Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138392e312e34382e302f32302d3234203d3e203238363538.roa
File:                     3138392e312e34382e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          WVcNM0hE8ID+MC5ev5cQpMF4L/Q5NKUjV2QfoCXVQjA=
Subject key identifier:   79:C1:18:F8:C7:E2:C4:FA:C9:FD:C4:4D:16:53:26:98:50:C4:5D:E3
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       51C6C3C79F50B95984D4EF270A7B23F0998E0BC1
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138392e312e34382e302f32302d3234203d3e203238363538.roa
Signing time:             Thu 06 Mar 2025 10:17:14 +0000
ROA not before:           Thu 06 Mar 2025 10:12:14 +0000
ROA not after:            Thu 05 Mar 2026 10:17:14 +0000
asID:                     28658
IP address blocks:        189.1.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c6:c3:c7:9f:50:b9:59:84:d4:ef:27:0a:7b:23:f0:99:8e:0b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Mar  6 10:12:14 2025 GMT
            Not After : Mar  5 10:17:14 2026 GMT
        Subject: CN=79C118F8C7E2C4FAC9FDC44D1653269850C45DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:74:cc:04:c3:30:c5:43:71:bd:b2:88:7e:
                    74:13:5d:99:a5:5b:13:77:1f:bb:ba:f5:d1:ab:32:
                    a8:b8:98:62:be:3d:b6:fe:57:16:e1:b5:50:80:51:
                    a8:00:82:92:fb:96:6e:4c:01:af:f8:06:46:bc:5f:
                    9b:e9:20:3f:69:04:ee:91:6e:b3:c0:80:f7:0d:11:
                    ee:81:b2:8c:90:1f:00:44:26:a4:09:66:d8:4b:de:
                    eb:9d:e7:3a:30:82:97:51:1f:66:7e:48:61:49:b2:
                    13:ac:23:c8:32:a2:c8:dc:41:40:02:6b:61:9b:98:
                    ca:ea:38:f4:f4:a9:3f:d8:5c:f9:c1:d0:97:64:39:
                    3a:67:bb:5b:5d:28:83:6d:4a:86:d7:d5:64:0e:a2:
                    3e:af:e1:53:ae:57:57:d4:17:4a:c8:2e:ed:8b:55:
                    12:90:f1:16:16:c5:30:55:ae:ad:79:ed:b2:98:90:
                    ed:9d:e8:67:39:83:e2:bb:c8:f7:d8:d8:ef:08:e1:
                    cf:f2:08:5e:dd:89:b0:a4:c2:27:2e:1b:5e:3b:09:
                    7a:15:03:7e:de:87:b4:ca:dc:49:23:94:7f:76:ac:
                    3e:69:ad:a4:7e:09:c0:41:d3:9f:6b:27:da:8e:f5:
                    ec:dd:d3:ce:83:d6:23:44:ef:4d:8a:0d:1c:85:35:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C1:18:F8:C7:E2:C4:FA:C9:FD:C4:4D:16:53:26:98:50:C4:5D:E3
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138392e312e34382e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:20:34:9c:da:8e:37:a4:11:e7:d0:0f:36:b5:a3:0a:c7:90:
         3c:b6:02:9f:59:61:c4:3b:88:a5:ef:67:2e:ae:e3:e9:5e:1c:
         fd:58:4d:0a:57:c4:76:3a:46:1f:13:b3:e9:63:86:f7:37:85:
         4e:f4:15:d7:29:50:db:8a:5a:ee:5a:6c:ec:a8:85:74:0d:6e:
         90:aa:5a:5a:9f:b6:67:7e:3f:b7:c1:a8:ba:c4:a4:ae:9e:1d:
         cf:7b:ed:d9:96:8e:5e:cd:fa:7d:ba:28:1b:a3:85:08:c5:be:
         4d:58:77:26:39:de:4b:8b:6f:81:d8:ea:c5:fa:a0:1c:74:da:
         2a:85:2d:48:64:e3:a9:3e:b5:54:2b:50:fb:10:d5:96:de:8c:
         ec:c6:17:3a:6c:70:aa:8b:13:f7:21:d6:dd:0d:39:4b:50:32:
         19:ef:39:9e:e2:8d:5f:9f:8f:fd:4e:1b:bd:da:a6:10:47:c2:
         62:f8:59:5f:ac:83:09:42:29:a9:0f:af:d1:a9:73:5c:ef:03:
         c2:03:d5:ae:22:da:bd:48:8f:19:73:26:06:fd:23:2f:83:d7:
         fd:a2:7b:8b:59:23:59:71:2f:63:fa:ff:4e:ca:de:05:d3:b8:
         9f:8f:d3:18:2c:4a:c9:2c:d0:f1:3d:32:38:ea:b7:0b:75:0a:
         9f:df:2f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:11 2025 by rpki-client on console.sobornost.net