Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa
File:                     3133382e39392e31322e302f32322d3234203d3e20323634313530.roa (raw, json)
Hash identifier:          WDMbdHrG9LGiHzpTmVjqj74Kg796UBvqJPYmt79f0a4=
Subject key identifier:   DB:1A:14:A2:07:43:6E:BB:C9:4F:A3:D2:0D:B8:8C:2E:B0:2B:77:74
Certificate issuer:       /CN=9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17
Certificate serial:       54F394B8D9D40DB06EDCD8678542B04088DAE8A8
Authority key identifier: 99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa
Signing time:             Thu 06 Mar 2025 13:52:03 +0000
ROA not before:           Thu 06 Mar 2025 13:47:03 +0000
ROA not after:            Thu 05 Mar 2026 13:52:03 +0000
asID:                     264150
IP address blocks:        138.99.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.crl
                          rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f3:94:b8:d9:d4:0d:b0:6e:dc:d8:67:85:42:b0:40:88:da:e8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17
        Validity
            Not Before: Mar  6 13:47:03 2025 GMT
            Not After : Mar  5 13:52:03 2026 GMT
        Subject: CN=DB1A14A207436EBBC94FA3D20DB88C2EB02B7774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:02:7a:e4:05:6b:4d:14:d3:dd:b4:d8:68:
                    02:95:68:f8:f9:e8:1b:d8:db:7c:fc:71:88:b0:bf:
                    8d:ca:67:b7:42:fd:e0:34:75:5e:c0:23:75:a9:91:
                    6b:db:c8:9c:c0:4f:1b:6b:01:c9:ec:32:ec:91:68:
                    09:f3:c1:df:53:8f:01:c6:99:6c:7c:4e:ee:ac:cf:
                    a7:14:5c:b1:c7:8c:46:be:94:e1:33:8a:86:95:da:
                    a1:ce:88:2d:89:12:08:cb:71:3c:08:c6:62:f6:9f:
                    e5:b8:9f:54:d1:0b:c5:fd:6d:8c:ca:e9:aa:b3:33:
                    80:65:37:77:6d:f4:dc:86:4a:bf:d2:b7:a0:01:9e:
                    fe:99:9e:fb:64:44:cb:96:0e:b0:ee:5c:ad:71:04:
                    6c:ed:21:24:75:79:17:82:20:67:13:89:ef:65:d7:
                    fe:c4:6b:a0:2a:c8:44:d7:fb:b9:fe:fa:c3:a2:5b:
                    ff:f4:30:f5:e1:3e:ce:07:46:1e:9f:47:3e:86:91:
                    30:2c:51:03:68:ce:c7:9b:3d:70:db:44:74:63:dd:
                    3c:21:62:31:46:e2:cc:42:eb:a8:0a:84:10:40:a4:
                    d1:da:be:ac:36:94:23:be:8a:e0:cf:ed:95:d1:0a:
                    65:06:f6:a7:82:69:e7:5b:57:62:7a:8d:93:27:fe:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1A:14:A2:07:43:6E:BB:C9:4F:A3:D2:0D:B8:8C:2E:B0:2B:77:74
            X509v3 Authority Key Identifier:
                keyid:99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:b5:10:0d:39:58:53:e0:16:28:8b:a8:bc:26:53:db:fb:b7:
         11:2b:36:c8:49:e1:1b:2b:44:f9:2e:14:18:a1:14:7b:18:06:
         51:47:cf:97:5f:a3:36:85:0d:b7:7d:95:99:1c:9d:3a:2d:ab:
         84:7f:fe:c5:81:ed:7f:9a:4a:f6:06:bd:b8:01:7e:d4:06:d5:
         03:3c:d8:3e:ac:32:89:30:e5:67:c7:b8:b3:1b:31:c4:b4:ed:
         71:e4:62:76:27:5d:73:2f:d2:90:0c:79:16:ef:d4:fa:6f:3b:
         a0:ac:bd:4b:ac:91:9d:aa:b8:5e:e0:64:9d:5a:7b:4a:a0:47:
         37:ae:33:fd:4d:db:ff:78:ae:22:b0:26:91:28:35:c3:36:ec:
         48:d1:c8:d7:cb:20:ef:a3:9c:71:81:6f:1f:dd:56:ab:8e:1c:
         29:9e:5f:e2:1d:01:a2:62:2c:03:c3:1c:63:1b:ef:9a:02:2c:
         cf:38:62:bd:91:08:4a:84:09:32:6a:88:83:40:ae:f2:5c:18:
         94:22:8e:56:70:b8:0a:3e:72:a9:aa:62:35:55:e5:70:42:91:
         b6:6d:42:fd:a8:35:d0:83:79:f7:97:d8:1a:ff:29:2e:02:3f:
         e0:42:8b:47:96:04:11:2f:2b:65:5c:57:02:2e:17:01:a3:e4:
         be:32:6b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:48 2025 by rpki-client on console.sobornost.net