Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232302e302f32342d3234203d3e20323733333039.roa
File:                     3139312e33372e3232302e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          lruEfrv4Z9pGKaQqGMQl1PfO8QLCr5sQWQCK35gcxZU=
Subject key identifier:   68:79:BB:D6:55:7A:0B:38:50:00:F3:D8:71:F6:D1:39:62:3B:3B:6E
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       453F55AD3DCF9E80330703B99279E8BB71DEE9F0
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232302e302f32342d3234203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:37 +0000
ROA not before:           Wed 09 Apr 2025 13:48:37 +0000
ROA not after:            Wed 08 Apr 2026 13:53:37 +0000
asID:                     273309
IP address blocks:        191.37.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3f:55:ad:3d:cf:9e:80:33:07:03:b9:92:79:e8:bb:71:de:e9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:37 2025 GMT
            Not After : Apr  8 13:53:37 2026 GMT
        Subject: CN=6879BBD6557A0B385000F3D871F6D139623B3B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:36:c7:f8:5e:fb:0f:16:8a:9e:ea:d9:e8:
                    1c:97:ca:41:8d:82:c3:12:1d:75:ba:e0:bc:c0:cb:
                    57:0d:9c:2f:7c:55:9e:97:c1:9a:e5:41:23:71:b7:
                    53:9b:49:7c:be:5e:00:ca:94:19:4f:be:7f:e2:2e:
                    e3:a6:1d:82:32:f7:d3:e5:21:3a:05:ba:e5:2b:13:
                    09:80:cc:0a:c4:6b:93:7d:fd:e2:04:b4:bf:98:e6:
                    ec:1d:21:60:bd:1c:24:d4:a9:63:24:f5:7e:63:b0:
                    a0:ae:a0:c5:4b:13:08:15:eb:d4:82:4c:7e:de:ac:
                    9c:3f:3f:e1:70:5e:8e:9e:f9:7b:f1:00:16:8d:5f:
                    85:91:83:f1:b7:c9:81:e0:30:c0:5b:65:c8:6f:01:
                    7f:d7:a2:71:1f:92:6b:03:1a:e7:be:06:85:fc:bf:
                    1d:87:a3:52:20:22:46:32:e4:da:06:41:df:82:15:
                    39:12:0a:c3:1a:61:2f:02:4d:d8:bb:af:49:32:3d:
                    6a:d2:bc:2d:56:a7:e0:12:ca:44:be:a4:fc:5e:3e:
                    a9:dc:fe:54:03:66:7d:8b:20:2a:8e:0e:29:e8:ec:
                    7e:dc:16:3e:2c:6e:36:aa:98:db:b1:e6:50:08:e1:
                    c0:02:03:e5:fe:f5:f2:98:ff:4c:ce:37:06:c9:50:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:79:BB:D6:55:7A:0B:38:50:00:F3:D8:71:F6:D1:39:62:3B:3B:6E
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232302e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:e9:cc:e2:1a:02:74:d6:ff:67:2f:28:0a:6e:27:67:6e:6b:
         4d:30:53:c5:6f:ee:7c:29:8e:ca:52:ed:42:a3:1d:9c:c7:4d:
         66:d4:50:56:63:96:8f:d6:db:25:fe:12:ed:0f:61:9d:8f:2e:
         11:71:2f:81:d0:97:5a:56:a3:9b:3f:80:50:ea:c0:bb:6e:6d:
         bc:e6:a5:1f:49:3b:b2:03:a6:ea:d1:c0:27:7d:19:21:0d:58:
         07:1f:e1:ff:93:45:60:93:70:3a:05:6a:0a:9c:a8:3e:57:33:
         80:3e:c2:e3:56:f3:63:b9:25:bd:e8:7a:1e:c5:fd:71:fe:15:
         3c:11:be:9e:2b:1e:43:7b:64:f5:d4:a9:96:f9:20:2c:5d:ad:
         3e:e0:98:4c:97:0a:ca:1d:81:6c:7a:04:8c:23:1f:ea:c3:a0:
         bb:d8:b6:e1:33:39:f2:51:36:6b:71:ab:12:62:c9:43:26:39:
         6e:20:e1:44:33:5f:ff:72:61:57:93:1b:d7:19:d8:cd:c1:a0:
         56:7e:72:0b:80:0b:da:a2:e5:7a:0c:b4:25:e7:ac:f3:d2:91:
         4a:5e:34:b9:58:5e:03:5b:13:2f:aa:9d:09:21:02:1c:d6:ec:
         92:16:0d:41:c5:08:69:3d:d5:2e:00:7e:fb:6e:4d:f6:f1:ff:
         01:3c:e4:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURT9VrT3PnoAzBwO5knnou3He6fAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE0NkI0QUI5RkVCQzczQUZERjEzNTA1QkVDRTE2RDc0
MTc3OUIwMzAeFw0yNTA0MDkxMzQ4MzdaFw0yNjA0MDgxMzUzMzdaMDMxMTAvBgNV
BAMTKDY4NzlCQkQ2NTU3QTBCMzg1MDAwRjNEODcxRjZEMTM5NjIzQjNCNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRyTbH+F77DxaKnurZ6ByXykGN
gsMSHXW64LzAy1cNnC98VZ6XwZrlQSNxt1ObSXy+XgDKlBlPvn/iLuOmHYIy99Pl
IToFuuUrEwmAzArEa5N9/eIEtL+Y5uwdIWC9HCTUqWMk9X5jsKCuoMVLEwgV69SC
TH7erJw/P+FwXo6e+XvxABaNX4WRg/G3yYHgMMBbZchvAX/XonEfkmsDGue+BoX8
vx2Ho1IgIkYy5NoGQd+CFTkSCsMaYS8CTdi7r0kyPWrSvC1Wp+ASykS+pPxePqnc
/lQDZn2LICqODino7H7cFj4sbjaqmNux5lAI4cACA+X+9fKY/0zONwbJUIQPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaHm71lV6CzhQAPPYcfbROWI7O24wHwYDVR0j
BBgwFoAUKka0q5/rxzr98TUFvs4W10F3mwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8yQTQ2QjRBQjlGRUJDNzNBRkRGMTM1MDVCRUNFMTZENzQxNzc5QjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNDZCNEFCOUZFQkM3M0FG
REYxMzUwNUJFQ0UxNkQ3NDE3NzlCMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzEzOTMxMmUzMzM3MmUzMjMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzMzMzMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/JdwwDQYJKoZIhvcNAQELBQADggEBAFnpzOIa
AnTW/2cvKApuJ2dua00wU8Vv7nwpjspS7UKjHZzHTWbUUFZjlo/W2yX+Eu0PYZ2P
LhFxL4HQl1pWo5s/gFDqwLtubbzmpR9JO7IDpurRwCd9GSENWAcf4f+TRWCTcDoF
agqcqD5XM4A+wuNW82O5Jb3oeh7F/XH+FTwRvp4rHkN7ZPXUqZb5ICxdrT7gmEyX
CsodgWx6BIwjH+rDoLvYtuEzOfJRNmtxqxJiyUMmOW4g4UQzX/9yYVeTG9cZ2M3B
oFZ+cguAC9qi5XoMtCXnrPPSkUpeNLlYXgNbEy+qnQkhAhzW7JIWDUHFCGk91S4A
fvtuTfbx/wE85KM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net