttkXh11XKQ=
Subject key identifier:   B0:E7:CB:E7:E2:20:52:0B:8B:66:61:EC:94:39:71:C1:6A:E1:3B:DE
Certificate issuer:       /CN=F7C4DEB12240FF8688C32C67939C04C380824025
Certificate serial:       023400B658738391B0C9E64FD517DE490CFBA409
Authority key identifier: F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     263530
IP address blocks:        191.253.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl
                          rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:34:00:b6:58:73:83:91:b0:c9:e6:4f:d5:17:de:49:0c:fb:a4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7C4DEB12240FF8688C32C67939C04C380824025
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject: CN=3082010A0282010100D363D6991424A620138CD5C1053E91AC1EA6427BD8048DF6D03505B640E5AF80C86571FC9348BAB9506FAA849BD3D77AA511BD8F8931C97B2C326D5BFC324D86A0CC0D9C43964FEB93C23D5F1CF1C45A49BABAC1C79BD298CCE7DB7360316A9D11A041F175CF2D564742659F8B8A2FE903E7BC3C93C6B3471041361EDBA2491F848847C0B6745CCE84A003AE5C643D8C8348470F1E43B431FFDABB1878E19AD04DC766CDCE9075D4EDF39FDAEA18EBDD3AA8313B6DFF3FD1969E909C0020FCA23F6BD926DB81957B7AFBE17CD7D6FCC9A827D90DBFA19E72A2C2C15147C6C388880B60B676B978904E24C2D54750BE28D8B6A441826F7168C529C55F1F2245FB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:d6:99:14:24:a6:20:13:8c:d5:c1:05:3e:
                    91:ac:1e:a6:42:7b:d8:04:8d:f6:d0:35:05:b6:40:
                    e5:af:80:c8:65:71:fc:93:48:ba:b9:50:6f:aa:84:
                    9b:d3:d7:7a:a5:11:bd:8f:89:31:c9:7b:2c:32:6d:
                    5b:fc:32:4d:86:a0:cc:0d:9c:43:96:4f:eb:93:c2:
                    3d:5f:1c:f1:c4:5a:49:ba:ba:c1:c7:9b:d2:98:cc:
                    e7:db:73:60:31:6a:9d:11:a0:41:f1:75:cf:2d:56:
                    47:42:65:9f:8b:8a:2f:e9:03:e7:bc:3c:93:c6:b3:
                    47:10:41:36:1e:db:a2:49:1f:84:88:47:c0:b6:74:
                    5c:ce:84:a0:03:ae:5c:64:3d:8c:83:48:47:0f:1e:
                    43:b4:31:ff:da:bb:18:78:e1:9a:d0:4d:c7:66:cd:
                    ce:90:75:d4:ed:f3:9f:da:ea:18:eb:dd:3a:a8:31:
                    3b:6d:ff:3f:d1:96:9e:90:9c:00:20:fc:a2:3f:6b:
                    d9:26:db:81:95:7b:7a:fb:e1:7c:d7:d6:fc:c9:a8:
                    27:d9:0d:bf:a1:9e:72:a2:c2:c1:51:47:c6:c3:88:
                    88:0b:60:b6:76:b9:78:90:4e:24:c2:d5:47:50:be:
                    28:d8:b6:a4:41:82:6f:71:68:c5:29:c5:5f:1f:22:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E7:CB:E7:E2:20:52:0B:8B:66:61:EC:94:39:71:C1:6A:E1:3B:DE
            X509v3 Authority Key Identifier:
                keyid:F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:26:8f:e9:59:03:86:eb:0c:95:32:ba:36:f4:4c:c4:34:b3:
         4e:3c:fb:b1:cc:a8:6a:dc:ce:68:ce:61:a2:c7:40:c2:f1:23:
         da:68:09:59:ee:b3:7c:ef:c1:9e:e9:79:cb:29:58:b6:a3:e7:
         0b:ac:dd:ed:53:2d:9d:52:50:40:16:e8:c1:2a:8b:e4:e5:85:
         12:08:39:74:ac:9d:b9:f4:55:6c:5d:c3:b4:90:7c:47:02:0c:
         6d:8e:3a:b8:d5:0e:df:28:88:8c:45:bf:7f:69:cb:3a:44:36:
         5f:72:69:c8:85:86:59:63:0b:55:3f:de:15:92:33:39:0d:8d:
         7a:81:c8:06:06:24:0c:4d:61:73:cd:2c:eb:5f:33:0e:c3:1e:
         ec:f3:57:6a:35:f9:42:3c:42:a2:90:49:e2:e5:1e:f3:04:ff:
         dd:ca:fb:6b:a0:81:88:2b:54:34:e1:ad:80:ab:e9:70:9b:29:
         66:85:77:2e:12:e2:89:6b:60:bb:26:84:6b:9b:34:97:52:14:
         d4:04:5a:f6:92:0b:48:84:d0:55:6e:2d:fd:52:aa:21:5f:86:
         47:4a:86:91:d5:98:13:91:28:3c:78:db:5d:3e:5d:f1:f1:11:
         a5:67:98:fe:d6:1b:ca:55:fb:1c:a0:3f:d9:62:1a:c9:b0:c1:
         81:e0:77:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:00 2025 by rpki-client on console.sobornost.net