Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e3136312e33322e302f32322d3232203d3e20323733333039.roa
File:                     3133312e3136312e33322e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          oTtiXV+ezNe/LgdGl0DS2dSnLxDMcjMrQDVC6rTMtJU=
Subject key identifier:   3E:74:08:50:B5:88:E0:97:D5:4A:41:33:B5:3A:9B:18:88:DC:C7:E1
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       72427E6049766EB9D34748A5035B3FF8B7BD330A
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e3136312e33322e302f32322d3232203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:38 +0000
ROA not before:           Wed 09 Apr 2025 13:48:38 +0000
ROA not after:            Wed 08 Apr 2026 13:53:38 +0000
asID:                     273309
IP address blocks:        131.161.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:42:7e:60:49:76:6e:b9:d3:47:48:a5:03:5b:3f:f8:b7:bd:33:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:38 2025 GMT
            Not After : Apr  8 13:53:38 2026 GMT
        Subject: CN=3E740850B588E097D54A4133B53A9B1888DCC7E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:7a:81:0a:14:f7:2b:ba:71:6d:9b:45:1d:
                    d2:67:ad:80:66:5f:c0:23:13:b4:e8:1f:fc:70:67:
                    a2:b8:79:7a:9b:a4:f7:fc:24:4e:8d:3a:b7:97:f5:
                    eb:d7:47:cc:9e:c4:bb:18:ce:c4:77:9f:50:d3:51:
                    86:38:6c:14:69:8a:54:f4:b6:1e:85:d0:42:90:c2:
                    33:d3:dc:13:29:a6:78:72:0d:b2:0a:5c:df:5e:33:
                    ec:5d:60:62:2b:cc:e2:c5:c6:b2:38:45:cc:40:74:
                    1b:b9:dd:24:93:75:bc:49:ed:fe:6e:b4:a9:ec:39:
                    72:50:c5:27:64:af:ff:ec:0f:54:d8:b5:70:fc:df:
                    79:ce:ef:61:87:5e:a8:af:fb:8b:5e:7e:ba:ab:3d:
                    77:2e:8f:c9:18:0e:da:05:9e:54:fd:cc:97:9d:13:
                    93:5d:2d:fa:79:4b:fa:ea:e0:54:9d:56:41:9d:35:
                    48:83:7c:84:c2:cd:37:c4:88:7b:6e:00:14:ba:34:
                    65:40:d0:99:fb:92:f7:6b:1c:c5:b0:6f:11:f7:3e:
                    8a:37:85:6e:16:07:f1:00:11:4a:da:80:f1:90:fa:
                    bb:d4:b2:55:b4:c6:b1:2d:5b:84:ee:6e:82:72:a3:
                    85:d0:42:fa:c7:fc:00:ca:d3:02:0a:83:99:f0:4a:
                    04:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:74:08:50:B5:88:E0:97:D5:4A:41:33:B5:3A:9B:18:88:DC:C7:E1
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e3136312e33322e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:a5:62:8a:94:26:cb:a9:df:39:a3:fb:cb:ea:61:23:e7:
         e8:78:25:1b:2d:88:52:6f:2f:1f:53:9e:57:5b:ae:7a:ba:10:
         5f:d9:86:52:b6:93:f8:3f:c2:89:32:e4:5f:63:d1:9b:eb:54:
         bb:6d:54:bb:6c:0e:8e:fd:7d:21:6c:6b:62:7c:6c:c3:2a:85:
         dc:19:8c:fa:cb:b5:b6:86:7c:67:78:fb:7e:9f:ed:4e:43:15:
         a4:99:09:b6:ef:a9:b3:cf:64:39:cd:85:a3:95:21:ca:92:6b:
         42:46:a3:24:d6:b5:82:79:e2:64:be:e9:90:1e:eb:e3:fd:d5:
         73:6e:12:9d:ed:60:33:4f:ee:0f:0a:98:c0:e6:9f:25:8d:ce:
         34:e8:ec:59:c4:7a:3f:26:e3:d5:70:91:e7:cf:a1:97:e1:d2:
         6d:4f:c4:52:bf:dc:27:50:5f:7e:fc:79:fa:6a:24:2f:72:a4:
         ed:f2:b9:4d:4c:3b:c7:16:5e:bd:e7:ec:1a:27:c0:81:4a:cd:
         3c:8d:74:60:05:eb:9d:35:d6:b9:e9:d2:14:05:6e:34:e0:cc:
         55:13:65:e4:6b:7f:d7:cb:97:5b:54:2e:69:b5:15:4b:cd:4a:
         d9:dd:b6:03:64:c2:ee:15:24:7f:4e:4c:ff:c0:a8:a0:f6:07:
         5a:59:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net