Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231382e302f32332d3233203d3e20323633343832.roa
File:                     3139312e3234322e3231382e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier:          gvPuHFNaGITtGK811VaWVMUCtpG96zT9I/mRt+eQIHM=
Subject key identifier:   7A:6B:17:B1:92:C0:97:D9:99:25:91:A9:9D:98:34:E6:E9:5D:F7:C1
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       775D7430BBAA253861DBD4C55A567C93128EC48C
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231382e302f32332d3233203d3e20323633343832.roa
Signing time:             Mon 31 Mar 2025 17:13:30 +0000
ROA not before:           Mon 31 Mar 2025 17:08:30 +0000
ROA not after:            Mon 30 Mar 2026 17:13:30 +0000
asID:                     263482
IP address blocks:        191.242.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 12:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5d:74:30:bb:aa:25:38:61:db:d4:c5:5a:56:7c:93:12:8e:c4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Mar 31 17:08:30 2025 GMT
            Not After : Mar 30 17:13:30 2026 GMT
        Subject: CN=7A6B17B192C097D9992591A99D9834E6E95DF7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:8a:ed:9f:22:7b:46:dc:f3:9f:00:bd:b4:
                    e3:45:23:56:f9:3e:98:e0:84:7d:52:30:e9:e2:1b:
                    c1:e9:fc:78:0f:41:b9:53:e5:c5:86:da:5c:cf:36:
                    b8:8a:57:40:73:d8:15:0f:72:76:50:f8:05:d1:30:
                    93:fd:32:13:77:45:a7:f9:54:93:20:b7:ad:63:1b:
                    39:4f:77:4b:4e:2c:c9:79:92:dd:12:36:50:0d:61:
                    c4:90:22:a0:be:12:8b:2e:f7:1e:f1:dc:13:29:28:
                    22:80:44:37:53:91:5a:51:2c:c6:a7:e9:a1:02:72:
                    f9:1d:82:85:ed:ad:9f:21:9c:23:26:74:b6:ee:44:
                    59:ec:c9:1a:a0:f5:db:0a:56:f6:6b:fa:9b:ef:a1:
                    0d:2a:c2:2f:c0:df:5a:bb:83:57:7f:3f:9b:3d:c5:
                    35:2f:f0:11:e7:13:0a:97:ce:22:b1:9c:24:e5:dc:
                    9c:52:a1:e0:75:e1:a0:eb:73:33:3d:44:bc:45:8f:
                    c1:a8:07:82:06:73:b5:f4:88:65:79:ae:89:b0:9f:
                    34:7e:01:f8:63:61:08:c7:57:3a:30:c3:90:23:60:
                    80:dd:01:af:3c:d0:6b:f2:89:2d:97:aa:64:25:ec:
                    d3:3c:01:2d:18:63:66:44:2e:88:58:74:81:48:37:
                    ee:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6B:17:B1:92:C0:97:D9:99:25:91:A9:9D:98:34:E6:E9:5D:F7:C1
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231382e302f32332d3233203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:91:e6:d5:a8:f0:49:40:e8:47:bc:fc:8c:c0:8e:d0:ef:63:
         5d:e2:91:a5:0e:8d:a2:74:73:02:05:f2:a7:32:41:01:94:73:
         23:0f:1e:b5:5f:a8:30:ee:06:45:4a:d4:e1:8b:83:75:b1:0b:
         08:75:0b:d7:97:50:f7:b3:05:df:9a:e1:24:9c:f6:b8:7e:a7:
         2f:63:b3:8e:aa:18:e0:97:64:ed:2d:d9:b6:0b:01:ca:a9:69:
         fa:af:f1:e4:d5:0e:d3:61:6a:d5:f6:fa:02:b0:d2:db:ef:6b:
         23:12:08:3b:b9:1c:b2:d6:a6:29:5e:c9:ed:b8:38:c3:32:11:
         37:2f:8e:9c:b0:ae:75:da:31:cc:3f:4c:52:c6:d1:38:18:11:
         be:5e:72:f2:da:88:7f:09:d3:31:a1:7a:b4:50:a7:e0:5c:02:
         05:e1:08:57:24:aa:e0:87:96:f3:e4:cf:02:cd:21:96:e0:be:
         42:c8:c4:c1:3b:da:05:d7:50:5b:d7:06:34:09:a3:ce:1d:3b:
         98:9c:01:14:d1:67:93:4a:07:8d:8c:5b:66:34:04:95:6a:99:
         30:48:0d:ac:9b:05:b4:08:4d:9e:0c:0c:13:d5:f0:fd:0d:fd:
         9b:b6:81:9c:b2:26:11:a1:42:24:a2:96:6a:4c:d4:76:90:3d:
         fd:5e:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:21 2025 by rpki-client on console.sobornost.net