Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232322e302f32342d3234203d3e20323733333039.roa
File:                     3139312e33372e3232322e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          T0IithMtpLqp043UEe3iSkBERNCRb5/0gmG3ouvc1qo=
Subject key identifier:   2A:BD:9E:1A:F5:B4:E4:6E:AC:8D:AA:D6:25:1D:1A:C6:3B:C0:BE:5C
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       5D2869D1CEDDDC41ADF7BCE6FE46AE38179813CB
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232322e302f32342d3234203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:37 +0000
ROA not before:           Wed 09 Apr 2025 13:48:37 +0000
ROA not after:            Wed 08 Apr 2026 13:53:37 +0000
asID:                     273309
IP address blocks:        191.37.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:28:69:d1:ce:dd:dc:41:ad:f7:bc:e6:fe:46:ae:38:17:98:13:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:37 2025 GMT
            Not After : Apr  8 13:53:37 2026 GMT
        Subject: CN=2ABD9E1AF5B4E46EAC8DAAD6251D1AC63BC0BE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:10:17:b6:03:c3:8e:a9:df:54:58:b5:c9:
                    15:b0:4c:ac:6f:b8:12:9f:2c:3f:6e:f3:5a:9b:c6:
                    b3:ec:0d:96:bd:03:f4:a4:70:f0:e6:50:23:d8:fa:
                    e9:64:0a:32:77:e8:e9:04:de:0c:6d:b3:bf:49:c8:
                    5c:d4:6f:de:1e:c6:4e:8f:25:1d:cd:2a:64:56:8a:
                    85:bd:13:3b:e7:31:db:3b:8d:ea:f0:97:ef:f5:84:
                    77:84:ee:48:52:7a:27:41:97:5c:88:8f:82:16:da:
                    61:94:10:bc:df:1b:65:e2:e9:d4:54:a9:66:f7:d4:
                    71:c3:a0:77:87:ee:89:d9:95:6e:0c:8b:1f:2f:85:
                    49:87:9c:42:dd:27:9b:16:56:84:df:a2:9a:44:6d:
                    ca:ff:8e:33:2e:a4:a8:7c:1c:26:f4:46:73:81:21:
                    db:9c:b7:eb:c6:f6:e2:ab:1e:f8:5c:ab:45:7c:51:
                    40:26:ef:f1:3a:c4:52:4e:31:34:84:3e:c7:6b:19:
                    5a:10:ce:21:a7:21:91:dd:e7:78:84:f6:f4:26:d1:
                    d8:16:33:d7:de:82:17:c1:a2:2f:7b:39:20:c1:3f:
                    e9:3c:38:cb:40:9c:05:c2:c3:3f:e2:11:87:4f:59:
                    dc:f9:d9:2b:d0:f4:88:21:63:a4:8b:85:ba:ac:64:
                    76:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BD:9E:1A:F5:B4:E4:6E:AC:8D:AA:D6:25:1D:1A:C6:3B:C0:BE:5C
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232322e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:25:78:68:cc:ec:45:a4:bd:16:46:4a:34:df:f9:94:42:6c:
         94:7d:74:41:94:c1:11:7f:58:9b:39:79:10:4e:92:81:bb:24:
         b4:fb:5a:fd:54:30:81:d6:2f:7a:2d:96:0f:0a:3e:fd:f4:71:
         22:94:0f:ef:cd:9c:3f:f1:d8:64:7f:ba:32:cf:81:b8:2c:ee:
         dd:0f:09:e8:30:cc:89:bb:f6:6a:e5:ca:2c:8b:1a:01:d8:6c:
         b8:52:62:8d:30:36:fa:35:87:1d:38:51:4b:99:7a:9c:94:2d:
         8d:43:e7:92:5c:5d:42:d0:c3:ff:4a:e0:b5:d0:99:b5:6c:27:
         10:e2:43:e8:17:4a:3f:15:05:41:83:f0:a8:0c:c0:d2:0c:ef:
         13:a4:a0:a9:f8:ef:5c:df:6b:41:73:9d:b4:a6:43:9a:f6:3d:
         7a:42:54:39:65:79:57:68:3d:85:aa:3b:31:62:fd:ec:17:7d:
         c8:67:d1:74:c8:ab:75:64:50:88:84:3b:4b:27:ca:a2:45:3b:
         44:df:a5:14:ee:ff:79:b4:5c:55:08:bb:1b:fe:c8:66:db:4c:
         d2:1b:34:21:a1:59:f3:05:b0:55:38:f7:5d:94:c0:8f:1f:ea:
         74:d6:6d:02:67:15:73:59:ce:b8:d5:dd:db:ca:d6:05:41:b4:
         25:66:5e:3b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXShp0c7d3EGt97zm/kauOBeYE8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE0NkI0QUI5RkVCQzczQUZERjEzNTA1QkVDRTE2RDc0
MTc3OUIwMzAeFw0yNTA0MDkxMzQ4MzdaFw0yNjA0MDgxMzUzMzdaMDMxMTAvBgNV
BAMTKDJBQkQ5RTFBRjVCNEU0NkVBQzhEQUFENjI1MUQxQUM2M0JDMEJFNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQhAXtgPDjqnfVFi1yRWwTKxv
uBKfLD9u81qbxrPsDZa9A/SkcPDmUCPY+ulkCjJ36OkE3gxts79JyFzUb94exk6P
JR3NKmRWioW9EzvnMds7jerwl+/1hHeE7khSeidBl1yIj4IW2mGUELzfG2Xi6dRU
qWb31HHDoHeH7onZlW4Mix8vhUmHnELdJ5sWVoTfoppEbcr/jjMupKh8HCb0RnOB
Iduct+vG9uKrHvhcq0V8UUAm7/E6xFJOMTSEPsdrGVoQziGnIZHd53iE9vQm0dgW
M9feghfBoi97OSDBP+k8OMtAnAXCwz/iEYdPWdz52SvQ9IghY6SLhbqsZHa1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKr2eGvW05G6sjarWJR0axjvAvlwwHwYDVR0j
BBgwFoAUKka0q5/rxzr98TUFvs4W10F3mwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8yQTQ2QjRBQjlGRUJDNzNBRkRGMTM1MDVCRUNFMTZENzQxNzc5QjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNDZCNEFCOUZFQkM3M0FG
REYxMzUwNUJFQ0UxNkQ3NDE3NzlCMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzEzOTMxMmUzMzM3MmUzMjMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzMzMzMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/Jd4wDQYJKoZIhvcNAQELBQADggEBAEQleGjM
7EWkvRZGSjTf+ZRCbJR9dEGUwRF/WJs5eRBOkoG7JLT7Wv1UMIHWL3otlg8KPv30
cSKUD+/NnD/x2GR/ujLPgbgs7t0PCegwzIm79mrlyiyLGgHYbLhSYo0wNvo1hx04
UUuZepyULY1D55JcXULQw/9K4LXQmbVsJxDiQ+gXSj8VBUGD8KgMwNIM7xOkoKn4
71zfa0FznbSmQ5r2PXpCVDlleVdoPYWqOzFi/ewXfchn0XTIq3VkUIiEO0snyqJF
O0TfpRTu/3m0XFUIuxv+yGbbTNIbNCGhWfMFsFU4912UwI8f6nTWbQJnFXNZzrjV
3dvK1gVBtCVmXjs=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net