Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          H5LTZ0lfVIlw183mioHWLz2hOPDlEVNSjyGnaVskBxQ=
Subject key identifier:   6C:F5:DF:50:22:EC:A6:B2:38:39:3D:C8:FE:56:75:01:4D:FA:80:90
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       66191968021FB4994AE1D389D86363E1B1159935
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:00 +0000
ROA not before:           Tue 22 Apr 2025 20:55:00 +0000
ROA not after:            Tue 21 Apr 2026 21:00:00 +0000
asID:                     262687
IP address blocks:        187.87.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:19:19:68:02:1f:b4:99:4a:e1:d3:89:d8:63:63:e1:b1:15:99:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:00 2025 GMT
            Not After : Apr 21 21:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:c6:f6:af:f0:ec:8c:44:5b:d0:d6:75:0e:
                    14:74:6e:55:33:21:e2:28:87:fd:f3:09:19:f3:3e:
                    89:af:a3:fc:a2:1c:42:b3:d4:4e:2f:84:2a:0d:f3:
                    eb:3f:65:6f:ad:73:ba:b2:44:48:69:ce:a1:35:a5:
                    94:54:39:26:5f:36:d4:8f:12:3a:50:ba:9c:48:60:
                    66:1c:c0:4c:26:cb:ad:90:09:1d:4c:f0:38:f3:cb:
                    45:78:5a:b4:42:00:92:5f:df:9b:c2:e0:f3:98:f9:
                    4f:08:ba:99:f9:88:f4:6c:ef:c4:87:49:44:f7:67:
                    52:53:62:57:54:90:c6:98:c9:95:d3:46:1a:73:39:
                    3e:74:27:07:39:26:a5:c7:38:a1:6c:8e:c4:bc:5c:
                    6e:21:22:9c:08:61:c2:08:eb:f5:7b:8c:35:a1:94:
                    02:b0:e3:fe:ea:71:5b:3d:6e:80:09:d2:7e:96:06:
                    8c:2d:9f:8d:85:7e:ec:33:c5:8d:7b:43:62:44:8c:
                    ea:7c:b9:9c:a4:d9:3e:e8:59:90:bb:01:89:49:7d:
                    a1:b9:7e:f8:2a:66:38:44:00:e5:a1:74:96:22:3e:
                    09:12:2a:a4:3f:58:87:de:21:4a:67:a1:38:19:19:
                    76:8f:17:6b:5f:f1:af:13:b3:82:23:7a:28:47:14:
                    57:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F5:DF:50:22:EC:A6:B2:38:39:3D:C8:FE:56:75:01:4D:FA:80:90
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:12:6f:07:43:02:e3:45:9c:49:d7:cb:5f:34:1a:0b:ce:8e:
         62:28:5d:08:0b:75:53:ef:b0:19:93:00:c5:31:1e:b9:38:b8:
         37:6e:ee:d6:c5:dd:a9:97:71:40:31:3d:54:76:99:6b:61:25:
         28:55:2e:b9:cd:e8:3a:ce:67:eb:29:35:61:11:a5:f6:d9:ad:
         13:ad:ec:ca:d5:4f:18:78:d6:fc:04:31:db:b8:c1:9c:c1:f3:
         c8:ac:3f:9f:08:40:0c:a2:be:8f:d2:d5:98:ec:0e:83:6f:1d:
         28:b2:10:4a:d6:80:8b:54:25:ef:ba:e6:ed:4c:dd:da:90:98:
         a6:a4:62:3f:e6:a9:65:3d:48:7b:e1:50:31:de:68:80:7c:c3:
         31:63:2b:d1:81:c9:eb:b7:6c:a1:ec:4f:18:c5:a9:d8:31:fd:
         99:ae:fa:e8:27:e8:cd:c0:01:18:0f:17:e6:aa:9f:75:ff:f5:
         25:1d:a7:40:7a:ba:4f:a1:ef:ad:ec:1f:13:72:16:c4:be:e0:
         81:db:df:1f:c8:7b:17:a5:13:05:55:89:3d:c3:7e:d6:3f:e1:
         a4:b9:26:8e:20:c1:90:a0:2a:cf:66:b9:1b:d2:1b:d0:c7:77:
         41:05:75:38:8b:7f:17:0f:a4:e8:48:1b:22:6d:7f:28:55:75:
         c0:4d:bc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:06 2025 by rpki-client on console.sobornost.net