Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/3137392e34382e302e302f32322d3234203d3e20323731303639.roa
File:                     3137392e34382e302e302f32322d3234203d3e20323731303639.roa (raw, json)
Hash identifier:          IjG8dMMMtWEQOW1CGIFGUHIRvCHEwbMTakCeea32IVI=
Subject key identifier:   B5:C4:9F:E9:C4:74:0F:91:82:1D:44:BD:53:9A:15:F3:C6:35:97:42
Certificate issuer:       /CN=6F11EAE0541E2BEF427842B5ACBBB3FA60094958
Certificate serial:       6255E3FB5C77B21F5AD2FD9C95B1B8606ABD733F
Authority key identifier: 6F:11:EA:E0:54:1E:2B:EF:42:78:42:B5:AC:BB:B3:FA:60:09:49:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/3137392e34382e302e302f32322d3234203d3e20323731303639.roa
Signing time:             Wed 23 Apr 2025 15:01:16 +0000
ROA not before:           Wed 23 Apr 2025 14:56:16 +0000
ROA not after:            Wed 22 Apr 2026 15:01:16 +0000
asID:                     271069
IP address blocks:        179.48.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.crl
                          rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:55:e3:fb:5c:77:b2:1f:5a:d2:fd:9c:95:b1:b8:60:6a:bd:73:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F11EAE0541E2BEF427842B5ACBBB3FA60094958
        Validity
            Not Before: Apr 23 14:56:16 2025 GMT
            Not After : Apr 22 15:01:16 2026 GMT
        Subject: CN=B5C49FE9C4740F91821D44BD539A15F3C6359742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:ea:ee:9b:c3:ee:97:81:8b:04:11:09:54:
                    0f:f3:de:1f:9c:00:eb:54:93:77:b0:82:56:7d:36:
                    76:39:14:e2:1f:e8:0d:ba:90:fa:22:ad:c8:bc:dc:
                    9a:48:14:54:e3:6c:74:43:ba:ed:c4:db:54:c0:88:
                    8f:7a:4a:fb:1e:fb:b5:f3:4d:97:d7:f7:81:a6:48:
                    42:99:88:6e:1b:3c:45:2a:d0:b0:30:8e:0c:d6:b7:
                    4c:21:93:b1:98:16:8a:be:78:fa:9c:9b:dc:a1:0d:
                    5a:14:86:a6:60:6f:5e:c9:6e:ff:26:48:4a:ed:f2:
                    66:c5:96:4b:cd:2d:84:85:22:37:5b:4b:7d:b2:2f:
                    4c:d7:c8:24:9c:04:e7:ed:db:54:cc:f6:97:f4:f3:
                    80:58:98:34:91:59:b0:13:e3:31:8c:37:78:b3:a0:
                    21:32:be:56:ad:4f:71:c8:b0:33:a9:cb:90:b7:a3:
                    f4:c9:bb:c3:02:17:8e:54:b7:9c:4f:d5:96:81:a4:
                    0c:0f:8b:a5:7a:02:fa:16:01:79:28:9b:c5:41:36:
                    35:4d:46:56:a0:13:aa:ac:d8:bf:dc:ce:5f:3e:2d:
                    20:65:78:71:19:5b:3f:49:7d:a0:db:35:34:93:ff:
                    52:16:76:1c:87:b7:8a:4a:ae:59:02:0d:5d:fb:8b:
                    9b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C4:9F:E9:C4:74:0F:91:82:1D:44:BD:53:9A:15:F3:C6:35:97:42
            X509v3 Authority Key Identifier:
                keyid:6F:11:EA:E0:54:1E:2B:EF:42:78:42:B5:AC:BB:B3:FA:60:09:49:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/3137392e34382e302e302f32322d3234203d3e20323731303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:32:2e:1a:da:17:e1:97:a4:f4:a8:ac:89:5b:14:39:00:dd:
         01:26:7a:ea:4b:0b:b9:51:81:70:a9:de:50:5e:c1:bf:b6:5d:
         17:a7:f4:e3:dd:c7:0a:d3:27:2b:7b:b9:82:c8:97:a7:ff:42:
         bf:5e:d0:76:b3:05:ef:23:ee:76:dd:00:67:ab:36:f5:f3:88:
         a1:4f:4d:08:7f:7f:7a:43:09:9b:3b:42:c1:24:ae:e1:d5:28:
         11:b2:cd:6c:41:71:f5:16:86:e7:9e:d1:50:f5:0c:7d:d7:c0:
         1e:c0:30:43:0c:e8:75:fe:77:d3:e0:ad:8e:92:ae:d6:3d:72:
         d8:9f:5e:b0:9b:b4:a3:27:5e:2c:4b:90:05:a3:8b:78:cd:19:
         ca:3f:88:a3:6e:00:03:93:7e:9f:aa:7a:46:7f:a0:0d:98:f9:
         46:d5:08:0f:72:70:34:c5:40:35:6c:f0:e8:73:af:b7:46:d7:
         5e:2a:1b:69:56:04:6b:0c:53:b1:30:9a:16:74:e6:e4:c2:51:
         33:38:a6:7e:48:67:c1:d8:e9:b8:9a:63:35:83:c9:95:79:eb:
         e2:ce:82:7d:56:ae:cc:d5:1b:08:e0:98:47:30:c4:16:e6:cb:
         f5:8f:ed:73:a8:2d:13:5a:88:ea:df:05:19:79:28:a1:ed:7d:
         93:ee:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:42 2025 by rpki-client on console.sobornost.net