Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/3139302e392e36342e302f32322d3234203d3e20323731353836.roa
File:                     3139302e392e36342e302f32322d3234203d3e20323731353836.roa (raw, json)
Hash identifier:          BGqlxcg9m3HM8ayuVrxtYIjo64uJ68kkTVexzWpxzok=
Subject key identifier:   20:24:21:BC:E9:CE:BF:75:52:BE:A9:0C:05:BD:E1:A2:D3:5E:8E:E1
Certificate issuer:       /CN=5F33BB65A501B1A095633041CB4544B7CD75764A
Certificate serial:       08EAB78AAB35DABF5F3B651E3452CC2A18A31957
Authority key identifier: 5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/3139302e392e36342e302f32322d3234203d3e20323731353836.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     271586
IP address blocks:        190.9.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.crl
                          rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ea:b7:8a:ab:35:da:bf:5f:3b:65:1e:34:52:cc:2a:18:a3:19:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F33BB65A501B1A095633041CB4544B7CD75764A
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:03:85:42:75:29:5e:88:9e:c8:83:c4:ae:53:
                    bb:e3:16:bc:2d:60:4e:f0:d7:03:07:92:1e:93:29:
                    95:88:bd:82:66:1d:4b:a9:97:bd:40:60:c9:09:e2:
                    0a:3c:42:10:9f:e1:6a:e1:dd:f7:3b:1d:4f:67:91:
                    06:ad:d9:47:a9:90:ea:80:2c:96:23:4d:26:f1:b9:
                    e3:1f:1e:6b:c1:3b:24:fa:f2:6a:71:17:61:91:92:
                    d4:bb:dc:78:aa:a3:d0:e8:37:f3:93:d9:e3:34:0c:
                    c5:7f:d3:cf:59:f1:7c:fc:43:ed:0c:58:1d:c9:4e:
                    d3:5b:9f:40:0e:04:32:3a:c7:50:91:25:c2:fe:f3:
                    c4:1b:d8:15:7d:1a:03:3f:e6:33:04:fe:38:a6:05:
                    09:3a:a1:8f:52:32:53:d1:2f:e9:25:7a:4d:c8:ec:
                    97:2c:cb:e0:a7:21:0a:ec:75:d1:e7:57:6b:8e:9d:
                    70:d9:37:af:b9:dd:6f:9d:f8:c2:b8:b1:50:d1:5c:
                    11:0a:3d:6a:77:1d:d5:3f:70:da:46:e6:72:46:d9:
                    33:4c:2c:fd:2a:08:5d:d6:33:d7:25:00:fc:13:8b:
                    8d:74:fb:c0:9a:83:fb:6c:44:f2:fe:67:7f:2c:89:
                    7e:e7:62:cd:cf:d2:b4:67:1a:80:c2:e9:6c:40:4b:
                    6c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:24:21:BC:E9:CE:BF:75:52:BE:A9:0C:05:BD:E1:A2:D3:5E:8E:E1
            X509v3 Authority Key Identifier:
                keyid:5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/3139302e392e36342e302f32322d3234203d3e20323731353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:5f:77:5a:fa:06:7f:a3:dd:a8:48:80:e3:8d:e3:f1:8e:8a:
         0b:15:20:f8:fa:a1:f4:86:45:0a:44:0e:c6:5f:48:3b:3c:e9:
         d1:bf:a4:00:1c:63:54:76:7b:cb:2f:c0:3f:16:65:ac:6f:f3:
         4d:21:b6:57:70:c3:6b:bc:4f:93:e9:5a:dc:b0:fe:3c:39:c4:
         b9:f3:f9:db:13:c7:ff:e4:69:6d:fc:1d:67:04:c0:bc:a1:93:
         0c:b2:95:d7:dc:79:e3:7e:2b:20:2f:29:a8:97:a8:7a:cb:a7:
         76:fe:2f:e1:33:e0:0c:dc:30:43:0c:7d:92:06:2b:f1:fd:f3:
         b4:ba:3b:55:51:92:da:d9:cf:2e:7c:18:0b:a7:31:eb:0a:d5:
         15:e8:b9:cb:72:81:0c:e3:96:76:bd:8f:da:61:70:24:ae:e6:
         6d:17:37:ff:d4:84:2d:42:ce:03:14:20:2b:47:50:1d:96:45:
         dc:2e:59:17:56:38:68:d9:04:ea:33:8e:52:ec:25:75:c7:de:
         e6:e6:5b:04:4f:64:b2:76:eb:20:0c:6e:0b:45:07:6e:d8:0b:
         d0:0f:d8:72:c0:d2:d0:05:bb:75:b8:95:eb:f2:81:f7:91:2e:
         f8:17:9f:b4:92:d4:5b:0d:b3:a6:e4:b7:ff:be:b1:ef:81:3f:
         51:bb:a2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:05 2025 by rpki-client on console.sobornost.net