Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38392e302f32342d3234203d3e20323731313137.roa
File:                     3137392e34382e38392e302f32342d3234203d3e20323731313137.roa (raw, json)
Hash identifier:          rS3wBi7K+LDEEcim+LAE0kAgwgnsZyZh7BSKiI0QxQY=
Subject key identifier:   C8:0B:24:D8:08:B0:4F:20:0B:CA:D0:CA:AB:50:BD:51:74:10:0A:32
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       2C2EA7F31C972031A0C94281754B29A376525A36
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38392e302f32342d3234203d3e20323731313137.roa
Signing time:             Thu 06 Mar 2025 21:39:18 +0000
ROA not before:           Thu 06 Mar 2025 21:34:18 +0000
ROA not after:            Thu 05 Mar 2026 21:39:18 +0000
asID:                     271117
IP address blocks:        179.48.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2e:a7:f3:1c:97:20:31:a0:c9:42:81:75:4b:29:a3:76:52:5a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Mar  6 21:34:18 2025 GMT
            Not After : Mar  5 21:39:18 2026 GMT
        Subject: CN=C80B24D808B04F200BCAD0CAAB50BD5174100A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:db:96:1d:94:23:f9:f2:9c:e0:6b:98:37:ff:
                    29:b7:a2:a1:ed:e4:71:50:1f:58:de:7a:a4:f5:94:
                    9c:d0:89:f9:b7:78:55:67:0a:72:87:ea:0e:9c:4b:
                    3f:ee:f5:9d:0a:ba:83:04:e7:f9:15:ed:21:3f:04:
                    16:e3:24:b4:d5:9a:ac:60:24:e8:f1:4f:54:65:07:
                    4b:02:2b:39:5b:07:e2:f7:de:54:49:1c:2e:f7:e7:
                    37:e4:e2:40:db:ac:c4:d3:7e:95:53:96:a1:f4:c1:
                    ef:32:2a:64:c4:03:35:e7:21:8a:fb:4c:d4:4e:9b:
                    f7:a8:44:a6:39:cb:4a:bf:f0:f9:36:0a:53:9a:94:
                    fe:27:ed:ea:a0:f6:17:e4:e0:79:8f:47:fe:51:fd:
                    71:26:ce:30:73:47:85:ea:38:5c:8d:0c:ef:e4:01:
                    a5:6d:aa:f3:35:59:ab:22:50:23:6f:36:58:1a:68:
                    b8:55:e5:b2:98:6e:21:22:01:9f:e4:b2:6a:02:38:
                    49:3c:dc:d1:a2:d8:d5:06:9d:df:12:6a:33:eb:8d:
                    c3:9f:15:e1:1a:60:27:1f:fe:4b:ae:4b:aa:55:6a:
                    71:91:3a:b5:ff:74:e8:20:63:58:f1:14:bf:d1:42:
                    5f:da:22:fd:26:46:55:57:6d:04:10:13:a8:c0:f3:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0B:24:D8:08:B0:4F:20:0B:CA:D0:CA:AB:50:BD:51:74:10:0A:32
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38392e302f32342d3234203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:6c:c4:0c:07:4c:bd:10:02:eb:a9:7f:65:0c:00:43:56:1b:
         03:53:1d:a8:ce:d9:bf:83:1c:4c:e1:f5:fb:4d:ed:83:b1:36:
         e1:c4:1f:8f:83:60:7e:fe:ca:f6:d5:f3:e2:90:86:ca:3d:b9:
         20:b0:75:4e:89:7b:0f:15:8b:49:fe:d5:7f:7e:29:14:0f:cf:
         eb:2f:60:21:02:24:bc:6d:61:c2:a5:9a:e8:e4:9e:88:18:25:
         1d:73:0d:6f:44:cc:0c:2f:53:e7:5e:56:87:4a:19:a3:ff:8c:
         11:7d:57:e2:7b:a9:1c:68:02:e8:14:a6:6b:99:1e:21:3f:28:
         9a:8b:30:56:7e:c9:83:88:77:1f:ba:cc:16:46:80:aa:27:5a:
         0d:86:50:e6:b8:ab:37:5b:f1:09:50:d7:fb:d4:39:f2:c9:14:
         35:c2:b5:4c:34:60:f5:19:6a:cc:88:f4:cf:a1:33:46:d3:f0:
         1c:97:73:d7:54:1c:6e:db:eb:9e:54:4a:cd:19:c5:ca:83:29:
         f5:58:0f:31:65:0e:cd:8d:ed:8c:72:a7:aa:68:98:ab:cd:3b:
         e3:31:9b:60:6d:94:76:20:fc:ff:1f:ba:c4:f1:f4:9f:f9:1c:
         19:ba:94:29:3e:27:58:dd:41:0f:8f:a6:95:37:d9:78:c7:ca:
         76:0e:c2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:42 2025 by rpki-client on console.sobornost.net