Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3133382e302e33322e302f32322d3234203d3e20323632373535.roa
File:                     3133382e302e33322e302f32322d3234203d3e20323632373535.roa (raw, json)
Hash identifier:          26VP2I7LpoCAHTt32QK9IDHLKHd1mS0OHJLBS3eYfQ4=
Subject key identifier:   4A:3C:47:E3:C3:F4:AD:F2:34:C9:79:1D:88:AE:3F:8D:CC:8B:AA:3C
Certificate issuer:       /CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Certificate serial:       6BF6B954ABBC3DABDBD78409E15DD4646A156A7C
Authority key identifier: E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3133382e302e33322e302f32322d3234203d3e20323632373535.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     262755
IP address blocks:        138.0.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
                          rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f6:b9:54:ab:bc:3d:ab:db:d7:84:09:e1:5d:d4:64:6a:15:6a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=4A3C47E3C3F4ADF234C9791D88AE3F8DCC8BAA3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:0a:fe:e5:ea:57:65:c3:d0:90:43:da:d9:
                    08:dd:b7:23:aa:9e:e4:5a:3a:8d:c0:9b:fa:d1:83:
                    c1:1f:9a:33:b4:30:13:0c:de:4c:16:cb:b8:5b:95:
                    ce:fe:3e:cb:d4:b8:16:f4:43:9e:6a:34:05:fc:a1:
                    d2:8f:02:e0:fc:a2:98:b4:70:50:7d:e5:9b:4a:c1:
                    7c:04:99:25:2a:73:fc:7c:bf:19:10:26:88:c5:03:
                    1d:e8:77:f7:5a:c9:ef:f9:3b:47:20:8d:c9:2a:6d:
                    29:70:3f:54:f4:5e:ed:31:f4:6b:f5:1a:ed:bd:a1:
                    12:75:62:11:5b:a5:00:e9:a9:91:6d:ba:65:1e:87:
                    22:95:73:e9:d7:25:ee:87:88:f5:25:3d:a0:48:d8:
                    c6:22:f9:92:c6:3e:8e:1d:9a:9f:52:da:39:b5:50:
                    04:47:0d:d9:12:e9:fd:b6:7e:d0:ee:e7:5f:f6:e6:
                    b3:e1:5e:20:0c:5b:68:6d:76:c1:bf:26:93:ef:6d:
                    e7:eb:98:39:20:07:e3:af:c6:1f:1d:d1:16:58:95:
                    9f:46:3b:fe:ee:54:8e:ca:46:3f:80:27:7e:8d:65:
                    33:4a:82:3a:43:d8:8b:3f:78:9d:c9:65:08:ac:d5:
                    74:8e:02:26:39:4f:ec:d7:ad:85:d5:8f:54:31:28:
                    a2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3C:47:E3:C3:F4:AD:F2:34:C9:79:1D:88:AE:3F:8D:CC:8B:AA:3C
            X509v3 Authority Key Identifier:
                keyid:E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3133382e302e33322e302f32322d3234203d3e20323632373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:1a:4d:46:f7:29:11:9e:ad:67:4f:a8:71:ea:0b:9b:b1:95:
         10:42:67:28:cd:20:26:4a:d4:d8:54:ae:49:bf:2e:e1:6f:59:
         a7:a0:bd:08:a3:3c:ce:2b:64:9a:cf:f8:2f:dd:e2:fd:b1:9e:
         af:45:c6:ca:eb:76:64:e6:b6:f0:43:f2:52:7f:fc:3e:6a:60:
         19:88:dc:a4:04:37:01:1a:f4:83:a4:3f:b7:3b:a6:76:91:97:
         39:74:c4:77:8d:b4:94:75:2f:39:1d:88:b1:06:af:81:70:7c:
         cc:5d:c2:96:2e:cf:26:1e:f4:2c:84:96:7d:30:6e:ed:7e:d7:
         b3:5a:5f:64:c3:7e:22:ef:0b:ba:bc:0c:54:60:63:0d:f1:e8:
         2b:f5:f0:26:a2:4c:00:8d:a9:d8:4a:22:8b:68:51:a0:a2:10:
         77:51:2e:a0:1b:a2:f8:82:05:57:8e:97:8e:29:54:e3:05:92:
         16:da:e9:f4:d0:6e:34:e4:9b:4c:33:b2:12:8b:93:64:f0:43:
         74:86:db:6d:aa:86:f1:91:cd:dd:10:49:e8:26:e6:ef:4e:a9:
         a3:7d:b4:81:81:1a:d3:0c:a5:a7:65:f3:84:b3:2f:9b:26:e3:
         da:21:cb:00:21:14:4f:2c:d1:29:fc:ac:b0:86:1b:27:9d:02:
         c9:54:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:59 2025 by rpki-client on console.sobornost.net