Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35372e302f32342d3234203d3e203631373238.roa
File:                     3133312e37322e35372e302f32342d3234203d3e203631373238.roa (raw, json)
Hash identifier:          0/f8gRcEVe4aiCRUneXls5LntfjDqGMrnu3hN2i+vYo=
Subject key identifier:   9A:7C:5B:00:D4:B1:8F:E5:FC:C6:34:A0:84:6E:16:5C:75:F9:7F:12
Certificate issuer:       /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial:       323627EB4C7ED9EF8802A70F0931D6428EF2085C
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35372e302f32342d3234203d3e203631373238.roa
Signing time:             Thu 17 Apr 2025 22:00:01 +0000
ROA not before:           Thu 17 Apr 2025 21:55:01 +0000
ROA not after:            Thu 16 Apr 2026 22:00:01 +0000
asID:                     61728
IP address blocks:        131.72.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
                          rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 02:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:36:27:eb:4c:7e:d9:ef:88:02:a7:0f:09:31:d6:42:8e:f2:08:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Validity
            Not Before: Apr 17 21:55:01 2025 GMT
            Not After : Apr 16 22:00:01 2026 GMT
        Subject: CN=9A7C5B00D4B18FE5FCC634A0846E165C75F97F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:1d:b8:cc:6f:95:b2:73:8b:96:5f:47:5e:
                    a8:52:ca:85:a0:6a:36:06:1f:7a:49:21:07:b8:b1:
                    31:be:26:16:6b:dc:6f:92:21:46:b9:e8:8e:a5:9c:
                    b0:c7:f0:88:17:2e:40:56:b4:a3:b8:a7:57:af:8c:
                    b9:dc:4a:61:90:8a:a5:26:95:ff:b6:ab:bf:b2:62:
                    e2:23:26:5c:98:69:2f:1d:f1:cb:e4:4b:1d:e1:4a:
                    9e:32:fd:63:f1:8b:58:f9:00:93:40:c1:f5:6d:c3:
                    24:31:6f:30:65:f1:b1:1e:54:fe:57:2a:f1:b5:cf:
                    74:dd:b6:bf:1a:ed:dd:d3:16:ac:c3:8f:d2:aa:e4:
                    7a:49:d8:70:bd:a8:d8:46:83:4c:e9:33:ad:63:75:
                    db:e5:26:11:05:50:7c:88:e7:d2:24:95:1d:c8:29:
                    80:64:19:d2:25:76:61:3c:1e:e8:94:e7:1d:34:60:
                    ea:a2:74:7b:87:3f:b1:ab:7f:be:83:9a:9d:1e:d7:
                    68:22:b9:05:47:dd:59:d5:37:48:04:ec:8b:1d:2f:
                    c6:77:0f:3e:fb:9e:a3:ff:f6:cd:0d:67:06:e5:e1:
                    0e:4b:28:99:10:2b:80:a2:a9:fb:d2:90:b2:07:c0:
                    b6:69:32:a6:2a:3e:8a:73:b4:1a:93:7b:29:92:cf:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7C:5B:00:D4:B1:8F:E5:FC:C6:34:A0:84:6E:16:5C:75:F9:7F:12
            X509v3 Authority Key Identifier:
                keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35372e302f32342d3234203d3e203631373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:b0:47:26:36:8e:86:de:ec:c9:17:d9:77:4e:33:e3:d1:c5:
         86:78:f0:94:f8:89:b8:98:ca:5d:ca:39:59:1d:ff:72:f4:32:
         9d:f5:ea:3a:31:d2:d2:1a:7f:16:bd:db:0b:16:b7:d6:f5:e3:
         2d:f6:71:62:b3:d1:3c:91:2c:d0:bb:e5:27:a1:8d:d4:12:66:
         12:51:f8:62:4b:df:88:b6:fc:7b:35:58:d5:3f:43:de:76:c5:
         07:c9:71:34:2f:d3:78:51:65:42:f1:3d:19:5d:1c:41:e7:17:
         89:d2:36:bb:ea:df:3d:d3:ee:41:66:c6:6a:5a:98:ae:07:b1:
         8a:36:2b:e1:09:01:5e:bd:c3:f5:b8:64:63:ee:4d:ea:cd:07:
         6e:82:43:5c:e8:dc:a1:ff:bd:c4:6c:e1:ae:b0:28:98:d7:04:
         db:37:31:9f:1a:81:41:99:4e:95:ab:fc:46:8b:61:f7:b2:a7:
         86:83:fe:20:17:84:de:99:85:55:d5:b8:0a:be:d1:a2:01:c7:
         af:b7:45:a8:3f:77:ad:31:e4:f3:44:f2:75:6c:9f:59:df:19:
         7b:98:2b:49:c5:b6:d1:91:81:a0:51:be:5c:c5:b6:50:74:27:
         78:fd:5d:c3:e1:19:40:6e:e1:2b:33:c4:2c:a1:7f:e2:c9:13:
         3d:3a:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:07 2025 by rpki-client on console.sobornost.net