Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230362e302f32332d3234203d3e20323632363837.roa
File:                     3138372e38372e3230362e302f32332d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          epH5mm6UxlyzJArzyqrRnb2Ubt4ZB2QZJU+Z8+2EfLY=
Subject key identifier:   B4:62:81:F4:3B:6D:51:5B:8C:86:47:DE:9F:0E:F5:26:DA:27:D4:27
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       08D1C91B5BACC5154E878DDFB5875E1927B95D47
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230362e302f32332d3234203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:01 +0000
ROA not before:           Tue 22 Apr 2025 20:55:01 +0000
ROA not after:            Tue 21 Apr 2026 21:00:01 +0000
asID:                     262687
IP address blocks:        187.87.206.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d1:c9:1b:5b:ac:c5:15:4e:87:8d:df:b5:87:5e:19:27:b9:5d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:01 2025 GMT
            Not After : Apr 21 21:00:01 2026 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:3f:d0:3a:52:0e:e4:af:8b:54:26:8e:c9:
                    57:10:55:0f:da:f3:62:d7:c2:83:a9:5f:12:44:e7:
                    00:6a:17:82:62:70:6a:75:0c:4e:f8:01:d5:54:42:
                    cf:83:71:1a:5f:e4:fb:21:cf:c6:ed:e0:aa:e5:26:
                    7e:52:13:8e:ae:df:3e:0a:5c:8f:b0:cf:2f:3e:4e:
                    6a:e6:8f:13:1f:b3:13:53:f0:35:7b:62:4e:dd:00:
                    ce:eb:07:95:e6:d0:26:ac:92:a9:6f:69:f7:63:0c:
                    ea:82:a4:6f:69:f9:e9:eb:d2:33:1b:fa:55:64:1b:
                    c9:90:eb:1b:bc:00:7a:56:a4:14:4a:d2:3f:da:84:
                    fb:8e:10:c7:d4:72:c4:b0:39:81:3e:82:bf:3e:dd:
                    20:3e:e9:e2:f6:29:ae:c9:db:e1:d6:f0:75:35:ae:
                    25:96:f3:ed:6f:7c:09:04:06:28:b2:ec:7b:f8:0e:
                    6e:02:4f:f4:e9:c3:07:89:8e:1c:a2:41:8c:d9:f6:
                    de:6c:bf:20:da:e5:ae:4d:10:27:e6:62:2b:4e:d8:
                    0d:2d:2f:c7:06:eb:d7:63:42:f4:2a:1e:f8:b4:35:
                    3f:4c:e9:88:dc:18:0a:8f:ec:fe:7d:3c:18:2a:42:
                    5d:10:d0:2d:a5:03:f5:70:f9:89:45:bd:6b:b1:95:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:62:81:F4:3B:6D:51:5B:8C:86:47:DE:9F:0E:F5:26:DA:27:D4:27
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230362e302f32332d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:67:f0:9a:db:ca:82:d1:74:71:c8:3d:5e:c1:9f:34:bd:18:
         82:c5:6f:60:f5:44:51:55:52:66:9c:df:bc:6a:35:dc:65:d1:
         4c:31:9e:a8:d9:48:98:77:83:30:c4:02:50:be:f4:0d:42:f3:
         f0:a8:72:8a:ad:98:5f:3a:7a:aa:65:42:87:cb:d7:4c:64:d5:
         e5:ca:65:c7:51:e7:d2:cd:11:36:e6:75:28:f2:ed:09:cc:17:
         b7:db:cc:8a:2b:be:f0:27:4e:47:9d:ce:ee:cf:20:8e:8f:31:
         6a:b5:e7:d0:9e:a6:39:d0:12:5c:74:42:55:53:95:84:78:24:
         87:0f:6a:ad:8e:fb:25:c3:4f:5c:0d:59:3b:69:1b:b7:91:d9:
         1f:f7:03:c0:f0:2f:7b:a7:99:33:74:0e:87:46:ea:75:29:d0:
         59:56:5e:22:cd:ea:68:c4:09:3e:9e:b3:16:ff:f5:b5:42:64:
         83:f2:fd:57:33:15:6c:bd:a5:dd:48:07:84:ab:69:50:19:7e:
         15:41:0a:87:31:7b:08:f3:8d:de:5f:e3:44:83:5f:0c:3d:7d:
         b8:d0:21:ad:8f:ae:78:c5:37:4b:54:8e:66:20:1b:d3:cc:14:
         72:7c:e7:3c:dd:8f:8c:6d:37:27:b1:82:a0:f5:59:94:84:45:
         d2:c3:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:06 2025 by rpki-client on console.sobornost.net