Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/3139322e3134312e32362e302f32332d3233203d3e20323637343631.roa
File:                     3139322e3134312e32362e302f32332d3233203d3e20323637343631.roa (raw, json)
Hash identifier:          cxl0gDvfOJYeS8W0mxIoZ1bwetw+e7AZFnXJkuIZvyE=
Subject key identifier:   02:84:01:8D:60:EF:0C:B7:83:A8:07:5C:AD:32:A2:85:54:5A:1F:E0
Certificate issuer:       /CN=185E3F5FBA985F8EF7493AF5948C63D1510157C0
Certificate serial:       33F9924321AC3A81F040EB1EF9BAC41FB0D21817
Authority key identifier: 18:5E:3F:5F:BA:98:5F:8E:F7:49:3A:F5:94:8C:63:D1:51:01:57:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/3139322e3134312e32362e302f32332d3233203d3e20323637343631.roa
Signing time:             Thu 24 Apr 2025 14:05:56 +0000
ROA not before:           Thu 24 Apr 2025 14:00:56 +0000
ROA not after:            Thu 23 Apr 2026 14:05:56 +0000
asID:                     267461
IP address blocks:        192.141.26.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.crl
                          rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f9:92:43:21:ac:3a:81:f0:40:eb:1e:f9:ba:c4:1f:b0:d2:18:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185E3F5FBA985F8EF7493AF5948C63D1510157C0
        Validity
            Not Before: Apr 24 14:00:56 2025 GMT
            Not After : Apr 23 14:05:56 2026 GMT
        Subject: CN=0284018D60EF0CB783A8075CAD32A285545A1FE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:33:f3:e1:1e:23:8e:7a:f7:c5:aa:c3:6f:9c:
                    cc:67:2d:4c:a3:a8:be:cc:af:f0:12:98:f6:6f:8e:
                    9f:ca:e2:1f:34:6d:65:ff:35:08:70:4d:f4:74:38:
                    6c:2f:47:3d:3a:84:d9:33:61:65:31:ba:1d:f7:32:
                    7f:50:11:05:9d:a1:d0:f7:f1:d7:d2:50:59:26:5d:
                    e4:cb:22:01:10:9b:95:c7:c4:53:1e:eb:4d:cc:4e:
                    c0:7f:6b:78:c5:47:bc:09:aa:0c:d0:91:06:3c:ba:
                    69:4f:2f:a0:a8:a8:e6:5c:c8:11:28:ea:b1:9a:ad:
                    8e:04:9e:ca:bf:a0:1f:b8:32:4e:4f:dd:fe:37:e4:
                    46:44:d5:d3:8c:3a:0b:fb:34:6a:49:f4:3d:b4:7f:
                    bf:6f:f0:0c:7d:40:f5:2d:ac:cc:15:57:ac:35:ca:
                    09:13:8f:81:4b:57:b5:bb:bd:77:84:d0:57:eb:8b:
                    ef:0e:9e:00:a1:ae:84:89:57:d0:67:7f:d1:0b:80:
                    b0:ad:02:ad:73:6c:e4:30:8c:68:0b:f0:f5:d3:9d:
                    b9:61:e2:9a:a9:67:51:af:99:e8:f9:55:bc:fd:c9:
                    53:a7:3d:6f:31:d6:ad:8f:4a:3e:41:79:84:c7:c2:
                    a1:7b:86:8e:ea:02:29:cc:ed:24:03:2f:f0:8c:29:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:84:01:8D:60:EF:0C:B7:83:A8:07:5C:AD:32:A2:85:54:5A:1F:E0
            X509v3 Authority Key Identifier:
                keyid:18:5E:3F:5F:BA:98:5F:8E:F7:49:3A:F5:94:8C:63:D1:51:01:57:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/3139322e3134312e32362e302f32332d3233203d3e20323637343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:ce:ab:78:cd:a2:bc:5f:3b:d8:1a:e7:e1:17:8f:66:10:2f:
         10:4a:b5:72:69:ce:92:69:52:74:1f:bd:1c:ab:c2:b0:f3:d6:
         93:bc:98:e7:56:e5:9e:f6:4d:23:98:0f:31:11:22:68:49:26:
         77:5b:9f:59:9d:42:ed:40:46:d2:a1:60:7a:e0:7a:43:08:9e:
         0e:da:5a:51:0a:ca:51:e5:2e:b2:72:6d:0e:f8:40:a9:2f:dc:
         fa:f5:8b:2d:f9:96:ee:64:61:65:cc:16:83:98:1a:b7:9b:5f:
         d2:0c:e3:7b:b2:7b:87:f4:b6:75:57:1f:0c:c2:d4:16:17:23:
         19:dd:30:43:a0:aa:cb:be:da:5c:b6:c3:9c:33:27:44:b8:5e:
         da:b0:90:d2:35:7d:5c:3b:60:97:86:f3:08:ad:59:04:92:67:
         a7:61:a3:b5:33:1f:78:36:69:61:aa:3e:90:f9:88:64:08:25:
         ad:2c:ce:b6:75:3f:45:a8:e2:ee:04:0e:2b:13:37:5f:43:41:
         b6:c6:2f:47:fc:d5:2d:e2:2a:c0:66:52:2d:c9:d2:dd:62:36:
         59:65:64:9b:c1:1c:75:1a:6e:ec:48:4f:71:64:57:34:46:77:
         e9:59:53:03:07:a1:71:83:91:0e:47:2d:11:8c:e3:dc:db:29:
         00:3c:15:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:56 2025 by rpki-client on console.sobornost.net