Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          qW1It5Cuf/hNn5a8AqLugv1ZVQJ050hVf31xho1X5Ng=
Subject key identifier:   30:EF:35:71:05:6D:B2:7A:77:49:08:ED:70:79:13:5D:23:AA:EC:32
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       18CB1C299552F560F696295884C957B389C54870
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:03 +0000
ROA not before:           Tue 22 Apr 2025 20:55:03 +0000
ROA not after:            Tue 21 Apr 2026 21:00:03 +0000
asID:                     262687
IP address blocks:        187.87.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cb:1c:29:95:52:f5:60:f6:96:29:58:84:c9:57:b3:89:c5:48:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:03 2025 GMT
            Not After : Apr 21 21:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:ec:c4:ea:9c:ec:17:c4:79:53:90:6f:7d:
                    27:30:83:5b:36:d4:d6:d0:37:0a:17:4f:3d:92:d1:
                    45:de:9b:1d:64:96:e0:ba:52:22:7f:e9:dd:85:46:
                    b5:eb:91:99:71:3c:b0:04:ce:2f:1d:9f:f6:39:4f:
                    b3:7b:6d:2e:ae:98:4f:ca:56:f3:94:57:a1:ed:05:
                    82:b7:1f:28:33:c3:c8:9d:4d:ec:80:75:a0:c9:8a:
                    2d:e7:46:5d:fd:30:35:26:cb:5f:a2:a5:55:23:fa:
                    dd:d6:86:5d:ae:5f:81:e0:3f:85:59:74:61:88:69:
                    51:32:d0:f0:b4:86:54:00:72:e3:e5:47:af:0c:28:
                    55:3e:19:61:71:cd:bb:ef:68:2a:92:fe:b2:3b:c2:
                    30:de:50:74:ff:26:90:81:d5:62:d4:dd:9a:26:96:
                    cb:30:49:ff:07:3f:d3:a6:08:20:b9:db:66:39:8a:
                    73:d6:ab:e4:c0:9a:e9:f7:3e:6e:66:24:71:df:87:
                    d7:2b:e1:44:d6:58:3b:ee:2e:0e:c9:3d:ed:1d:b9:
                    2b:ec:a9:89:e8:66:a7:0d:6c:22:b6:0b:48:7d:e3:
                    d1:a4:11:de:a6:52:76:7f:7d:0f:1e:de:2a:cd:4f:
                    a6:e6:b3:c4:97:c9:b6:08:a4:6f:17:53:9e:ce:0a:
                    e9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EF:35:71:05:6D:B2:7A:77:49:08:ED:70:79:13:5D:23:AA:EC:32
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f0:88:5d:8b:d4:7d:6c:ad:92:8e:34:14:f8:65:0c:2a:b1:
         3a:a8:8c:fd:7a:68:f6:c1:5e:8f:90:8d:13:2f:0d:c6:70:ca:
         a3:2e:cc:67:0e:60:53:43:99:6e:36:f7:8a:9a:27:cc:fe:32:
         99:73:2d:03:e6:c0:08:70:94:fd:e1:0d:a4:1f:57:b2:59:56:
         f6:08:5a:fa:12:f2:11:4e:1d:09:ed:6f:3d:b8:55:fe:d8:e7:
         1d:7f:46:57:04:05:ea:85:83:d1:b1:d1:02:93:39:0d:59:4f:
         2f:1d:71:1c:a1:da:94:80:cc:b3:44:07:06:bb:6b:90:8f:94:
         1a:07:5a:78:da:83:53:f3:82:45:c1:11:f4:90:74:03:41:65:
         5f:b1:98:6c:25:cf:8f:f8:95:51:0c:ef:49:ad:a0:a1:58:87:
         f2:04:61:a9:8d:b9:b4:c6:4e:66:31:6f:56:f4:e4:98:61:89:
         6c:d3:82:36:b7:44:d4:f1:4f:bb:61:8b:2b:a1:68:75:68:a3:
         7b:31:20:d3:94:dc:ac:02:24:0e:e1:ce:1e:73:ca:f1:25:27:
         08:9b:70:8d:8b:25:2e:7e:9a:0b:70:61:57:80:93:11:81:2f:
         8d:c2:94:90:38:9e:74:23:9e:14:60:52:fb:84:d0:28:84:41:
         85:07:df:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:06 2025 by rpki-client on console.sobornost.net