Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e302e3230382e302f32322d3232203d3e20323733333039.roa
File:                     3133312e302e3230382e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          54Rj+I3a5nUnk+EKlzc0oN0c4pCXI/u+QCh8n+7p5Sk=
Subject key identifier:   CF:B9:FE:25:3E:9B:D3:38:70:F1:3B:C0:3F:8B:3F:3D:58:9A:BD:59
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       15E8FC82F4949878139812647A501FDE0A400FAF
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e302e3230382e302f32322d3232203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:38 +0000
ROA not before:           Wed 09 Apr 2025 13:48:38 +0000
ROA not after:            Wed 08 Apr 2026 13:53:38 +0000
asID:                     273309
IP address blocks:        131.0.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e8:fc:82:f4:94:98:78:13:98:12:64:7a:50:1f:de:0a:40:0f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:38 2025 GMT
            Not After : Apr  8 13:53:38 2026 GMT
        Subject: CN=CFB9FE253E9BD33870F13BC03F8B3F3D589ABD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:f9:35:fb:43:c2:e9:5f:dc:6f:08:b4:70:
                    5a:b1:fc:e7:cb:2f:26:86:e3:d2:d5:16:8e:ad:d1:
                    b0:d6:9f:44:6e:f6:17:f8:6a:78:4b:c9:09:21:3d:
                    e5:08:05:b4:01:08:f7:bd:ae:01:c4:ed:f7:89:08:
                    24:bd:92:d6:86:71:88:18:01:5c:dc:4f:7a:30:ff:
                    78:86:f2:33:86:2a:93:e6:e1:a0:46:f2:18:27:b0:
                    05:7c:c1:e9:04:fd:1a:44:d3:ed:a1:c1:28:36:bf:
                    01:19:93:01:35:2c:64:47:8a:39:7a:f9:84:d1:f4:
                    eb:27:2d:6f:fc:f0:52:e3:c5:92:c9:ca:fd:f5:bf:
                    93:d3:e2:d2:7f:4f:7d:91:99:32:ba:aa:1e:c8:02:
                    57:23:ce:f9:c5:c4:b3:77:98:d0:a5:21:b7:54:0b:
                    d9:f6:49:b2:60:44:55:48:ca:e2:48:7d:64:ae:f9:
                    b3:42:bd:fa:e0:d9:08:58:13:69:dd:87:9c:71:76:
                    80:81:ab:f0:1d:5d:fe:93:62:5a:43:5f:59:44:83:
                    8e:ff:be:71:84:ae:40:5b:05:be:a9:00:e5:e8:d8:
                    b5:6e:da:23:b2:7a:b0:24:e0:65:60:77:4f:fb:0c:
                    ad:32:8e:dd:45:57:c5:9b:6d:c0:86:3b:b1:a8:5c:
                    b6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B9:FE:25:3E:9B:D3:38:70:F1:3B:C0:3F:8B:3F:3D:58:9A:BD:59
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e302e3230382e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:95:96:5f:90:62:a6:db:02:3f:6f:ba:4c:37:cd:cd:04:3e:
         88:d0:0d:4d:86:a2:71:dc:81:4d:31:16:8f:c9:0b:66:95:d3:
         3f:6b:d6:07:47:10:fd:2f:a9:6c:56:2a:0f:2d:d9:c6:5e:c6:
         d4:b1:4d:3a:bb:c2:ce:14:8e:14:3c:09:d6:90:78:fa:60:24:
         4e:2e:41:2f:66:89:5b:a1:73:b5:ee:8c:c1:f2:d9:99:3a:1a:
         19:cc:94:2e:64:d2:10:cb:42:18:da:a8:91:20:00:58:52:40:
         a5:df:9b:42:8e:ed:63:9c:a2:e4:d7:97:18:01:14:28:33:94:
         0d:e0:f3:be:d8:a5:db:87:49:36:a0:cb:7a:d0:a4:39:22:d4:
         77:3c:45:ec:9c:4c:76:d5:b6:8b:b7:f6:14:0c:1f:b1:bc:93:
         3a:4b:a6:3f:26:7a:b0:e9:9d:9c:85:b4:e0:46:ce:43:5e:88:
         71:a7:80:a8:1d:f5:77:82:e3:0a:64:35:cc:90:e2:18:65:12:
         62:d5:e5:0c:bf:b3:91:38:73:07:61:1c:cc:d1:79:60:b7:d6:
         94:69:64:af:66:56:c5:97:6a:96:3a:b9:59:e4:50:39:ac:ae:
         1b:8f:32:e7:b1:ab:fe:b9:67:36:52:60:cb:00:22:a9:71:b3:
         4b:ce:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net