Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3133312e302e38342e302f32322d3234203d3e20323632343230.roa
File:                     3133312e302e38342e302f32322d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          9BN5FWWIUFbtxnTKlw4X45l/KZC3PGaV3xojmAJ/JEM=
Subject key identifier:   60:C2:CC:64:1A:2F:05:11:4F:E2:04:25:4E:21:4B:33:34:AD:DB:72
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       05AFCD8C6599FC8FC78DC6029EBADF03B8836E2E
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3133312e302e38342e302f32322d3234203d3e20323632343230.roa
Signing time:             Mon 10 Feb 2025 14:31:22 +0000
ROA not before:           Mon 10 Feb 2025 14:26:22 +0000
ROA not after:            Mon 09 Feb 2026 14:31:22 +0000
asID:                     262420
IP address blocks:        131.0.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:af:cd:8c:65:99:fc:8f:c7:8d:c6:02:9e:ba:df:03:b8:83:6e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:26:22 2025 GMT
            Not After : Feb  9 14:31:22 2026 GMT
        Subject: CN=60C2CC641A2F05114FE204254E214B3334ADDB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:df:8a:75:e8:23:f2:16:fc:b4:69:65:7c:
                    76:55:ac:dd:9f:c8:82:23:7e:14:50:9e:75:8b:b5:
                    ac:62:f5:c0:9b:1d:d9:3b:76:e3:1b:ca:63:d4:d6:
                    2e:04:61:80:5e:1c:70:8c:ab:c9:d0:0e:90:dd:cc:
                    c6:bc:93:95:56:90:36:89:45:1d:04:2c:d5:e8:c7:
                    21:23:cc:c7:6e:61:f4:f9:1c:84:5d:a0:2e:06:d1:
                    f2:6c:6e:32:13:4c:8c:5e:89:bf:73:9a:8d:83:81:
                    ed:03:d8:c6:c4:48:57:ba:63:3b:c8:9f:d6:b6:23:
                    48:04:f0:c8:f9:bf:dc:6b:5b:4d:69:3c:58:f8:67:
                    6a:af:2c:f6:4e:af:61:07:19:bb:a6:7f:fb:23:e9:
                    5b:0a:ce:8b:3b:c8:29:0c:fd:78:6b:e5:61:bf:36:
                    4b:f1:00:02:d7:e6:bf:e7:40:87:08:3d:1a:5c:fe:
                    bf:87:dd:b2:91:67:aa:6a:d1:c5:a2:7b:a2:aa:a8:
                    73:6f:7b:10:e3:06:18:55:7a:4e:3e:1d:4f:09:44:
                    a1:40:3c:6d:e9:c7:0d:89:ec:e6:8f:1f:72:f5:a2:
                    56:d2:25:2a:bf:6c:25:9a:52:c6:c6:44:ee:43:b5:
                    bc:11:a7:a9:23:31:0a:e4:75:4a:b0:96:fa:b2:49:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C2:CC:64:1A:2F:05:11:4F:E2:04:25:4E:21:4B:33:34:AD:DB:72
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3133312e302e38342e302f32322d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:42:c8:24:82:dc:af:25:a8:cf:ea:58:fd:ba:96:d5:70:30:
         32:b0:f3:07:8a:a6:e5:7b:a1:ea:a7:26:0d:24:cb:df:8e:86:
         c7:c3:6c:f4:e4:61:71:ba:a5:0e:27:6e:c3:fc:bb:55:dd:fa:
         0c:c7:ff:a2:e6:5f:0b:a1:07:6c:cd:1e:1b:f8:08:0c:18:92:
         b2:4a:20:78:f1:22:7d:64:00:21:70:10:b8:d2:c2:78:b7:ca:
         a3:2a:b5:0f:ef:9e:0e:a8:39:6c:21:f4:c8:61:eb:f7:7d:ce:
         a8:31:f7:d8:ef:e6:ba:d0:ff:ff:e1:cb:1c:0e:a1:1c:c3:df:
         17:d8:83:9d:99:98:43:73:d3:38:7f:6d:06:c0:94:52:f5:ed:
         b6:dc:a6:4d:cb:f5:53:36:45:40:56:35:5d:2b:8c:b1:4c:c4:
         60:0a:50:a8:ec:9e:01:51:b7:a6:63:00:bc:61:ac:f3:6e:80:
         61:f3:bf:37:fe:82:54:9a:19:61:8c:ad:47:ba:27:e0:ee:0a:
         75:4a:df:e6:ad:00:aa:65:eb:ce:a6:bd:e0:3f:bf:dd:af:a3:
         94:9f:dd:9e:9b:a1:fb:fa:76:3c:47:e7:7a:af:3a:1e:59:9e:
         28:14:7e:e7:0e:74:03:8e:3e:02:24:b9:e3:6d:c8:bc:1b:d2:
         ea:7d:d9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:10 2025 by rpki-client on console.sobornost.net