Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa
File:                     3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa (raw, json)
Hash identifier:          JTTPaYCI0S/ygggm4s1zOtipFVJ1rH5O4FYmTd34B+M=
Subject key identifier:   61:6C:6F:82:9A:15:22:6B:75:9F:75:4D:76:09:D4:DF:6C:50:03:01
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       58D9B343493A84873DA463EF3D14638772BB9D15
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:01 +0000
ROA not before:           Tue 22 Apr 2025 20:55:01 +0000
ROA not after:            Tue 21 Apr 2026 21:00:01 +0000
asID:                     262687
IP address blocks:        187.87.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d9:b3:43:49:3a:84:87:3d:a4:63:ef:3d:14:63:87:72:bb:9d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:01 2025 GMT
            Not After : Apr 21 21:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:52:6d:60:a6:48:8a:c8:13:2f:e4:e1:19:
                    73:df:bf:14:3a:6e:10:72:c6:d3:c1:b7:71:ae:f8:
                    72:b9:65:21:30:e7:ae:6e:1e:6a:f3:ce:45:81:91:
                    38:3f:b9:20:7a:67:34:fc:ad:ff:82:11:2f:95:40:
                    87:15:59:56:49:f2:c6:39:dc:3a:c9:10:f0:77:b6:
                    6d:47:52:f5:11:c7:0c:2c:9d:15:dd:54:c2:39:cd:
                    06:65:f5:32:3e:05:a8:43:9f:e4:ca:6f:fa:c2:07:
                    3c:87:2e:10:79:ff:4b:60:94:63:32:8e:8e:96:65:
                    ca:cf:c9:12:df:83:30:4e:7e:f2:cd:df:f1:57:0b:
                    e4:cf:a7:8e:9e:55:c2:0a:c1:ef:60:0d:87:54:c9:
                    d3:4c:56:67:ea:2a:cc:14:53:73:59:43:6e:ec:73:
                    0d:da:6b:2d:88:b4:1f:d0:10:bf:6d:2d:09:a9:b1:
                    a2:6c:1e:e1:f5:a1:d2:b8:0c:5e:cf:b2:5d:69:2d:
                    5f:ea:8e:4b:33:b2:0c:1a:47:7a:86:63:af:ad:9a:
                    cc:8a:33:22:2d:88:98:c6:61:6e:7e:ad:25:d3:1e:
                    fc:b0:f8:7f:5e:be:0b:70:98:78:aa:db:f6:44:32:
                    29:23:dc:05:61:4d:a9:f4:2e:57:a3:fe:db:18:75:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6C:6F:82:9A:15:22:6B:75:9F:75:4D:76:09:D4:DF:6C:50:03:01
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:10:23:20:9a:da:c5:14:77:99:cb:06:9c:83:d1:a5:c0:cb:
         79:b6:cd:d5:a2:49:81:fc:43:a8:c3:35:ed:1b:c8:7f:78:b8:
         5d:94:ae:3d:5d:eb:59:9f:9c:7b:73:76:51:14:42:53:13:30:
         25:02:31:70:f9:de:65:bd:da:af:3e:1a:d8:28:de:11:1b:0e:
         48:d1:87:71:17:0f:8a:3c:91:38:e6:f9:5a:fd:15:f6:8a:e7:
         f3:7a:ab:ff:66:06:ea:25:3a:07:6a:1b:1a:f9:12:84:d2:eb:
         50:44:eb:83:26:92:5c:76:6b:c1:19:f0:bf:da:5d:32:43:5f:
         a9:88:8e:8c:ad:2e:af:79:4d:86:36:10:bb:6b:67:8c:88:ce:
         88:ae:98:38:31:7f:de:a0:43:26:29:fb:bd:d3:0d:a9:a4:07:
         42:c1:ee:1e:5a:ba:0a:ad:78:68:fc:d2:7a:57:11:53:1b:e5:
         48:e1:83:4d:70:1d:e0:ae:e5:1c:a4:e0:a1:bd:30:31:7a:3d:
         9a:04:b6:05:df:e2:00:b4:c5:6d:22:74:8f:ff:a0:7f:13:0f:
         9d:f8:cd:1a:e9:ab:49:19:eb:e0:30:f6:01:f1:f8:b8:1e:2f:
         a2:3e:34:22:f7:ae:93:bf:7f:32:b5:d0:59:76:f8:34:c1:7e:
         b6:5f:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:26 2025 by rpki-client on console.sobornost.net