Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/3133312e3130302e3230302e302f32322d3234203d3e20323731363833.roa
File:                     3133312e3130302e3230302e302f32322d3234203d3e20323731363833.roa (raw, json)
Hash identifier:          2HMaZKE9T9nWxMM8jcx8U9Ry5bjF4/U4uv0bLpLGCTU=
Subject key identifier:   88:FD:42:4C:EC:78:9F:F6:05:F6:A9:E3:FE:0D:19:62:9B:4E:AF:A9
Certificate issuer:       /CN=D027EC1CE0CA54758020641AF223E272C10893C4
Certificate serial:       4E593F01F273D20919A1DD2860DD1BA4DA5056D8
Authority key identifier: D0:27:EC:1C:E0:CA:54:75:80:20:64:1A:F2:23:E2:72:C1:08:93:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027EC1CE0CA54758020641AF223E272C10893C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/3133312e3130302e3230302e302f32322d3234203d3e20323731363833.roa
Signing time:             Wed 23 Apr 2025 13:14:30 +0000
ROA not before:           Wed 23 Apr 2025 13:09:30 +0000
ROA not after:            Wed 22 Apr 2026 13:14:30 +0000
asID:                     271683
IP address blocks:        131.100.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/D027EC1CE0CA54758020641AF223E272C10893C4.crl
                          rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/D027EC1CE0CA54758020641AF223E272C10893C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027EC1CE0CA54758020641AF223E272C10893C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 12:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:59:3f:01:f2:73:d2:09:19:a1:dd:28:60:dd:1b:a4:da:50:56:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D027EC1CE0CA54758020641AF223E272C10893C4
        Validity
            Not Before: Apr 23 13:09:30 2025 GMT
            Not After : Apr 22 13:14:30 2026 GMT
        Subject: CN=88FD424CEC789FF605F6A9E3FE0D19629B4EAFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:00:cd:b6:32:bb:de:f5:d9:43:31:de:8c:
                    57:07:1c:1e:5d:59:6f:d1:32:07:85:ae:69:bd:1b:
                    2c:83:b8:f0:ce:4a:5b:68:bd:14:15:6f:cf:70:e3:
                    2d:85:38:ca:c9:f4:fa:ff:da:17:4e:a4:db:c5:ce:
                    fe:e4:88:e6:c8:e2:29:2a:fd:04:04:8f:f4:e3:d2:
                    2b:58:80:05:fd:4c:9a:e6:23:4f:3d:b9:74:8a:23:
                    2b:ea:ce:57:ec:46:39:30:bf:d2:58:f8:ae:14:58:
                    c0:30:a1:51:49:27:75:a4:f4:63:2e:a5:84:47:b9:
                    84:b8:9d:3e:c9:49:d4:32:97:46:d5:15:19:cf:3c:
                    13:a0:4e:ae:a7:5e:dd:1a:6f:8d:ea:3a:37:88:c2:
                    cd:e5:c4:20:ea:b8:1a:85:a9:2a:ba:44:17:d0:00:
                    d1:aa:ce:2d:67:13:24:a1:00:8b:30:84:65:ce:a3:
                    0b:f3:f5:5e:ec:6d:05:55:65:d5:e2:fe:4f:26:60:
                    6a:b9:28:f4:5a:58:ed:52:5d:c4:df:76:96:b5:2f:
                    5b:a4:cb:ba:c1:dc:3c:ed:63:fc:e2:dd:b5:9d:01:
                    95:88:18:21:ce:9f:0e:cc:dc:ee:af:75:86:62:e1:
                    48:ec:a5:82:fc:62:05:99:2a:ce:e4:7e:c2:c8:b0:
                    1e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FD:42:4C:EC:78:9F:F6:05:F6:A9:E3:FE:0D:19:62:9B:4E:AF:A9
            X509v3 Authority Key Identifier:
                keyid:D0:27:EC:1C:E0:CA:54:75:80:20:64:1A:F2:23:E2:72:C1:08:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/D027EC1CE0CA54758020641AF223E272C10893C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027EC1CE0CA54758020641AF223E272C10893C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/3133312e3130302e3230302e302f32322d3234203d3e20323731363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:3b:b6:0a:35:f4:5e:a9:3a:46:16:2d:35:8e:31:3c:7c:01:
         3e:07:84:bb:3c:65:64:c6:44:dc:aa:da:08:aa:b7:8e:84:c4:
         cc:14:b9:33:d3:ad:03:f5:21:f4:bc:60:12:90:39:54:9c:eb:
         5b:c7:a0:04:85:d8:38:25:0a:0d:1e:c5:25:64:90:68:5d:1f:
         46:ba:85:5c:2b:a4:f2:52:1b:dd:db:eb:df:47:a1:eb:3d:1e:
         73:15:82:2d:b0:6c:80:c3:82:4c:c9:ea:81:19:af:ce:34:55:
         6e:fd:ef:e8:a6:8a:93:60:a7:4e:f7:24:28:52:48:89:a7:03:
         5f:40:49:d4:69:6c:0c:4b:a2:76:88:63:06:3c:5a:d5:0b:9b:
         e4:60:b0:e3:b2:4c:c8:30:11:7d:3a:99:07:79:28:66:32:66:
         7d:07:f8:4c:23:8f:14:93:8f:5a:55:17:5e:c9:b5:8f:23:df:
         ac:e8:a9:40:7d:d4:95:c3:6a:11:1a:f8:d9:00:ae:02:4f:2d:
         23:98:06:ed:a0:e3:73:6f:5f:2b:47:44:0c:d7:47:6b:b9:93:
         c3:d7:da:98:fd:56:2a:d1:be:b3:14:05:14:4a:b7:a2:51:75:
         0c:38:51:73:64:8b:8b:12:17:e9:17:c4:40:9c:5f:3d:7c:52:
         fc:52:01:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:16 2025 by rpki-client on console.sobornost.net