Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32322d3232203d3e203631373238.roa
File:                     3133312e37322e35362e302f32322d3232203d3e203631373238.roa (raw, json)
Hash identifier:          jZz7X/F0KiEMFJqEZUAvKOQmYigLQZYGdxcufcixMxE=
Subject key identifier:   76:9A:EE:5F:C7:58:74:5A:40:3E:2D:B2:B0:58:EF:3F:65:83:40:44
Certificate issuer:       /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial:       18B6CB6E14EB6B42AC3B0C8AE04CBD2D9FD3B584
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32322d3232203d3e203631373238.roa
Signing time:             Thu 17 Apr 2025 22:00:00 +0000
ROA not before:           Thu 17 Apr 2025 21:55:00 +0000
ROA not after:            Thu 16 Apr 2026 22:00:00 +0000
asID:                     61728
IP address blocks:        131.72.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
                          rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b6:cb:6e:14:eb:6b:42:ac:3b:0c:8a:e0:4c:bd:2d:9f:d3:b5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Validity
            Not Before: Apr 17 21:55:00 2025 GMT
            Not After : Apr 16 22:00:00 2026 GMT
        Subject: CN=769AEE5FC758745A403E2DB2B058EF3F65834044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:85:32:a9:f3:3c:68:e1:36:3d:bc:9a:cd:
                    59:e6:42:49:0c:ea:e0:fe:4c:9c:0c:59:b6:23:36:
                    73:be:40:46:38:fd:f1:87:8f:32:70:7f:27:d1:f9:
                    8f:1e:68:88:a3:86:25:2e:aa:b5:4c:01:a7:23:05:
                    8a:23:f8:e7:36:62:16:c5:62:cf:24:ad:15:61:d5:
                    d6:f4:78:8c:49:17:1f:8b:a2:4e:20:08:b8:98:96:
                    17:39:0c:0c:07:13:da:f6:25:ff:27:07:a4:29:59:
                    f7:49:57:9d:6b:00:28:f6:aa:28:a3:10:07:7f:e9:
                    5c:f3:ab:58:e0:a6:8d:9e:68:67:70:38:07:9a:b5:
                    63:07:38:35:89:66:23:6e:4f:12:ee:c4:f9:ed:3b:
                    2f:bc:21:4e:d0:8d:48:fd:ff:00:57:61:cb:dd:c1:
                    87:7c:c9:00:75:ee:1b:8d:b8:0d:61:0b:7f:6f:c1:
                    35:fe:3a:9a:28:a6:71:db:1f:3d:4c:91:13:39:fa:
                    15:9d:40:33:ed:77:ac:ba:c8:05:23:6a:9a:48:ec:
                    d7:08:84:e5:19:43:b6:b2:95:ff:63:48:e5:9e:f8:
                    21:94:01:78:e3:9c:01:f2:c0:9a:50:20:f0:8b:7d:
                    ba:b3:26:79:80:a6:15:63:48:55:ca:27:8e:74:d6:
                    8e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9A:EE:5F:C7:58:74:5A:40:3E:2D:B2:B0:58:EF:3F:65:83:40:44
            X509v3 Authority Key Identifier:
                keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32322d3232203d3e203631373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:d8:85:3f:c5:59:6b:99:13:ae:3e:fc:d6:2c:9c:4a:35:ed:
         b4:5a:7e:9d:e9:83:61:33:a1:87:d4:70:4b:a3:98:c3:87:70:
         59:0d:f5:62:f1:a8:02:e9:8e:3f:3e:b5:35:50:28:b7:55:79:
         07:7d:97:df:64:d3:26:85:96:69:b9:6a:62:1b:c0:c9:cf:6e:
         b9:f3:cc:2a:35:13:a7:6c:d9:68:24:5c:09:1f:96:61:d9:f5:
         c0:ae:b4:36:ad:fc:74:e3:af:ff:6c:87:6d:62:30:4f:5a:9f:
         30:5b:bd:16:4c:fa:42:1a:94:1e:0e:43:3e:71:8b:49:a6:9b:
         c6:b9:50:76:52:76:cf:3c:5b:04:0d:7f:11:09:34:e1:f8:a8:
         ee:92:2f:ed:a3:1c:bf:e3:15:77:ef:09:30:d4:52:62:65:fc:
         9f:62:02:32:ea:29:2d:63:6a:05:a9:47:b9:fd:f6:81:69:33:
         21:0a:9e:ce:1d:00:25:a7:cb:b6:db:2c:42:f2:e7:31:41:4f:
         bb:a1:9f:79:07:24:91:87:2a:31:f6:ae:b0:bb:6a:97:4f:8a:
         2a:b2:bf:78:4f:f4:62:92:e7:19:5a:21:82:5a:7a:c4:47:c4:
         95:39:ff:1e:4d:7b:a7:4f:ba:66:5e:66:04:68:43:23:0c:eb:
         75:bf:6c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:27 2025 by rpki-client on console.sobornost.net