Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39362e302f32322d3232203d3e20323634313337.roa
File:                     3133382e39372e39362e302f32322d3232203d3e20323634313337.roa (raw, json)
Hash identifier:          7VTWDbcV522ZLObbK0bJyTtWUx+3dAAz+UrCPCWA7A0=
Subject key identifier:   10:5B:67:51:39:C4:F1:E2:2B:22:C1:B3:FE:C3:3D:00:8F:87:92:99
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       5067EFCE6E00018C63ED91AC0C760F6CA19388B5
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39362e302f32322d3232203d3e20323634313337.roa
Signing time:             Thu 06 Mar 2025 08:09:48 +0000
ROA not before:           Thu 06 Mar 2025 08:04:48 +0000
ROA not after:            Thu 05 Mar 2026 08:09:48 +0000
asID:                     264137
IP address blocks:        138.97.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:67:ef:ce:6e:00:01:8c:63:ed:91:ac:0c:76:0f:6c:a1:93:88:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Mar  6 08:04:48 2025 GMT
            Not After : Mar  5 08:09:48 2026 GMT
        Subject: CN=105B675139C4F1E22B22C1B3FEC33D008F879299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:39:c3:1c:85:5a:0b:6c:ec:78:f2:d2:01:
                    9d:1d:a4:80:16:6e:ad:02:bd:e0:b6:db:1a:22:f0:
                    8b:79:0b:15:8e:53:fe:cb:a0:54:55:e8:f7:2d:67:
                    b3:42:9b:3e:24:6d:aa:a6:78:f8:3b:2a:26:09:4c:
                    95:7a:e2:5e:e1:f8:04:bb:ec:3a:ba:f8:17:a2:94:
                    8e:c8:ee:68:4d:be:cc:18:df:5e:45:27:24:88:c0:
                    a9:40:67:e5:d3:24:07:06:af:73:73:2b:86:8f:2c:
                    9a:90:71:d0:92:7a:82:94:53:91:37:37:f3:a8:c8:
                    2c:25:29:54:38:b0:70:10:5a:32:3a:5b:88:a8:9d:
                    71:6b:11:29:2c:4d:69:08:7e:61:9d:5a:cf:64:fb:
                    f1:c4:69:54:f9:0e:f5:3c:6d:64:33:98:79:14:9a:
                    34:87:db:cd:e8:3d:d8:00:f1:63:c6:20:36:5b:d5:
                    66:b6:4d:f7:f8:dd:92:0e:5a:8e:b3:f5:3f:3c:81:
                    3b:b4:b8:6a:e7:d8:1c:11:78:a3:fa:ce:0f:80:64:
                    0e:d7:28:f8:28:6e:2c:62:8a:8a:63:21:a4:55:a9:
                    15:c3:4b:db:04:7e:68:8c:52:6f:ff:da:df:c5:59:
                    e7:e8:45:04:97:27:61:a5:53:8d:41:12:c2:d3:ed:
                    0f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5B:67:51:39:C4:F1:E2:2B:22:C1:B3:FE:C3:3D:00:8F:87:92:99
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39362e302f32322d3232203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:ea:0b:5b:06:51:4c:4d:df:32:a9:51:db:1d:c7:08:80:b2:
         50:f3:79:ab:de:77:a6:1e:4c:ac:3b:52:e6:ed:40:af:17:c8:
         8d:e1:76:73:a1:33:16:c4:09:e3:cd:91:eb:b0:df:50:f5:22:
         f3:37:2f:58:35:31:db:42:27:fa:10:cf:8a:0f:a2:e3:b0:fc:
         f3:22:68:bf:07:00:7b:d2:8a:b7:80:83:8c:83:d0:e9:24:ee:
         7e:ee:4f:a8:a2:03:f6:2f:c0:10:75:31:6a:f4:78:55:05:e8:
         f5:15:16:e9:5e:89:dc:5d:3c:e1:f5:4b:d2:69:0d:95:2c:02:
         9e:a2:da:d8:4b:1f:3a:57:09:97:f2:41:8f:86:3e:43:96:aa:
         4c:1a:8a:43:94:53:cc:72:58:92:3d:eb:5b:31:d0:64:f1:6e:
         1c:a9:b3:4f:4b:fb:05:8e:46:ea:f0:31:9b:40:38:70:8e:18:
         67:89:cf:da:07:80:b9:1b:15:e6:ac:60:75:74:16:71:9a:df:
         88:56:b1:ce:06:17:c7:bf:90:30:2a:96:f0:fe:94:4b:91:2f:
         eb:4c:64:75:bb:4c:87:df:dd:f3:e9:53:94:d7:ec:55:b9:37:
         f9:b5:11:5b:b4:3e:db:4a:bd:70:b4:0b:dc:0a:43:e6:0b:2b:
         19:08:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:04 2025 by rpki-client on console.sobornost.net