Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/3138372e3130332e3136302e302f32302d3332203d3e203533313032.roa
File:                     3138372e3130332e3136302e302f32302d3332203d3e203533313032.roa (raw, json)
Hash identifier:          7x+2ja2dBQuzFSOzsHZrn/0Jd35tVj4Qc3+sXOyEXes=
Subject key identifier:   A7:BC:A8:86:FE:93:C3:F0:33:DA:3D:3D:4C:2E:3C:EA:A5:E6:CF:7E
Certificate issuer:       /CN=47A0BA8B6BFD6528B70033FEAB848C965238B383
Certificate serial:       06408E5A3755F25D81A43E6BB566B1B06BA769E8
Authority key identifier: 47:A0:BA:8B:6B:FD:65:28:B7:00:33:FE:AB:84:8C:96:52:38:B3:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/3138372e3130332e3136302e302f32302d3332203d3e203533313032.roa
Signing time:             Thu 06 Mar 2025 04:08:45 +0000
ROA not before:           Thu 06 Mar 2025 04:03:45 +0000
ROA not after:            Thu 05 Mar 2026 04:08:45 +0000
asID:                     53102
IP address blocks:        187.103.160.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.crl
                          rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 05:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:40:8e:5a:37:55:f2:5d:81:a4:3e:6b:b5:66:b1:b0:6b:a7:69:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0BA8B6BFD6528B70033FEAB848C965238B383
        Validity
            Not Before: Mar  6 04:03:45 2025 GMT
            Not After : Mar  5 04:08:45 2026 GMT
        Subject: CN=A7BCA886FE93C3F033DA3D3D4C2E3CEAA5E6CF7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d1:bc:9a:6d:74:36:8f:63:67:59:c1:ec:de:
                    e3:d1:84:ef:c0:e0:73:d6:43:64:d0:94:0c:eb:c9:
                    67:cc:22:a0:b5:69:ac:3f:97:87:7e:19:53:e2:17:
                    a2:bf:e7:7d:10:67:80:f7:8a:a8:f5:8a:23:9d:a0:
                    0a:2a:c9:c7:19:6b:c6:10:74:e1:0b:72:99:23:ba:
                    ef:e6:0c:28:79:e3:ad:a6:b9:12:cb:d3:c3:06:4e:
                    85:05:17:de:64:2d:cb:0a:46:b8:5a:0e:66:7c:48:
                    41:af:cc:61:32:b2:c2:c3:4a:38:23:09:3b:c4:16:
                    b1:6f:80:44:ce:7f:ad:91:32:de:8b:9d:67:6e:34:
                    e1:96:68:4c:78:bb:fa:56:f7:d8:c4:bf:39:ce:26:
                    ff:a8:27:6d:b1:7b:19:5a:9b:4f:29:ef:0d:9a:6b:
                    23:60:87:cf:c5:df:f8:bc:7d:ba:4b:12:2a:90:fa:
                    f8:2d:61:e7:ee:d2:53:a2:21:cc:6c:0f:b4:54:98:
                    12:b2:68:35:27:65:ad:b7:ba:29:df:41:5e:04:23:
                    62:a5:60:ce:32:ab:45:7a:68:eb:c3:02:fa:47:ca:
                    26:2a:dd:c3:06:a8:f5:b7:9f:17:43:b9:4b:44:8b:
                    f8:e7:e8:ba:b1:aa:4a:75:73:98:d4:82:87:38:99:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BC:A8:86:FE:93:C3:F0:33:DA:3D:3D:4C:2E:3C:EA:A5:E6:CF:7E
            X509v3 Authority Key Identifier:
                keyid:47:A0:BA:8B:6B:FD:65:28:B7:00:33:FE:AB:84:8C:96:52:38:B3:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/3138372e3130332e3136302e302f32302d3332203d3e203533313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:17:47:83:04:ec:86:01:5f:ab:97:c3:75:39:5e:f6:88:33:
         9f:72:5f:89:73:f1:41:1c:00:45:ed:9e:22:2d:6c:7b:5c:e3:
         18:b6:cc:ad:f7:12:6e:fb:7d:5c:d5:b8:0b:f2:b6:49:34:72:
         65:f4:8f:70:f9:29:d9:1b:d7:25:54:82:d4:7d:ed:6c:cd:11:
         51:ef:37:a8:b7:38:1d:3c:5d:3d:02:58:6f:03:e0:11:7e:3d:
         0d:2f:0c:33:ba:87:1d:98:a2:f9:08:53:14:01:5b:a8:6a:40:
         d2:98:70:c4:cc:01:a7:74:ee:18:61:17:77:f3:72:5c:e9:45:
         ec:89:93:1f:5d:76:4e:8f:4e:f4:d3:a8:ff:4c:0b:84:a3:5c:
         f0:56:d9:2a:47:65:4c:fa:da:9c:76:67:42:72:51:61:07:44:
         f9:0e:c4:15:63:7f:ef:b4:9b:37:85:76:57:20:98:4c:29:9b:
         99:94:46:c8:8a:4e:46:ec:e8:73:f7:b8:c4:e0:9b:28:ce:2c:
         96:54:eb:68:59:64:43:14:db:c6:b5:0b:be:7f:b4:ea:de:e1:
         2e:da:f9:da:a3:81:14:ad:52:5a:b3:19:62:85:6c:aa:f3:14:
         da:d8:eb:0a:cf:78:a9:9c:95:3b:5a:78:0c:a0:2d:33:6b:1f:
         27:23:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:05 2025 by rpki-client on console.sobornost.net