Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32322d3232203d3e20323633343834.roa
File:                     3139312e3234322e3233362e302f32322d3232203d3e20323633343834.roa (raw, json)
Hash identifier:          bMmv56QJqFNsqRlXVIYaIzbxXHC3umNgOlAg4VngRNg=
Subject key identifier:   D8:19:8F:C2:5A:58:52:97:64:B1:72:F4:78:46:61:E7:80:8D:E3:A0
Certificate issuer:       /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial:       0E01F22DEB23A0106543404E0148213791307BD0
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32322d3232203d3e20323633343834.roa
Signing time:             Thu 03 Apr 2025 13:48:32 +0000
ROA not before:           Thu 03 Apr 2025 13:43:32 +0000
ROA not after:            Thu 02 Apr 2026 13:48:32 +0000
asID:                     263484
IP address blocks:        191.242.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:01:f2:2d:eb:23:a0:10:65:43:40:4e:01:48:21:37:91:30:7b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
        Validity
            Not Before: Apr  3 13:43:32 2025 GMT
            Not After : Apr  2 13:48:32 2026 GMT
        Subject: CN=D8198FC25A58529764B172F4784661E7808DE3A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:9b:fb:6e:7d:1c:4f:2c:45:74:2e:28:ee:
                    ce:10:e5:64:88:4d:2f:68:8c:15:a3:01:dc:00:01:
                    25:e4:0f:0b:a6:bb:49:b4:c5:6a:fb:fa:a3:d8:ba:
                    f3:c1:68:df:fe:06:93:12:dd:71:10:d5:d3:29:7b:
                    de:3a:24:65:0d:44:31:66:69:8a:ae:b1:7e:4b:7f:
                    e6:93:cf:da:54:35:66:04:7d:3e:9a:eb:7c:6f:88:
                    11:bd:c4:63:5c:fe:94:3c:d5:f2:af:e8:f4:67:6c:
                    7c:8d:29:87:8e:c2:3a:02:04:05:e8:1c:05:a7:30:
                    fc:69:40:e8:7c:ac:68:60:49:7c:b5:ca:2b:c0:fb:
                    c7:ec:e5:d7:fe:5b:8b:59:f1:00:8e:ad:53:5c:55:
                    c0:13:4c:71:8c:13:2b:64:07:a3:1e:69:74:6d:8c:
                    5a:67:b6:65:d2:70:24:bf:4a:fc:c4:70:48:fb:06:
                    ff:59:32:6d:76:4b:06:cd:39:8e:82:54:50:1e:de:
                    fe:23:04:0e:6d:30:34:92:2d:ac:b1:73:be:53:0e:
                    e7:69:04:5e:29:ce:14:03:4f:98:18:3d:ed:b6:5b:
                    10:9a:c8:f3:65:8a:2a:74:c5:5e:52:89:ba:96:ce:
                    c9:a1:72:55:ce:d4:e5:d6:6e:a8:7e:f9:83:44:8d:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:19:8F:C2:5A:58:52:97:64:B1:72:F4:78:46:61:E7:80:8D:E3:A0
            X509v3 Authority Key Identifier:
                keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32322d3232203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:3f:b9:96:e2:a3:f1:85:c9:72:e3:42:2f:82:2d:36:7a:50:
         30:38:db:97:ba:d7:b6:cd:42:b9:9a:94:36:0a:29:33:15:22:
         52:35:e5:59:1f:06:41:88:c3:6b:29:f1:31:5d:37:03:b5:a5:
         d3:12:4d:6c:11:96:36:c9:cf:84:95:93:46:ad:e7:08:fe:61:
         5c:58:6c:72:11:f7:f8:df:45:03:94:bd:0b:47:b9:d8:5f:0e:
         4c:5c:8a:a7:ac:27:67:e9:64:9a:1b:35:59:11:f5:91:09:1c:
         2b:0c:44:77:af:9d:f9:98:30:90:6d:e3:19:06:99:43:71:09:
         a8:81:77:0e:db:17:ad:c3:b0:8f:39:8c:69:5a:c2:bc:b7:e9:
         bd:70:6d:79:a6:30:6a:91:83:f1:18:4f:03:d2:47:70:15:63:
         b1:86:6b:33:ef:a7:b9:90:f3:8f:70:e2:5f:3b:e7:2a:62:f5:
         ea:63:8f:5b:1f:3f:69:7c:e8:b4:09:10:85:ad:a8:6f:2a:20:
         e5:f8:97:4a:86:54:a6:84:20:66:b2:1e:10:d4:c0:8d:14:01:
         2a:0d:b4:4a:d1:5c:f4:98:9d:53:c3:c5:b7:81:71:22:2b:eb:
         00:a5:2b:89:a3:52:ee:22:0a:6d:87:d0:55:65:42:da:a4:a0:
         1e:ea:e5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net