Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233372e302f32342d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233372e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          YHaRGUKdGaR438D0CWjit9r06Skazb7cQAnqk53mU/A=
Subject key identifier:   2B:15:23:42:F1:2C:76:8F:75:F5:55:5E:26:DB:61:CB:09:7D:55:31
Certificate issuer:       /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial:       43F01B914ED8F00B7C154EE01D95B0D32D87F999
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233372e302f32342d3234203d3e20323633343834.roa
Signing time:             Thu 03 Apr 2025 13:48:30 +0000
ROA not before:           Thu 03 Apr 2025 13:43:30 +0000
ROA not after:            Thu 02 Apr 2026 13:48:30 +0000
asID:                     263484
IP address blocks:        191.242.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f0:1b:91:4e:d8:f0:0b:7c:15:4e:e0:1d:95:b0:d3:2d:87:f9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
        Validity
            Not Before: Apr  3 13:43:30 2025 GMT
            Not After : Apr  2 13:48:30 2026 GMT
        Subject: CN=2B152342F12C768F75F5555E26DB61CB097D5531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8d:3b:17:a8:48:5b:9d:b8:8e:b2:d6:91:38:
                    0b:b8:d5:b0:c5:4e:60:93:c1:4a:e9:f5:d0:4d:48:
                    87:aa:90:31:b4:63:17:d1:09:1e:1d:64:8c:f3:98:
                    40:d5:0c:66:22:1e:b1:59:1c:74:1f:33:8a:6b:9a:
                    74:c2:73:6b:d9:b7:81:e3:6d:66:83:bc:33:29:73:
                    da:3a:3c:b3:d6:07:c3:dc:49:c5:1a:1d:ef:41:c2:
                    75:c9:1d:21:7c:46:c9:ee:6c:5f:6c:0e:7a:88:d5:
                    c4:f0:07:29:93:dd:92:a4:0a:bb:35:f1:da:68:00:
                    eb:2e:f6:3a:e3:23:a3:52:13:a0:9c:ca:80:a8:bf:
                    48:ad:c7:c9:fa:0c:dc:74:8d:ea:6c:6d:dc:8c:6c:
                    69:04:55:a4:d7:65:59:09:a5:b7:42:08:4f:33:ee:
                    ee:d3:8d:74:63:f3:32:d0:04:3a:39:42:2b:eb:91:
                    62:07:87:3e:57:27:a8:c1:c1:31:81:65:51:e1:7d:
                    ac:22:ff:b2:fc:0d:d9:9f:bc:2b:6f:97:21:70:df:
                    13:36:37:8f:d2:49:dc:35:9b:b6:69:08:f8:d5:70:
                    53:cc:51:62:52:fb:e5:81:35:76:aa:db:56:1e:2e:
                    15:18:cf:07:5f:c4:98:f2:12:4f:92:d9:c8:82:57:
                    5d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:15:23:42:F1:2C:76:8F:75:F5:55:5E:26:DB:61:CB:09:7D:55:31
            X509v3 Authority Key Identifier:
                keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233372e302f32342d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:96:72:8b:ac:07:a5:71:2f:a9:5b:16:d9:b1:28:e1:f7:8c:
         71:23:24:54:d9:f4:9e:8a:4d:67:fe:bf:34:ae:3e:09:91:2b:
         97:5c:88:2f:5d:8d:89:2e:21:2e:7a:d8:53:3e:79:0a:d6:cf:
         08:e7:63:57:5d:b4:4a:d3:f9:e8:94:9f:7b:33:12:74:45:5b:
         70:bb:b6:eb:50:b7:f9:7d:68:17:af:3b:d1:f1:d2:9b:40:cc:
         29:fb:90:f7:ec:1e:04:4b:bd:77:37:34:4a:5a:77:69:20:61:
         0f:e8:46:2b:d3:92:6e:e5:7c:75:99:74:04:c3:81:e7:1c:01:
         8f:6a:5f:1a:eb:61:aa:b7:3d:11:1b:05:ab:48:ad:69:de:45:
         d6:7f:39:be:ca:93:00:38:bf:08:c7:e2:7a:46:36:df:5e:04:
         bc:5a:17:c4:ae:88:fc:93:91:52:8f:dd:b6:bd:be:06:61:7e:
         bd:7c:b1:41:02:d5:6c:f6:e4:77:42:98:8b:7c:31:b8:63:c1:
         ab:3a:d4:10:b0:8b:32:21:ae:d2:7f:79:18:dc:e6:40:a6:c1:
         92:92:cd:58:3d:2d:ef:00:8a:c4:cf:28:ec:51:dc:1e:d0:86:
         18:4b:04:5f:bb:4a:66:c8:74:ce:0a:e6:30:e3:0a:35:6f:1c:
         44:27:f2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net