Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa
File:                     3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (raw, json)
Hash identifier:          sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=
Subject key identifier:   13:D7:4D:01:90:5C:A9:10:94:18:4E:5A:04:BD:1E:3F:B0:08:43:83
Certificate issuer:       /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA
Certificate serial:       6D43E0AADF3DFA70440A09C4D6738A2FE3120773
Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa
Signing time:             Thu 06 Mar 2025 05:58:58 +0000
ROA not before:           Thu 06 Mar 2025 05:53:57 +0000
ROA not after:            Thu 05 Mar 2026 05:58:57 +0000
asID:                     53139
IP address blocks:        168.197.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl
                          rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:43:e0:aa:df:3d:fa:70:44:0a:09:c4:d6:73:8a:2f:e3:12:07:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA
        Validity
            Not Before: Mar  6 05:53:57 2025 GMT
            Not After : Mar  5 05:58:57 2026 GMT
        Subject: CN=13D74D01905CA91094184E5A04BD1E3FB0084383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:b0:79:93:64:25:14:4d:0f:63:e1:20:5e:
                    4e:08:41:ad:0b:74:5b:47:e3:03:5a:83:1b:47:e8:
                    ff:30:83:a2:15:a6:de:7a:94:56:05:f4:d4:e8:be:
                    ea:21:bc:5d:99:88:b1:ae:3a:2f:1f:63:b1:47:2b:
                    71:ec:ab:d9:b7:f9:fe:35:aa:f3:e3:f5:39:ae:2f:
                    f4:3f:bc:b3:11:da:40:9b:60:8b:64:e0:bf:67:4f:
                    27:27:d0:ce:9b:45:ac:f5:e5:2c:54:d4:53:8e:06:
                    cc:ca:e4:29:a8:bb:2f:7c:b5:f4:7f:10:81:d5:f7:
                    33:f9:97:a1:f7:91:da:50:ab:c7:73:23:2e:59:a7:
                    4b:33:bf:21:b8:39:15:1b:5f:ea:9b:8b:65:f0:59:
                    46:27:ad:50:bd:08:1a:a1:36:dd:b9:a1:48:8d:21:
                    b9:cc:b4:c6:0e:48:58:e1:6f:47:91:35:fb:e2:e6:
                    bc:39:fe:3c:fa:e3:98:35:c5:34:0a:50:b8:ed:56:
                    3b:a3:5f:51:dd:5e:de:83:50:75:85:49:d0:8a:55:
                    f8:fa:cb:49:49:05:37:51:e7:b7:d6:fa:48:26:a3:
                    09:bb:39:30:f4:59:4a:33:b7:4d:8d:fd:2b:a4:3e:
                    04:6c:06:f1:f7:06:61:51:67:0a:a8:24:ae:ea:bf:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D7:4D:01:90:5C:A9:10:94:18:4E:5A:04:BD:1E:3F:B0:08:43:83
            X509v3 Authority Key Identifier:
                keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:8a:7a:43:a7:39:33:0e:fa:1f:4b:79:8a:9b:21:0d:d7:ea:
         17:43:77:f7:6a:ae:55:c2:b0:c3:57:91:3b:04:1f:cd:bc:66:
         a4:8f:e5:c8:2d:a4:e5:4d:7a:d5:df:3e:12:12:84:02:7c:e7:
         c8:ad:d6:08:a5:00:40:43:cc:a1:04:91:a6:9e:15:68:df:6d:
         c2:73:13:d1:d2:92:4d:af:74:6a:01:83:b4:7e:dc:c6:af:f3:
         e0:bc:ae:ad:0e:ba:0b:22:f8:41:5f:a3:89:88:00:27:3e:41:
         3e:ec:5f:c0:90:a6:27:b9:b0:13:c2:1a:06:d1:9c:fc:7a:e2:
         56:c3:13:ca:19:53:79:a9:e4:4d:9b:65:b3:29:36:d1:dd:4b:
         19:1d:3e:96:07:1e:1b:fe:49:69:10:6f:9c:2f:22:74:1c:19:
         12:28:1b:dd:80:73:61:0b:e9:0e:74:d9:75:bb:18:e4:9e:44:
         ee:a2:ff:0d:0b:a7:ec:a5:89:e6:d1:03:da:06:17:2e:fb:dc:
         43:1f:42:11:0b:d9:43:02:0c:be:cf:74:db:0d:47:44:47:7d:
         8b:2b:72:78:87:59:42:70:03:52:ce:34:59:f9:8c:08:cf:63:
         af:6a:f0:bf:d2:d8:62:a1:66:ef:0f:73:20:34:78:4e:84:4c:
         58:7b:16:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:32 2025 by rpki-client on console.sobornost.net