Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          pABmqsWQqqImNmGnGW+PNLMePm159gyNLkvqq+1YvI4=
Subject key identifier:   BC:1B:3B:F9:56:21:59:0D:5E:AE:2F:E7:E6:5C:93:C8:26:7D:18:79
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       036475B43AD5280B19B72426A8761A65F8CA0BC0
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:02 +0000
ROA not before:           Tue 22 Apr 2025 20:55:02 +0000
ROA not after:            Tue 21 Apr 2026 21:00:02 +0000
asID:                     262687
IP address blocks:        187.87.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:64:75:b4:3a:d5:28:0b:19:b7:24:26:a8:76:1a:65:f8:ca:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:02 2025 GMT
            Not After : Apr 21 21:00:02 2026 GMT
        Subject: CN=3082010A0282010100E85302D4130410B60BD652F8C509C313F43EFCA6B9EFC58B916FE5482758C354A887174643D7969C0BF57B8A47F319DFE6FE4163D669F37DE0B970DE70875F98788C85F302F354A696C146F4BACDE12188019F916FD27505CFA395560D4623CB76EDEFEBD714458F2F5DE7B62E488B769534921C1B8CB5B1A1F0FCD86DFCC0957EAF01BE678DCF61CBE5FAD95D07ABFE915EB7E1E48BD3219147CE6EC2BCF323A34E093925A5B0E3B60C7D88528BC054F7C0FF29AB3B951DB1FB21E8E27D7640ACDEB041FEB6D174306552C90E47721B391231C452AC719F94C91C0E88FEE4E7A25A8B5BDEECF8EE4284F70308D9AB55A1C6076D308B6536724DBAE207D6C3D10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:53:02:d4:13:04:10:b6:0b:d6:52:f8:c5:09:
                    c3:13:f4:3e:fc:a6:b9:ef:c5:8b:91:6f:e5:48:27:
                    58:c3:54:a8:87:17:46:43:d7:96:9c:0b:f5:7b:8a:
                    47:f3:19:df:e6:fe:41:63:d6:69:f3:7d:e0:b9:70:
                    de:70:87:5f:98:78:8c:85:f3:02:f3:54:a6:96:c1:
                    46:f4:ba:cd:e1:21:88:01:9f:91:6f:d2:75:05:cf:
                    a3:95:56:0d:46:23:cb:76:ed:ef:eb:d7:14:45:8f:
                    2f:5d:e7:b6:2e:48:8b:76:95:34:92:1c:1b:8c:b5:
                    b1:a1:f0:fc:d8:6d:fc:c0:95:7e:af:01:be:67:8d:
                    cf:61:cb:e5:fa:d9:5d:07:ab:fe:91:5e:b7:e1:e4:
                    8b:d3:21:91:47:ce:6e:c2:bc:f3:23:a3:4e:09:39:
                    25:a5:b0:e3:b6:0c:7d:88:52:8b:c0:54:f7:c0:ff:
                    29:ab:3b:95:1d:b1:fb:21:e8:e2:7d:76:40:ac:de:
                    b0:41:fe:b6:d1:74:30:65:52:c9:0e:47:72:1b:39:
                    12:31:c4:52:ac:71:9f:94:c9:1c:0e:88:fe:e4:e7:
                    a2:5a:8b:5b:de:ec:f8:ee:42:84:f7:03:08:d9:ab:
                    55:a1:c6:07:6d:30:8b:65:36:72:4d:ba:e2:07:d6:
                    c3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1B:3B:F9:56:21:59:0D:5E:AE:2F:E7:E6:5C:93:C8:26:7D:18:79
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:6c:3b:04:58:a8:f3:97:1a:54:17:de:73:4f:f9:59:96:de:
         c5:c6:2e:53:29:0e:17:41:7b:9d:ae:9f:0a:9f:52:db:f9:e9:
         03:f8:b4:81:1f:60:82:38:d3:79:77:29:14:c9:ad:93:37:74:
         10:44:e6:a4:94:fe:55:c5:35:e7:37:13:12:a5:a8:a5:3b:69:
         df:f1:4a:c7:66:9d:d3:de:bf:d4:a0:f6:c1:40:77:29:89:29:
         af:8f:44:b8:42:b0:98:71:9f:0f:a6:04:44:3d:ef:a8:37:d1:
         2e:8a:24:8c:30:1b:10:e4:4e:b1:75:59:67:df:b5:c7:04:d0:
         d9:db:e8:df:be:9b:b0:f5:bd:46:79:ff:1b:94:bf:91:9d:f0:
         3f:a5:3c:1b:84:c2:c9:ea:8c:9b:61:bd:4a:ab:be:c2:e7:1e:
         eb:4e:bb:82:bf:b6:9c:65:c4:33:fb:57:67:58:04:e3:53:7b:
         62:d4:98:16:8f:c2:d5:9a:ff:a2:97:41:1c:67:59:1e:f3:a6:
         92:26:bd:f0:73:b0:7a:07:39:15:cf:8d:13:06:e6:53:dd:3d:
         87:8d:25:1b:ac:10:50:a7:be:b4:02:76:74:83:65:43:20:1d:
         ad:00:39:a8:31:a7:4b:67:47:df:49:fc:a5:9c:f7:65:23:b6:
         ff:54:78:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:06 2025 by rpki-client on console.sobornost.net