Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230342e302f32342d3234203d3e203532353534.roa
File:                     3138372e38372e3230342e302f32342d3234203d3e203532353534.roa (raw, json)
Hash identifier:          ijqqpWQ9efZTZrMHNth0mGYKH9wzx4utvfkoSeXg1xY=
Subject key identifier:   5C:68:41:B6:C0:C5:B1:66:B6:35:17:9D:4D:26:2D:51:35:31:EA:C5
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       2A0A58108D5B3FB66B94C2CE8F1121CA13C3E354
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230342e302f32342d3234203d3e203532353534.roa
Signing time:             Tue 22 Apr 2025 21:00:03 +0000
ROA not before:           Tue 22 Apr 2025 20:55:03 +0000
ROA not after:            Tue 21 Apr 2026 21:00:03 +0000
asID:                     52554
IP address blocks:        187.87.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0a:58:10:8d:5b:3f:b6:6b:94:c2:ce:8f:11:21:ca:13:c3:e3:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:03 2025 GMT
            Not After : Apr 21 21:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:55:1b:f1:b1:ff:7e:cd:29:2e:b9:3e:2c:
                    68:54:f7:57:ac:81:44:9f:96:8b:81:08:7e:32:ca:
                    52:f0:82:55:cf:a7:11:09:5d:08:f9:d3:7d:de:ef:
                    08:37:98:70:94:34:a9:d5:60:3f:81:b4:4e:da:eb:
                    39:38:f7:e2:49:3e:5d:25:08:b8:b0:28:e8:e1:41:
                    8e:27:4a:5c:69:c0:9d:f6:3a:a9:1a:6b:cb:06:ed:
                    eb:1f:7c:8f:8c:f8:4a:13:f6:f7:55:37:91:f0:66:
                    a0:4a:b3:28:46:c6:ca:c6:d9:58:e8:a2:88:7c:11:
                    ce:66:a0:56:a6:a8:bc:3d:09:8d:36:94:b4:32:dc:
                    d9:61:c7:2c:6b:60:69:5c:32:3f:6d:03:14:c9:9d:
                    8b:68:92:cb:50:70:f0:28:5d:d5:20:c0:e8:9d:5f:
                    a0:e7:42:5d:a7:8b:53:fc:05:ef:91:2f:24:f4:35:
                    8a:66:9e:6a:a4:87:fa:fa:6c:29:28:14:a1:bc:43:
                    49:8e:91:91:0b:2e:0d:55:ed:d3:7a:6b:09:6f:e1:
                    f0:ec:fb:5c:bc:df:5f:4c:36:59:1d:28:c5:f0:fb:
                    93:e5:ae:c5:27:5b:30:a2:03:e3:c1:d8:b5:6e:4e:
                    c5:55:ec:2f:7b:0b:be:21:e3:4c:14:c8:e3:4c:fa:
                    d9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:68:41:B6:C0:C5:B1:66:B6:35:17:9D:4D:26:2D:51:35:31:EA:C5
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230342e302f32342d3234203d3e203532353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:7e:52:b5:b1:73:79:fe:fa:ea:96:3e:33:3e:d2:63:78:39:
         a4:df:21:2e:87:36:be:a7:77:a4:a8:01:7d:6b:da:98:3d:41:
         a2:99:09:14:eb:aa:fa:8f:87:91:a8:4d:63:f0:79:65:31:73:
         6f:84:0b:f2:8a:4b:36:53:f0:cf:4f:87:cf:69:55:87:53:ff:
         79:fa:0c:4e:e9:fd:de:21:19:0a:ec:00:7e:96:d8:45:10:d7:
         e2:23:e9:3b:4d:cf:85:85:e5:ff:7e:47:99:f9:09:9c:16:b5:
         99:61:15:81:a2:b5:98:b7:06:de:1a:2d:31:f8:4f:b9:e3:c3:
         91:65:61:7d:6b:91:d0:86:16:c6:ff:4f:40:79:95:fe:9f:ab:
         af:89:3f:50:26:b5:5a:37:23:65:0c:a9:ff:0d:67:1e:8a:e7:
         8c:35:7e:10:d1:66:19:d1:e5:41:87:e9:88:04:07:3b:aa:e0:
         95:fb:aa:2c:85:9e:3c:f6:fd:dc:9c:79:01:c1:db:a7:80:50:
         7b:b5:32:bd:fd:7f:70:3e:3c:bc:55:31:17:4d:ea:f2:59:22:
         37:a5:f6:10:9a:54:ed:5c:03:10:92:5b:23:74:81:05:d6:47:
         f9:f9:a2:bc:8f:ba:63:34:38:fa:c2:e7:1f:9d:52:6f:55:a1:
         53:30:3c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:06 2025 by rpki-client on console.sobornost.net