Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3231203d3e20323733333039.roa
File:                     3139312e33372e3231362e302f32312d3231203d3e20323733333039.roa (raw, json)
Hash identifier:          fn/wMegFg6UbuFJno8sMKXB9B0lLxREJqqCrIuFhJiM=
Subject key identifier:   1C:A5:56:F4:30:EA:C7:C8:4C:F5:FB:A0:44:35:3E:00:23:A8:93:D1
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       6180EB226A19B586726291A580EB8A726330108F
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3231203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:35 +0000
ROA not before:           Wed 09 Apr 2025 13:48:35 +0000
ROA not after:            Wed 08 Apr 2026 13:53:35 +0000
asID:                     273309
IP address blocks:        191.37.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:80:eb:22:6a:19:b5:86:72:62:91:a5:80:eb:8a:72:63:30:10:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:35 2025 GMT
            Not After : Apr  8 13:53:35 2026 GMT
        Subject: CN=1CA556F430EAC7C84CF5FBA044353E0023A893D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:4f:f2:5d:b4:99:28:f9:92:66:b5:1a:95:
                    47:31:58:64:2c:cc:b4:bf:42:68:cf:bb:13:50:cf:
                    48:c3:eb:b2:cb:a9:7c:02:d7:6f:6f:59:23:71:68:
                    e6:24:ff:14:4a:0b:6c:af:65:56:8d:2b:8d:bd:91:
                    bc:cf:22:c7:b1:11:c5:20:53:6d:d0:bf:5f:08:53:
                    e3:de:f0:ef:71:5d:b6:18:ea:69:2a:25:ba:3a:a3:
                    f5:ba:ab:e4:51:21:3c:e3:98:c9:d5:de:30:09:55:
                    2e:81:bf:e0:1c:df:cf:22:b2:2c:96:3d:07:da:83:
                    42:12:75:44:35:e7:64:3b:3f:00:79:ec:25:76:28:
                    d2:d6:ad:37:ec:8c:80:43:4c:94:c7:8b:76:d1:ae:
                    55:12:af:14:25:ae:3f:25:3a:60:96:4d:a5:63:21:
                    ed:54:9d:7b:bc:72:3b:e6:e3:be:52:58:d6:2d:bc:
                    5c:eb:d6:a6:1a:95:c6:e1:76:33:8d:26:ed:0e:c3:
                    78:0e:67:f0:90:0a:cf:89:f5:f4:5f:74:dc:1c:54:
                    99:3f:39:3b:57:44:30:49:8d:bb:dc:4b:63:99:03:
                    d3:2c:ea:8d:cc:2b:1b:f6:e8:d7:b6:d2:60:dc:5c:
                    d9:5f:a9:52:20:9d:70:e5:fc:f1:9f:3a:23:f6:1a:
                    d5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A5:56:F4:30:EA:C7:C8:4C:F5:FB:A0:44:35:3E:00:23:A8:93:D1
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3231203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:65:82:21:0b:e7:72:9a:0a:8c:84:a4:d2:68:0c:3c:51:00:
         d1:c2:3a:c5:3e:f9:07:e9:0c:83:66:1a:f7:3a:56:7a:03:07:
         6d:34:42:cb:91:4e:fb:4c:8a:26:2d:1e:24:f4:c6:c9:aa:82:
         25:da:17:a2:bf:a2:4e:99:23:39:89:32:12:29:57:ce:33:8e:
         c9:e4:2b:08:bb:56:41:7b:77:90:16:33:31:34:92:dd:51:fe:
         7a:7f:90:bf:66:c3:d8:76:b6:80:cd:a4:c6:1b:cf:f8:95:23:
         cc:37:54:2e:7e:3f:29:f3:9b:6e:44:c9:97:5c:d5:ed:a8:c7:
         db:02:f0:db:34:c3:c9:a3:4c:c9:a0:d5:a5:18:27:4c:3b:8e:
         5a:29:3f:cb:de:23:b6:31:32:ab:71:20:0e:24:5c:2e:2c:f7:
         04:12:a4:eb:52:1c:9d:ed:9a:6e:7e:5c:90:c7:fd:37:4a:fb:
         32:85:8f:b6:48:20:4c:bf:2a:2a:89:13:f8:5b:b7:b4:0c:59:
         9c:8e:11:c3:4e:26:78:85:aa:18:c0:44:f1:28:ce:1d:24:e8:
         17:51:d8:6b:3b:6e:fb:a5:ab:d5:d7:e1:cd:6d:b3:e5:d1:90:
         7d:f9:3e:cc:15:ed:a7:d0:ef:db:12:9a:39:f1:65:1d:55:50:
         fc:b3:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net