Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139392e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139392e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          QnisdiONFbjxL3NRS12Ja74HZbsJYJ6Dqslaf+B5kH0=
Subject key identifier:   D4:E0:B8:10:E3:84:0E:AA:E5:63:94:16:AE:CF:BF:82:AF:86:15:AC
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       21E838264526C29A527394AF07CFF6055FC2E3D3
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139392e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:02 +0000
ROA not before:           Tue 22 Apr 2025 20:55:02 +0000
ROA not after:            Tue 21 Apr 2026 21:00:02 +0000
asID:                     262687
IP address blocks:        187.87.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e8:38:26:45:26:c2:9a:52:73:94:af:07:cf:f6:05:5f:c2:e3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:02 2025 GMT
            Not After : Apr 21 21:00:02 2026 GMT
        Subject: CN=3082010A0282010100C157ABAB034CB7DB1C4251511513434C84BCABBC48F7DCB2EF1424B80BB2B7BC2F5BCB4FC5F957E7DC871DE67F7187100CF6CBEF913CCFC1354CBDD5CBB418526D42426DEA2D4CFA9BF4BCF8C6FB57A44834313513DEF07ABDDF4D6C2EC0DCD47050701D4930ACEB04CD43CD4FA8AF64DA953AFB5E2CCBCC7EF4F91E0FFC7BB7364B7811B94755BBF26273869E3DC70D4D8636B36B13B6E97E06A41BDFFA3E2B0648E08D47F5507B731A280B6955557EC1385279E8A82183557845718455B5AD6CA6547403E5C7BB7B1D1613FB12A9BCBA0DDB8D8E605CA8C823896460FE6A9938EAD39B5D355EAD312007F64A37EC7BFC6C0755B009B05912FFCAA3E77D3C2D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:ab:ab:03:4c:b7:db:1c:42:51:51:15:13:
                    43:4c:84:bc:ab:bc:48:f7:dc:b2:ef:14:24:b8:0b:
                    b2:b7:bc:2f:5b:cb:4f:c5:f9:57:e7:dc:87:1d:e6:
                    7f:71:87:10:0c:f6:cb:ef:91:3c:cf:c1:35:4c:bd:
                    d5:cb:b4:18:52:6d:42:42:6d:ea:2d:4c:fa:9b:f4:
                    bc:f8:c6:fb:57:a4:48:34:31:35:13:de:f0:7a:bd:
                    df:4d:6c:2e:c0:dc:d4:70:50:70:1d:49:30:ac:eb:
                    04:cd:43:cd:4f:a8:af:64:da:95:3a:fb:5e:2c:cb:
                    cc:7e:f4:f9:1e:0f:fc:7b:b7:36:4b:78:11:b9:47:
                    55:bb:f2:62:73:86:9e:3d:c7:0d:4d:86:36:b3:6b:
                    13:b6:e9:7e:06:a4:1b:df:fa:3e:2b:06:48:e0:8d:
                    47:f5:50:7b:73:1a:28:0b:69:55:55:7e:c1:38:52:
                    79:e8:a8:21:83:55:78:45:71:84:55:b5:ad:6c:a6:
                    54:74:03:e5:c7:bb:7b:1d:16:13:fb:12:a9:bc:ba:
                    0d:db:8d:8e:60:5c:a8:c8:23:89:64:60:fe:6a:99:
                    38:ea:d3:9b:5d:35:5e:ad:31:20:07:f6:4a:37:ec:
                    7b:fc:6c:07:55:b0:09:b0:59:12:ff:ca:a3:e7:7d:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E0:B8:10:E3:84:0E:AA:E5:63:94:16:AE:CF:BF:82:AF:86:15:AC
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139392e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:69:90:51:99:dd:28:2f:1b:cf:bf:4f:8a:9e:af:39:c4:1a:
         d7:8f:71:9d:46:a9:cb:d3:be:6e:e8:d5:57:66:4f:c3:e8:c9:
         47:dd:44:61:c5:72:ab:e3:ff:5b:51:5c:5e:af:31:63:6d:46:
         b1:c2:ec:f1:31:a2:9a:53:44:a3:e4:1c:07:05:27:fd:3d:57:
         ea:88:4f:43:6f:ea:50:d5:9f:1f:da:41:79:69:2e:05:cd:6a:
         c8:54:d3:85:9c:01:76:7a:aa:8b:0d:24:7e:a4:12:bb:a9:60:
         29:b9:e6:07:b4:50:96:07:e4:de:fa:9c:26:89:02:55:69:fa:
         93:c9:20:20:dc:88:cb:67:1e:3b:5d:28:f3:69:78:a6:3a:0a:
         98:b2:2e:67:8a:19:9f:d9:27:2d:1e:24:f9:6a:a1:c1:bb:7b:
         3e:fd:c0:d3:ed:32:e1:df:a7:53:c9:9e:9e:19:08:85:87:56:
         7b:5f:e3:64:9d:3f:5c:a6:6e:4a:d9:d9:ac:7f:f7:a0:6a:39:
         af:e3:14:08:92:4a:a2:29:ba:af:af:22:80:59:a5:ea:42:c4:
         ad:dc:4f:26:15:8c:b3:60:bb:07:a1:f4:96:5b:57:41:4e:8b:
         b0:08:c7:2a:8a:fe:ed:a4:88:4f:c6:1d:92:83:ab:23:ea:d7:
         c0:0d:0f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:06 2025 by rpki-client on console.sobornost.net