Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/3139312e33362e3230382e302f32312d3234203d3e20323632363433.roa
File:                     3139312e33362e3230382e302f32312d3234203d3e20323632363433.roa (raw, json)
Hash identifier:          dtLW+BKAXyh0XbtqxhyJwFT61qqx+1ewdQmC8tdwffY=
Subject key identifier:   9E:D1:5C:7B:94:D9:B6:24:3B:F2:E4:34:D5:3C:C8:BA:06:4D:CD:1C
Certificate issuer:       /CN=875E06F9E7034F27BB17B17F859BD523F124DED9
Certificate serial:       5FF26173E50F96E71D7DC01DA666391ADEBB631B
Authority key identifier: 87:5E:06:F9:E7:03:4F:27:BB:17:B1:7F:85:9B:D5:23:F1:24:DE:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/3139312e33362e3230382e302f32312d3234203d3e20323632363433.roa
Signing time:             Tue 15 Apr 2025 18:06:29 +0000
ROA not before:           Tue 15 Apr 2025 18:01:29 +0000
ROA not after:            Tue 14 Apr 2026 18:06:29 +0000
asID:                     262643
IP address blocks:        191.36.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.crl
                          rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f2:61:73:e5:0f:96:e7:1d:7d:c0:1d:a6:66:39:1a:de:bb:63:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875E06F9E7034F27BB17B17F859BD523F124DED9
        Validity
            Not Before: Apr 15 18:01:29 2025 GMT
            Not After : Apr 14 18:06:29 2026 GMT
        Subject: CN=9ED15C7B94D9B6243BF2E434D53CC8BA064DCD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:88:f0:c9:d7:85:b7:40:bd:8a:44:dd:6b:
                    92:24:e9:3c:75:ca:d2:6d:d7:85:24:54:d2:bf:18:
                    96:2b:c8:61:1a:05:26:ad:2d:80:cb:a1:7d:7a:e8:
                    10:09:7c:b9:1d:01:bc:6a:46:cb:c2:3c:f7:c6:37:
                    af:cd:3b:f7:cc:cf:eb:d8:98:45:dc:8d:29:cc:3b:
                    45:ba:a3:5b:83:f1:0b:3a:84:7f:83:ae:85:c6:bc:
                    bc:78:bd:7f:f1:8e:5d:44:d1:d5:76:2d:e6:b1:38:
                    a6:76:60:d2:24:99:e5:27:75:02:fe:d7:b9:69:0c:
                    67:b3:e7:55:75:43:7d:f2:94:d1:14:e8:87:5a:6d:
                    f2:9d:38:e3:10:e8:4d:e2:49:cd:0e:55:33:0d:03:
                    c5:26:56:d6:d5:b0:0c:71:53:de:4b:09:65:fc:c6:
                    ae:fa:94:53:d5:5d:b8:5e:44:26:79:6b:3e:eb:a6:
                    ec:b2:bd:59:f1:b6:5e:f7:cf:c1:ff:58:43:c1:ec:
                    0e:8a:27:36:6a:62:73:56:a5:64:e0:ad:56:f1:79:
                    03:3d:55:48:e9:74:91:b0:9b:d0:e7:72:5d:97:ac:
                    5e:55:8b:be:0e:18:e2:ec:00:33:ab:00:54:2b:fe:
                    f6:2b:6d:13:3a:39:f2:4f:93:e9:3e:de:dd:f7:ea:
                    96:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D1:5C:7B:94:D9:B6:24:3B:F2:E4:34:D5:3C:C8:BA:06:4D:CD:1C
            X509v3 Authority Key Identifier:
                keyid:87:5E:06:F9:E7:03:4F:27:BB:17:B1:7F:85:9B:D5:23:F1:24:DE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/3139312e33362e3230382e302f32312d3234203d3e20323632363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:42:d9:16:d7:6d:68:7d:b9:6c:cc:d4:6c:d4:24:01:ad:88:
         90:0f:f2:a5:4a:fd:ac:e9:1d:57:6f:e4:b6:e3:a2:9c:32:6d:
         e5:16:6c:05:4f:e1:77:b8:f8:9a:f7:c4:7b:5a:01:e3:e0:83:
         4a:7c:aa:20:e9:41:74:f0:43:3c:3c:a4:df:fa:15:15:62:bd:
         c4:73:34:39:f7:1b:de:76:f5:9e:b9:6d:15:7d:93:83:01:d8:
         0a:9c:64:9c:e2:3d:bc:6c:15:7e:e3:90:07:dc:15:cf:da:58:
         22:e4:31:18:28:19:16:0c:6b:02:99:29:bc:ed:04:11:c6:0b:
         25:26:55:c9:77:e9:5b:a9:69:e5:83:f3:21:a9:e3:08:2b:32:
         8d:75:df:c4:cb:31:d9:7f:4a:d0:d5:a6:61:c1:62:7f:4e:f0:
         ca:c3:dd:97:8a:86:76:4a:88:91:b6:94:9f:18:0e:36:d4:70:
         5f:66:86:5c:37:66:04:68:b3:b1:f6:dc:87:1d:a0:94:cb:30:
         7c:46:22:80:09:ad:2c:bb:37:cb:25:aa:6b:7e:df:b7:ff:68:
         1d:e2:87:47:e6:8f:6b:a3:8c:ff:67:83:c2:f9:e9:92:f4:50:
         b1:29:80:4d:78:d8:1f:86:88:2b:bd:25:b8:74:7d:28:ee:93:
         83:bd:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:08 2025 by rpki-client on console.sobornost.net