Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3232203d3e20323733333039.roa
File:                     3133382e3231392e34382e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          g607WI0mFB10pHBIspi0LFjpXYFU3g15j3/pshlF9c0=
Subject key identifier:   48:68:6D:89:1E:1D:B7:E5:D4:AF:DF:85:60:B3:6C:79:D2:DF:A0:5E
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       1690428E0E8DF2B41223101808D9BB4E00A8C16F
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3232203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:40 +0000
ROA not before:           Wed 09 Apr 2025 13:48:40 +0000
ROA not after:            Wed 08 Apr 2026 13:53:40 +0000
asID:                     273309
IP address blocks:        138.219.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:90:42:8e:0e:8d:f2:b4:12:23:10:18:08:d9:bb:4e:00:a8:c1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:40 2025 GMT
            Not After : Apr  8 13:53:40 2026 GMT
        Subject: CN=48686D891E1DB7E5D4AFDF8560B36C79D2DFA05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:f8:6b:85:e2:2a:2d:4c:ea:ad:12:c8:4c:
                    b2:54:a9:eb:d2:a7:93:d2:00:04:79:56:db:b8:c0:
                    d0:2f:44:2f:0f:42:29:ed:b1:91:a6:71:b8:a8:34:
                    e5:f4:f4:34:18:c5:d3:98:4d:70:9f:9e:f9:e3:d7:
                    b9:97:16:d8:02:a1:36:2f:b6:37:36:92:93:54:28:
                    cb:0f:32:ce:dc:27:fe:96:03:fe:1d:86:d2:0b:7c:
                    cc:22:cd:8c:3d:a5:20:3f:3f:6a:12:1e:67:e1:b7:
                    81:39:0c:ae:9d:1d:9c:91:41:c6:71:9c:5f:b4:07:
                    38:d9:a5:49:55:a5:c1:2d:e7:fa:fd:fd:0b:1f:98:
                    f5:ed:23:65:3e:0f:0c:98:58:88:9b:2c:34:1f:e8:
                    57:e4:8c:9d:cd:2e:d2:75:09:55:bb:9c:d7:60:13:
                    ea:ae:24:11:8f:c2:e9:88:52:1b:cf:0a:6a:7e:d0:
                    03:0d:44:0c:a3:23:f1:40:ca:c8:2f:7b:86:2e:4b:
                    df:68:6e:54:b9:2c:e6:7f:b1:ea:86:e6:1f:9c:53:
                    9d:61:b8:d0:81:10:22:24:1a:9a:94:8e:96:5f:37:
                    78:a3:ce:bd:37:ed:aa:45:f7:91:50:42:15:99:5d:
                    f5:89:88:e0:c3:98:d9:0c:59:a0:bb:ae:56:6b:c9:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:68:6D:89:1E:1D:B7:E5:D4:AF:DF:85:60:B3:6C:79:D2:DF:A0:5E
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:fd:9c:b7:2e:09:11:08:01:96:6c:75:9b:ed:f5:1d:04:d5:
         e2:5a:70:70:29:c2:2f:52:60:ab:b1:b3:d3:f6:b7:59:a4:3a:
         68:f9:d9:7d:28:3b:69:a6:bc:92:ad:9d:ff:60:0a:65:d3:1d:
         d3:14:77:ea:fa:29:8f:78:1f:ed:1f:6c:53:cc:61:d6:fa:3e:
         a2:c3:3b:68:a9:10:c1:1e:77:48:7f:d6:c3:d5:d0:f9:33:c5:
         d7:ad:20:62:9d:92:aa:0e:34:5d:33:43:13:1c:61:d1:d3:e3:
         f6:45:15:8c:ce:02:cf:0e:ba:b7:05:f8:a0:b5:30:51:db:58:
         5c:18:81:b3:7b:81:ae:5e:c6:cf:e0:ea:5b:3a:3a:f2:7c:c3:
         a7:93:a0:88:d5:7a:f5:41:3a:6f:eb:eb:0a:19:2c:c2:6b:2e:
         e1:21:70:d0:50:89:5a:f7:76:52:9b:8b:5f:de:cc:72:b6:09:
         8a:54:26:bb:5b:c1:4b:8b:6f:cf:ea:d1:f7:70:a6:fc:04:5e:
         1b:90:6d:e9:73:6a:17:5a:ad:98:db:2c:5b:8b:fd:98:3c:c3:
         40:ce:78:70:5d:d6:ee:1e:c5:38:01:9b:31:0e:e8:14:97:35:
         6a:d2:dc:4d:62:47:d7:62:17:6d:38:3f:3d:40:df:40:1d:e3:
         fb:1e:6c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net