Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3134302e302f32322d3234203d3e203238333439.roa
File:                     3138392e35312e3134302e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          74GyFn4mhb8liGCrfyxks+mFHj6CoRMMAzWaATcfjhk=
Subject key identifier:   48:93:C9:E3:24:CC:0E:EC:47:3A:83:E0:EF:6C:2A:1C:A0:27:CD:A6
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       0F9DDC40A6A282E07DDF0B651318329A262FE466
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3134302e302f32322d3234203d3e203238333439.roa
Signing time:             Mon 10 Feb 2025 14:29:57 +0000
ROA not before:           Mon 10 Feb 2025 14:24:57 +0000
ROA not after:            Mon 09 Feb 2026 14:29:57 +0000
asID:                     28349
IP address blocks:        189.51.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9d:dc:40:a6:a2:82:e0:7d:df:0b:65:13:18:32:9a:26:2f:e4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:24:57 2025 GMT
            Not After : Feb  9 14:29:57 2026 GMT
        Subject: CN=4893C9E324CC0EEC473A83E0EF6C2A1CA027CDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:58:13:a1:e6:3a:a3:5b:90:7a:33:9f:73:58:
                    9b:1a:09:22:aa:43:b9:11:cf:a8:7c:4e:d4:27:b1:
                    ad:c7:ab:56:d9:bb:85:43:e5:75:2c:ee:da:0b:75:
                    30:2e:01:1a:93:41:24:ac:88:f3:3c:33:2b:81:f0:
                    44:53:1e:3d:37:98:a1:f6:47:bf:cd:b4:41:a4:25:
                    34:a1:54:80:e7:69:e9:4d:80:4b:51:96:6e:70:a5:
                    bf:19:54:38:7b:c5:26:9c:01:09:ef:03:dc:bc:fd:
                    61:7e:d6:3e:eb:27:e5:7f:8f:e5:88:09:43:4e:78:
                    e8:10:af:6e:de:c6:44:4b:1e:11:1b:26:0c:b4:72:
                    9a:ce:4d:e8:24:90:80:38:9e:91:1f:13:b1:02:65:
                    a5:d8:d8:9e:6f:cc:3e:d8:db:20:38:b5:c9:a1:c2:
                    62:87:3a:e3:59:21:56:a3:79:20:84:75:37:46:bb:
                    e4:de:c4:a6:03:e3:26:69:45:dd:9f:fd:24:3d:91:
                    1f:4d:12:a4:fc:54:db:44:21:ca:3c:2f:d5:08:aa:
                    89:b5:28:ca:0c:e5:57:c7:73:f3:cd:ff:66:46:1d:
                    40:17:c2:63:a5:fc:e9:98:ae:e2:7d:6e:65:fe:65:
                    8a:47:e0:b1:42:28:1e:0a:28:4d:8b:34:50:b1:98:
                    3f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:93:C9:E3:24:CC:0E:EC:47:3A:83:E0:EF:6C:2A:1C:A0:27:CD:A6
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3134302e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:8c:5b:30:38:6d:44:5b:18:bc:63:f9:59:65:31:70:8d:4a:
         e0:f6:27:2d:b8:c9:5e:52:1a:50:87:f4:3a:d6:33:c7:69:6f:
         bf:1f:03:48:f4:3d:ba:0a:4e:d1:61:d6:70:9d:eb:3e:da:ae:
         0e:0e:65:3e:2e:4b:95:79:7a:3a:3f:7a:45:b1:0a:77:12:c4:
         77:aa:b4:b0:3a:69:9f:64:8d:48:c3:b3:7a:36:dc:4c:50:64:
         af:98:b8:f6:7e:3c:6c:3d:0e:16:7d:e9:cb:45:2e:81:79:61:
         57:24:28:b0:1a:fc:05:43:9d:f8:4b:60:7c:8b:1e:5b:e8:6a:
         6a:9c:07:29:bc:3a:dc:6e:b6:5f:07:7a:de:43:fa:7d:6d:e8:
         22:be:f2:fe:48:c5:4e:cb:52:80:06:bb:6a:80:e7:3d:38:34:
         da:e3:f9:93:fa:32:c0:1d:c7:60:ce:41:34:9c:f9:a6:04:4e:
         af:b6:df:d4:04:30:39:b1:f1:f4:b4:5d:7c:a3:2b:16:b9:0e:
         9b:9a:1c:c9:84:f2:39:0c:60:ac:0c:cf:d2:13:cc:0a:aa:cc:
         ed:81:ff:81:89:65:b2:eb:78:bf:08:aa:85:af:35:8b:07:7a:
         52:61:63:b4:7e:30:86:1b:fd:25:93:21:28:e6:1f:86:0b:8b:
         00:81:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:10 2025 by rpki-client on console.sobornost.net