Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230322e302f32342d3234203d3e203532353534.roa
File:                     3138372e38372e3230322e302f32342d3234203d3e203532353534.roa (raw, json)
Hash identifier:          cQ7XdxTYQ9w+xg/e5nqBU04ZGRbm8eqVqIQhWbJbdYc=
Subject key identifier:   26:EA:AC:7E:0B:BF:82:20:85:38:45:1B:C2:61:D3:76:05:76:C5:0A
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       5C1004D55F548593C2F0FD26A958197D3C4D404C
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230322e302f32342d3234203d3e203532353534.roa
Signing time:             Tue 22 Apr 2025 21:00:03 +0000
ROA not before:           Tue 22 Apr 2025 20:55:03 +0000
ROA not after:            Tue 21 Apr 2026 21:00:03 +0000
asID:                     52554
IP address blocks:        187.87.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:10:04:d5:5f:54:85:93:c2:f0:fd:26:a9:58:19:7d:3c:4d:40:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:03 2025 GMT
            Not After : Apr 21 21:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:dd:5a:3c:a1:ad:9e:9c:38:33:89:19:26:
                    9c:79:9a:0f:58:11:4f:8c:40:86:4a:98:cf:1f:9a:
                    21:86:f0:2a:d3:1b:f0:8a:df:d6:cf:75:1d:45:14:
                    5c:16:e4:5d:e9:b4:6b:eb:f3:93:24:99:80:03:b3:
                    37:88:09:e8:23:0b:8d:9b:89:51:a4:e6:f1:bf:2b:
                    42:f5:d4:de:20:60:2e:f9:d5:6b:9e:73:bd:dc:9e:
                    10:5e:b0:6f:61:2f:de:a6:98:f1:59:f1:08:a4:20:
                    e6:70:88:b6:e9:94:5b:77:c5:a9:b5:b3:02:2e:4f:
                    dc:d4:a7:d0:e7:53:de:69:df:a4:cb:52:96:9d:09:
                    36:80:fb:41:a8:5f:3b:8a:51:b1:a1:3c:0d:4c:c0:
                    10:65:6d:4a:8e:14:a6:9c:bc:30:38:e3:f8:1f:8a:
                    5c:8a:7f:16:da:bb:be:1a:aa:c4:e9:7b:8d:44:c0:
                    e9:fd:ff:63:7f:c7:ad:ad:fb:01:cb:c9:f2:c3:97:
                    42:7a:64:6b:d2:74:55:4b:ba:5c:92:11:49:6d:5a:
                    61:53:96:67:87:77:8f:a1:a2:e1:50:c7:11:05:b9:
                    1f:ae:3d:fb:ea:0b:c3:31:22:0b:9c:f8:e6:16:a0:
                    fd:56:84:50:ba:b6:99:12:5f:0c:67:90:3a:05:56:
                    5a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EA:AC:7E:0B:BF:82:20:85:38:45:1B:C2:61:D3:76:05:76:C5:0A
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230322e302f32342d3234203d3e203532353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:70:a6:8c:62:ff:b5:fc:c0:f2:b1:3a:3d:9c:d2:a9:8a:eb:
         d8:84:71:c3:49:d5:a3:12:b6:01:97:bb:d8:c2:50:6f:b3:de:
         f6:cd:da:17:49:17:37:9a:0d:73:85:25:0d:47:b1:d1:f3:7e:
         5a:6e:ad:eb:88:94:c9:c6:9e:b3:ba:3a:48:3e:36:78:18:98:
         c5:64:16:76:1c:53:85:1c:b3:3a:0c:0c:18:3b:73:96:8c:86:
         f9:80:95:72:6b:23:9e:43:fe:b7:62:09:ff:ce:1e:69:10:2b:
         d6:9d:f0:6b:36:3e:08:77:f8:bb:b3:b0:65:69:29:20:fc:9b:
         da:ff:b4:4e:0c:b4:12:bb:af:a8:69:b7:47:b9:e1:ff:0d:2f:
         e6:88:1c:1a:d5:b6:11:ca:0e:54:9e:e3:f5:c1:57:4f:5c:9d:
         d7:ce:12:84:d5:15:ef:28:38:4c:65:6e:08:20:41:3a:b3:3a:
         e8:b8:d6:9b:8c:cf:ca:19:0b:98:b7:77:ac:23:1b:c7:b7:69:
         b1:c0:e4:8c:89:bc:74:1c:6f:26:12:68:69:ed:3d:d6:6b:d7:
         8b:33:c9:d1:44:a6:fb:8f:a3:e0:e1:cd:c0:a3:d1:a6:83:e2:
         dc:bc:bf:58:a9:0c:a3:e2:32:7e:3f:ee:2c:2e:49:59:6f:8c:
         82:0f:72:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:06 2025 by rpki-client on console.sobornost.net