Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
File:                     3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          UdUJFPdyA3uUYEjjT07w/WmAoU8W0Hrf9y/vSp9sc3w=
Subject key identifier:   69:A1:1B:B7:AB:B1:EA:99:A2:E5:1B:5B:D9:AF:2B:D9:68:88:8C:DF
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       01DA0D30A24416AA295B16EFDC25125FEAE9DBE6
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
Signing time:             Mon 10 Feb 2025 14:30:11 +0000
ROA not before:           Mon 10 Feb 2025 14:25:11 +0000
ROA not after:            Mon 09 Feb 2026 14:30:11 +0000
asID:                     28349
IP address blocks:        189.126.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:da:0d:30:a2:44:16:aa:29:5b:16:ef:dc:25:12:5f:ea:e9:db:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:25:11 2025 GMT
            Not After : Feb  9 14:30:11 2026 GMT
        Subject: CN=69A11BB7ABB1EA99A2E51B5BD9AF2BD968888CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:31:05:84:88:4e:c6:39:8b:47:14:3e:42:
                    75:47:a6:cc:48:70:38:13:0c:41:d6:01:ff:ab:68:
                    e0:51:55:81:5c:e7:06:36:2b:f2:dd:f6:ab:2f:e6:
                    2a:e0:a5:75:0f:ee:45:27:ea:33:cb:2f:47:f5:1f:
                    66:b6:3b:6c:a0:73:6e:31:15:09:9e:cc:a1:e6:e8:
                    5b:20:19:0d:d5:23:66:6c:ab:b4:24:b6:ef:1c:b1:
                    ea:e3:1f:96:f3:7b:7b:e9:17:0f:4a:41:07:ae:dc:
                    f7:9d:8a:ee:42:a8:96:0c:91:b4:1d:ae:9c:c5:e0:
                    74:d4:0f:c3:22:00:a7:16:f0:a0:a2:6c:4a:aa:5a:
                    68:01:ec:68:de:74:05:09:57:b7:8a:1e:f7:78:a1:
                    da:d9:75:d3:de:31:c4:09:4e:34:c6:60:f9:ee:eb:
                    77:66:88:cd:6a:be:33:6b:95:9d:ee:ef:df:db:92:
                    4d:5a:c7:cb:53:17:ca:5c:ac:ef:9b:21:76:28:90:
                    b3:5b:cc:13:30:5b:c2:c5:57:48:fc:ac:c6:9e:8c:
                    75:9e:b6:81:93:62:89:93:d2:c5:18:0e:9c:0a:9f:
                    80:48:c3:43:97:22:86:73:d1:cb:47:e4:e7:d9:b6:
                    61:9b:73:b6:09:4b:60:11:eb:1c:ba:f6:9e:83:a1:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A1:1B:B7:AB:B1:EA:99:A2:E5:1B:5B:D9:AF:2B:D9:68:88:8C:DF
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:a1:9d:52:df:a9:2a:2c:12:05:9f:3b:c6:dd:4e:63:fa:46:
         c0:b7:f1:92:0a:8d:1b:a7:af:85:ce:a0:50:35:24:16:5e:35:
         6a:9a:19:b2:cc:27:15:2e:ca:a3:71:d6:78:43:b4:ce:73:f2:
         03:d4:a8:f4:b7:9d:01:cd:7c:e4:d5:6b:c7:bb:9e:33:52:d1:
         68:90:c6:d2:09:4d:e0:d0:a1:58:e5:9e:b8:a9:67:f1:ad:da:
         1d:56:cf:f6:f9:ed:bb:4e:1c:ca:22:43:25:b7:b5:03:13:df:
         5c:66:f8:a7:3d:2a:c5:fd:6c:3f:4b:30:80:de:44:5d:e2:d8:
         39:1b:a5:ba:9e:b3:8a:67:53:8a:a0:15:42:45:11:3b:39:65:
         ae:f6:2e:79:d6:11:e3:ba:2a:9d:50:ff:99:a8:df:94:84:e1:
         18:d5:44:65:18:94:ee:d5:12:64:a9:17:6c:fd:b9:47:f4:fa:
         c2:42:c1:7f:18:eb:7c:ef:66:ea:70:aa:eb:e6:ae:54:7d:d1:
         b0:20:ac:bf:69:09:c1:91:cb:60:ab:cf:06:bd:91:e7:ab:2b:
         1e:ad:11:0c:61:3a:61:c7:ea:fd:89:27:ec:01:22:a3:51:10:
         da:04:74:25:fa:3a:37:8b:50:b9:ef:58:5b:f0:a8:23:8b:b1:
         fd:f9:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:10 2025 by rpki-client on console.sobornost.net