Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa
File:                     3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa (raw, json)
Hash identifier:          gplvuyLjGUhF+i6ssDirDxIMyE9T2g6roXbZ9yzSMSc=
Subject key identifier:   CD:44:2B:A3:71:E0:57:AA:01:F2:7B:53:80:E5:46:EE:78:32:AD:C7
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       6F4391A9D401BA8DF6642EF1E982974FBF5C8263
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa
Signing time:             Wed 16 Apr 2025 10:35:56 +0000
ROA not before:           Wed 16 Apr 2025 10:30:56 +0000
ROA not after:            Wed 15 Apr 2026 10:35:56 +0000
asID:                     263509
IP address blocks:        191.243.184.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:43:91:a9:d4:01:ba:8d:f6:64:2e:f1:e9:82:97:4f:bf:5c:82:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: Apr 16 10:30:56 2025 GMT
            Not After : Apr 15 10:35:56 2026 GMT
        Subject: CN=CD442BA371E057AA01F27B5380E546EE7832ADC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:59:81:f6:26:34:4f:62:6f:73:50:5c:a1:
                    ca:32:a1:c6:8c:f6:d1:a2:4d:df:dd:0d:35:5e:c5:
                    d4:ff:6a:f3:d3:aa:66:28:b1:db:bd:52:f5:52:93:
                    75:2e:91:74:70:c3:dc:19:4b:1c:e0:5e:1b:3e:2f:
                    3b:b8:6f:c0:11:db:01:db:e4:30:53:8d:98:a0:ff:
                    1e:54:64:19:92:cf:64:25:86:f1:48:f5:73:3d:40:
                    e8:bb:d7:cb:f2:77:3f:9f:e3:82:42:0d:18:23:af:
                    ce:39:89:b8:3a:2c:d1:fb:d0:e3:12:f6:2b:0b:e6:
                    32:41:9f:f2:1b:bf:a5:ee:76:73:d5:e4:aa:dc:cd:
                    73:68:1d:7f:e3:dd:13:19:14:97:c9:e4:1d:76:a3:
                    11:16:9d:ee:49:6d:25:b3:d5:d5:6f:5b:8f:f1:1c:
                    e8:30:15:d2:fd:ae:e5:76:3e:7e:76:aa:97:45:d7:
                    a0:6c:c8:e7:ee:33:11:61:2c:db:72:1f:9d:9d:82:
                    29:3b:5e:7e:dc:fd:a7:6c:84:e4:b7:4a:27:34:a7:
                    fd:af:58:31:4f:28:93:d4:c2:04:cc:bf:dd:35:5c:
                    db:c4:67:d2:55:6e:ea:64:02:d7:a4:f3:b6:7f:79:
                    a4:84:48:c6:06:1e:73:9d:33:e1:1f:d6:a0:61:c2:
                    6a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:44:2B:A3:71:E0:57:AA:01:F2:7B:53:80:E5:46:EE:78:32:AD:C7
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:a6:5b:2d:7d:3d:e2:b7:50:e1:2c:63:86:80:2c:cf:fe:bd:
         8a:f8:0e:d4:30:34:82:cc:68:7b:75:c0:a6:a1:8c:3a:9c:bd:
         e7:a9:ac:1a:39:65:b6:51:b7:48:55:15:06:f8:bc:b5:3d:68:
         10:a0:2b:f7:1b:11:1d:0a:1c:ec:d0:51:cc:a1:37:99:39:83:
         65:3e:6b:05:37:a4:33:87:8a:60:6a:2e:ad:be:3d:a9:47:01:
         5e:f3:87:bd:69:31:3d:7c:63:fe:2f:9d:cd:79:52:5d:7d:d8:
         b7:f5:4a:eb:35:84:4b:0a:56:c2:89:b8:c5:cc:94:51:87:37:
         32:03:05:08:d4:36:75:e1:67:b8:3c:51:52:c4:a0:c7:29:a7:
         e7:9d:a9:93:69:4e:e3:11:38:b7:6c:4e:9c:eb:87:d5:9d:50:
         1f:77:bc:cf:73:d2:19:cf:a5:9f:e6:21:a5:4c:bf:39:54:fc:
         6c:40:33:2c:17:6c:ec:26:cd:ff:5f:83:8a:b0:4d:d0:83:11:
         5c:48:8a:87:a2:ba:32:61:62:08:3a:99:36:51:a7:93:16:ae:
         7c:bd:e5:fd:44:4f:f7:40:cf:48:cb:22:16:e4:0c:04:42:e0:
         ae:fc:11:1b:a6:02:3c:05:aa:79:42:b9:6c:3e:76:49:a3:77:
         b1:1a:95:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:28 2025 by rpki-client on console.sobornost.net