Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          T1HKqbO+isXFfxs+vivQjMHMOPl7NOtvnZwfh7SpjOA=
Subject key identifier:   94:E5:33:13:BB:7B:B8:0A:CE:38:B4:2B:4C:DF:DB:D5:4E:77:26:95
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       7815CBC45C380E10F91D4189879DAA5E93311919
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:03 +0000
ROA not before:           Tue 22 Apr 2025 20:55:03 +0000
ROA not after:            Tue 21 Apr 2026 21:00:03 +0000
asID:                     262687
IP address blocks:        187.87.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:15:cb:c4:5c:38:0e:10:f9:1d:41:89:87:9d:aa:5e:93:31:19:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:03 2025 GMT
            Not After : Apr 21 21:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:66:81:4f:ef:36:84:c6:d8:dd:5e:ad:83:
                    bb:7e:f9:17:5e:65:1b:27:d7:36:2c:a3:4d:9d:e5:
                    99:57:e9:6e:e0:ba:41:3d:24:a6:39:07:d9:6f:68:
                    5b:f8:97:18:5e:53:d3:62:c5:3b:f0:dc:c8:d2:5a:
                    1a:53:dd:24:99:3c:7d:7f:a2:90:89:1d:d5:d4:03:
                    48:b4:2b:8a:40:cd:24:15:a5:71:fe:16:fd:b5:ac:
                    2a:91:40:0e:b5:35:25:8c:d2:36:be:ff:54:a3:b8:
                    5b:30:c5:d7:e3:af:f1:37:a6:2c:f3:b2:63:1f:9a:
                    de:67:76:f7:a2:8e:46:6b:8e:bc:64:29:fd:4b:e7:
                    52:ba:56:a5:49:25:1f:78:53:4b:29:42:79:da:d7:
                    ad:15:fd:5c:f9:49:e7:c8:65:60:38:94:7b:df:ab:
                    c2:53:75:f3:25:9b:2e:90:c8:36:31:db:fe:85:72:
                    d9:70:42:2d:6a:49:59:0f:b8:3c:95:7f:93:17:ea:
                    75:b8:d1:d6:65:41:85:b9:e0:48:c9:0b:61:a7:ac:
                    a2:93:f1:84:f5:a5:94:d6:c3:0b:05:d2:2e:e7:96:
                    3b:63:9c:38:e1:7f:9f:24:89:bb:f2:de:c3:ed:1c:
                    b9:b5:b5:a2:b8:f7:b9:45:3a:6a:3d:80:bd:3c:42:
                    68:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E5:33:13:BB:7B:B8:0A:CE:38:B4:2B:4C:DF:DB:D5:4E:77:26:95
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:a6:e8:a1:91:48:bd:62:76:2a:48:07:a8:0c:9f:78:9b:47:
         b0:4b:ab:02:40:f1:25:1a:39:36:7b:e1:2d:ce:21:6a:f6:56:
         da:26:a7:5f:55:6b:7d:46:5e:40:ca:67:b6:10:74:1a:49:f6:
         22:78:f8:5a:13:0c:e7:5a:be:8d:fe:fe:e7:4b:ae:35:9f:69:
         9d:d5:46:01:5c:7f:05:61:08:b6:8d:3b:0c:5b:ef:70:d8:56:
         f7:e0:91:44:e3:79:03:32:89:27:9b:b8:aa:25:7e:a6:fa:40:
         b0:7b:23:b5:ce:e1:d9:c8:1e:a6:3d:c6:ad:7b:50:ee:5c:72:
         63:f6:b1:e6:42:eb:54:67:36:b6:77:8f:8e:0f:e7:86:99:8c:
         a6:64:95:3f:ee:e7:71:3c:07:52:d7:d8:ca:99:99:15:b5:2d:
         90:75:a4:ff:16:8c:0f:df:20:4d:1a:7d:56:04:06:94:e9:99:
         e0:c4:fd:47:89:1e:59:d1:4a:f9:9e:db:a6:da:9d:1d:5e:0f:
         ea:2a:e3:2d:35:46:39:b1:dc:bb:07:e6:fc:5a:84:22:55:e2:
         2d:89:f9:f0:9c:bc:b9:0c:97:93:94:98:ec:41:69:7f:46:cd:
         b2:9e:da:77:d4:16:a7:ef:30:2e:07:84:08:b1:c6:09:88:d0:
         35:cc:35:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:06 2025 by rpki-client on console.sobornost.net