Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232332e302f32342d3234203d3e20323733333039.roa
File:                     3139312e33372e3232332e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          TaXm7UUqgj4Sq6KRRAXEu65kpEuX67mHmhAsSnFhYwU=
Subject key identifier:   5E:D9:A2:B5:5D:0F:BF:0F:73:E1:13:17:59:39:0D:FB:BA:69:C5:42
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       2EC71C5B23D1E2C1AD2BB7BC6DB03C86CEBD3A7F
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232332e302f32342d3234203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:37 +0000
ROA not before:           Wed 09 Apr 2025 13:48:37 +0000
ROA not after:            Wed 08 Apr 2026 13:53:37 +0000
asID:                     273309
IP address blocks:        191.37.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c7:1c:5b:23:d1:e2:c1:ad:2b:b7:bc:6d:b0:3c:86:ce:bd:3a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:37 2025 GMT
            Not After : Apr  8 13:53:37 2026 GMT
        Subject: CN=5ED9A2B55D0FBF0F73E1131759390DFBBA69C542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:ac:a0:99:fb:56:9e:27:66:d7:4c:25:b8:
                    2f:85:0c:fa:d5:87:48:e0:98:6e:77:4f:5e:03:d0:
                    f7:a8:72:90:28:88:71:a7:1e:90:b1:22:e2:c8:e2:
                    45:b3:71:ea:c1:28:0b:a3:ba:70:48:e1:44:03:6a:
                    bb:56:5b:b5:2f:42:1e:e0:9d:07:3d:bd:d0:45:44:
                    1e:25:52:01:39:be:14:bc:06:6d:8c:c5:ef:e4:70:
                    8d:6c:87:c9:72:b3:f3:c2:2b:f3:0b:e6:67:d2:e0:
                    16:5d:cf:24:d1:b3:7d:7d:d0:14:eb:53:16:32:e6:
                    e6:16:66:9c:83:41:0e:a2:ea:42:95:6e:39:c2:c9:
                    36:78:df:1c:78:89:f6:fe:a5:b8:01:19:8c:49:23:
                    cb:9f:b8:98:ba:1d:79:45:69:1f:5c:bc:57:3c:32:
                    ad:bb:1e:9c:05:6c:e6:d5:6e:ea:66:9d:39:83:a9:
                    c8:4f:41:02:ae:11:55:e1:76:99:d1:75:95:58:93:
                    7b:3d:e4:14:4f:b7:b2:c8:0a:cc:12:0b:88:f0:86:
                    f9:16:61:4b:19:cb:06:f7:b4:2b:e1:4e:9e:6c:3d:
                    24:4b:ed:d1:c4:ea:18:61:42:44:04:43:d2:b2:68:
                    76:eb:d6:7d:7b:48:fe:63:86:3f:8e:3e:5e:9d:ab:
                    fb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D9:A2:B5:5D:0F:BF:0F:73:E1:13:17:59:39:0D:FB:BA:69:C5:42
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232332e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:9d:a7:f9:21:a3:ef:1e:b2:8c:cd:fe:cd:48:8f:03:79:
         91:08:64:92:7c:56:56:e3:14:33:d1:f6:3c:d0:68:60:cc:d7:
         27:76:f0:87:9f:74:9a:fb:26:b7:17:32:bb:58:38:76:04:e4:
         8f:ed:ae:1e:4b:8a:50:fa:e4:16:04:25:10:c1:1b:7e:c4:41:
         f0:67:45:59:da:3e:d9:2c:68:d6:aa:e3:18:70:82:35:f2:74:
         1f:4a:fb:a4:70:71:62:87:33:68:e9:10:86:36:e8:6c:3d:e4:
         2e:a2:9a:43:7f:58:b8:6d:8c:c9:0e:09:d4:e3:41:5e:c7:01:
         bd:f1:5c:07:7e:34:6d:86:ce:e6:7b:5e:13:32:60:d0:94:10:
         a2:1c:2a:87:68:79:8e:0e:6c:7e:b4:58:71:6f:e3:b8:b2:60:
         47:31:fd:d6:ee:90:2c:df:6d:3b:64:ed:02:ee:cb:fc:b6:d8:
         09:d4:98:11:6a:46:78:68:de:36:f8:88:88:26:de:b2:df:bc:
         dd:dd:2c:d6:06:ab:ea:87:33:77:97:5f:fc:5f:52:4c:e0:fb:
         50:37:b8:ad:49:16:51:b8:eb:fa:1b:d7:b1:fd:e0:ee:45:0d:
         54:aa:9e:7d:88:a5:21:03:6e:eb:bd:73:43:b8:20:4d:b3:e9:
         7c:eb:c9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net