Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          62NCUJh2eDRimP7wuygeSO90ov1jEZtJS477GOjaeHY=
Subject key identifier:   A6:B3:6E:1E:3A:2D:A0:34:D7:AD:7F:35:29:C4:0C:DE:21:35:6D:57
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       1DC1C53BB3BD8BF4AAA861A9929C3C6FEC3E4ECF
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:01 +0000
ROA not before:           Tue 22 Apr 2025 20:55:01 +0000
ROA not after:            Tue 21 Apr 2026 21:00:01 +0000
asID:                     262687
IP address blocks:        187.87.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c1:c5:3b:b3:bd:8b:f4:aa:a8:61:a9:92:9c:3c:6f:ec:3e:4e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:01 2025 GMT
            Not After : Apr 21 21:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:db:5d:83:bc:bb:32:d5:8a:1f:18:ec:b1:
                    6d:26:a0:e8:d2:40:14:7e:7a:00:6c:36:52:27:5f:
                    65:6d:f5:24:67:87:4c:72:8d:d1:00:77:77:ba:ea:
                    d0:54:82:1c:0e:23:1b:19:65:2b:41:7f:8d:14:f8:
                    a0:3d:f3:b5:35:20:5e:b8:84:93:b8:ba:67:bb:dd:
                    72:1b:a3:ae:de:77:db:b6:39:c2:32:5c:53:64:81:
                    71:40:5b:91:a0:f7:ea:30:e4:d4:69:c5:a8:bd:4c:
                    40:ce:85:78:42:b0:88:7e:b8:89:17:e2:ed:b7:ee:
                    31:6b:3f:2a:50:4d:91:78:76:28:02:bd:ea:9f:59:
                    da:41:c7:6a:4e:98:2b:61:94:2c:d1:7d:23:93:df:
                    ef:66:2c:bd:9b:46:3c:68:a9:7c:82:6f:a9:2c:0a:
                    ec:c2:9f:29:26:8d:42:24:5f:94:da:58:8d:70:d0:
                    b1:2e:8a:97:fa:09:75:8c:21:37:74:c7:49:20:58:
                    ec:94:38:94:9f:b6:27:0b:09:8c:8a:cb:bd:28:ac:
                    3b:33:5c:de:2b:a0:b2:40:20:7b:d1:47:bb:c1:a2:
                    1b:71:50:f4:95:9f:de:1e:ee:03:b4:df:55:1d:89:
                    ab:ac:49:6b:83:72:f5:4d:56:49:78:a9:5d:4a:76:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B3:6E:1E:3A:2D:A0:34:D7:AD:7F:35:29:C4:0C:DE:21:35:6D:57
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:05:71:31:b5:3c:ff:7c:3e:06:ed:e6:98:cc:15:48:03:30:
         79:64:ce:c7:ae:d9:a8:86:65:0f:c4:ba:fc:b6:a4:24:a0:44:
         7e:ca:e0:bd:d7:f2:6e:3c:ee:10:99:93:65:29:db:d9:cb:8c:
         df:c9:06:9f:c7:22:02:c4:b5:16:ef:09:85:a6:fd:46:a6:2e:
         5b:79:bc:ac:b2:d2:99:f0:f2:c8:06:05:c3:cf:a6:8d:b9:54:
         54:47:de:f6:75:a4:0a:53:d6:05:7b:93:6f:e2:64:92:5d:5c:
         e9:c2:fb:a9:6e:ca:ca:3e:b3:9d:8e:61:4b:9c:4d:70:f1:64:
         36:da:ef:41:f4:01:8a:6a:54:83:44:88:da:03:96:c1:25:d9:
         dd:fb:43:07:82:91:ce:08:4a:4a:c4:f7:11:e8:d7:8b:ac:00:
         de:48:bb:cf:ed:f0:8f:b0:89:fa:97:cd:5d:f2:6c:35:6d:e8:
         3a:82:c6:6e:e3:6c:e2:ce:3f:63:85:63:c9:66:29:04:e3:a1:
         65:b0:c2:77:42:a6:89:f1:93:ae:29:84:26:b7:16:c9:79:83:
         37:27:26:20:cf:39:4a:1c:5b:61:ec:3b:e0:80:d8:dd:98:d9:
         87:3a:3e:1a:2b:4f:b8:d8:26:9e:bd:86:cf:de:74:3e:b4:6a:
         1c:c7:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:26 2025 by rpki-client on console.sobornost.net