Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31372e302f32342d3234203d3e20323733333039.roa
File:                     3133382e3132322e31372e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          E8vYsVdA+hQ9dhw3HnOdiDLJ2LbMST70bLf58UJsDY4=
Subject key identifier:   28:2D:A5:D0:8B:F6:47:12:09:AF:E5:34:5D:4B:AD:8D:00:BD:F8:32
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       0590CB8A64649639B1655D69E6DE5DF708182B7C
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31372e302f32342d3234203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:38 +0000
ROA not before:           Wed 09 Apr 2025 13:48:38 +0000
ROA not after:            Wed 08 Apr 2026 13:53:38 +0000
asID:                     273309
IP address blocks:        138.122.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:90:cb:8a:64:64:96:39:b1:65:5d:69:e6:de:5d:f7:08:18:2b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:38 2025 GMT
            Not After : Apr  8 13:53:38 2026 GMT
        Subject: CN=282DA5D08BF6471209AFE5345D4BAD8D00BDF832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:b7:40:ae:b3:23:20:ec:8c:6f:06:b1:9f:
                    4f:73:cb:f0:f9:21:13:9c:9e:35:42:58:24:bb:3e:
                    ab:49:7b:15:a4:f5:47:05:bb:22:14:dd:58:22:e0:
                    06:47:5d:6e:69:fd:8a:3c:6b:86:2f:b7:4f:e5:42:
                    52:14:4b:c3:76:e1:71:73:69:87:94:a5:f8:ed:b1:
                    51:87:72:ce:59:e8:7a:c1:e0:b8:ff:d8:af:08:37:
                    25:ae:99:d2:84:22:c1:85:ce:64:18:a6:74:36:7d:
                    f3:32:3d:62:2e:8c:a6:84:16:23:a1:0a:63:48:36:
                    8a:4f:8c:2d:73:8f:c9:ff:50:57:60:45:e0:5a:01:
                    bf:36:ef:2b:d1:48:2f:4d:96:c6:dd:26:16:7c:c8:
                    d4:7c:84:b5:9d:23:e2:38:a6:39:d2:62:3d:60:84:
                    11:32:a1:20:28:a2:58:ca:8b:04:79:48:4a:46:9f:
                    31:08:7b:eb:32:14:8c:95:bf:1b:a0:05:35:94:3f:
                    9f:00:6d:0c:ac:df:15:06:d7:ea:69:0a:df:87:52:
                    62:fa:61:12:22:98:6e:ee:2c:99:b4:a5:37:23:9c:
                    b9:84:c1:68:24:0c:62:ee:df:65:b2:a8:5d:08:fd:
                    d3:0d:e4:ee:00:9a:c7:30:d5:25:36:7b:11:3b:f0:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2D:A5:D0:8B:F6:47:12:09:AF:E5:34:5D:4B:AD:8D:00:BD:F8:32
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31372e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:df:fa:0c:49:75:1e:b0:52:82:d3:ff:fc:24:6f:6d:b9:d6:
         e3:80:49:7d:bf:84:7f:76:6a:dc:e4:a2:15:68:91:e0:0d:89:
         9f:ba:c8:83:3b:4f:f0:21:e2:74:cc:97:33:77:95:e7:86:f6:
         78:18:7d:cb:5d:11:5a:c8:ba:1a:ba:db:f3:a9:c6:c7:35:7f:
         c5:bf:16:21:8f:70:27:05:6f:ed:22:65:38:ae:29:62:a7:5b:
         40:42:b3:e9:d8:81:0e:d4:c7:5f:36:2f:8d:44:14:c8:51:e8:
         1e:8d:e6:93:43:34:55:15:56:9f:6c:40:36:4a:85:22:48:9b:
         28:27:b0:38:a6:f8:a5:8d:a9:be:20:b3:89:78:ba:cd:0f:5f:
         60:ee:b3:cc:bd:86:70:16:b7:e1:1f:5e:58:04:98:de:52:4c:
         66:e1:d3:d2:28:70:f8:74:8e:a3:fc:f2:4b:6d:57:f9:36:66:
         64:6c:a9:b4:3d:28:a2:f1:fa:5f:34:12:2b:48:d0:ef:bd:c5:
         f3:83:97:d0:c7:c6:2d:80:9c:c8:1e:45:ea:89:6a:55:94:6a:
         c2:8c:10:b8:e1:77:ed:02:95:ef:20:f2:ee:da:79:17:10:0d:
         45:49:35:13:71:95:cd:38:19:71:e0:d0:b7:e1:33:00:94:94:
         d1:7b:ec:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net