Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/3139312e352e34382e302f32312d3234203d3e20323633353332.roa
File:                     3139312e352e34382e302f32312d3234203d3e20323633353332.roa (raw, json)
Hash identifier:          xwhiR8s2KXPoYmAj/BsNvhfcFgjUvWyfc1+EWR5Q9eE=
Subject key identifier:   A7:48:95:96:EE:0E:5A:5B:90:25:5A:11:55:10:FF:05:69:DC:47:91
Certificate issuer:       /CN=40024D9137B1E11B244B48E87E69634A33E200A3
Certificate serial:       2B4FEF1D58154455AB85CAB5C82436BBF66683DA
Authority key identifier: 40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/3139312e352e34382e302f32312d3234203d3e20323633353332.roa
Signing time:             Thu 06 Mar 2025 08:55:28 +0000
ROA not before:           Thu 06 Mar 2025 08:50:28 +0000
ROA not after:            Thu 05 Mar 2026 08:55:28 +0000
asID:                     263532
IP address blocks:        191.5.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl
                          rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 14:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4f:ef:1d:58:15:44:55:ab:85:ca:b5:c8:24:36:bb:f6:66:83:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40024D9137B1E11B244B48E87E69634A33E200A3
        Validity
            Not Before: Mar  6 08:50:28 2025 GMT
            Not After : Mar  5 08:55:28 2026 GMT
        Subject: CN=A7489596EE0E5A5B90255A115510FF0569DC4791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:df:7e:0c:60:9f:56:38:09:c5:68:d8:f7:
                    ff:b0:32:25:27:29:34:56:43:ac:3a:2a:32:ca:6e:
                    2c:3c:58:f5:a4:99:ab:ed:26:2c:35:0b:f9:b7:d9:
                    32:77:ef:8d:60:c4:8d:ea:fd:d6:07:a4:5e:ad:2b:
                    e5:37:be:6c:2d:7a:09:b0:59:98:58:98:23:42:46:
                    bd:9d:97:fb:bd:6b:de:7f:f7:4c:56:cf:4f:76:d4:
                    d0:2d:7a:b3:1f:1c:e8:a0:23:91:67:9e:a5:72:fd:
                    b6:63:eb:4a:bf:ac:b4:14:9b:c8:3b:f3:5d:7b:18:
                    9d:47:ef:ef:69:a9:5a:46:4f:eb:e3:77:e0:6b:2e:
                    35:71:44:1a:fb:77:e2:10:56:fd:71:40:40:08:5b:
                    fa:68:5a:bb:f7:11:da:e4:33:d1:81:24:92:6e:d4:
                    49:3b:8a:38:dc:a3:b6:06:6c:51:db:b4:d8:a8:91:
                    d8:3f:c6:34:75:3d:1d:6d:02:22:7f:b3:f8:e8:8f:
                    6c:0a:75:30:30:71:22:7c:60:b1:a6:3d:d7:d1:e8:
                    b5:88:e6:a9:b1:2d:e6:8a:19:21:30:38:34:4e:2a:
                    3f:f8:22:aa:04:06:21:61:02:a8:64:61:8c:c6:30:
                    73:6e:db:1f:ec:b7:c2:2f:6f:07:32:1a:51:ab:47:
                    83:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:48:95:96:EE:0E:5A:5B:90:25:5A:11:55:10:FF:05:69:DC:47:91
            X509v3 Authority Key Identifier:
                keyid:40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/3139312e352e34382e302f32312d3234203d3e20323633353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:89:99:30:22:91:7f:0c:3e:77:db:e3:18:b1:7f:3a:7a:4c:
         ff:bd:32:18:ee:3f:35:48:05:0e:70:24:45:e8:41:36:a2:a3:
         ab:d8:95:60:60:b3:e1:bf:7f:95:cf:10:47:53:7e:b4:44:b9:
         b0:fb:5e:9f:7c:a4:0f:4c:51:49:fd:69:a8:41:3d:0d:05:ca:
         16:d9:cc:49:33:f4:f1:68:94:75:d7:ac:9e:83:86:90:12:e1:
         f9:54:56:95:76:59:67:79:70:5c:d8:6a:f7:e7:9d:08:dc:7e:
         11:75:9d:c7:02:fd:94:cf:a2:5b:a3:6d:a5:4c:c3:82:c3:17:
         01:e7:27:e8:53:86:18:2a:b7:88:f2:df:c0:22:02:14:07:9c:
         07:1f:4c:2d:68:91:4d:8e:27:28:c0:1c:de:4a:e9:8a:82:12:
         96:b0:78:8a:b3:cd:7e:56:95:4f:13:97:73:82:e6:6e:f5:11:
         3c:ef:c7:65:32:88:bc:ea:d0:d2:60:90:8e:b7:9e:91:a7:33:
         b6:4c:f6:ab:f7:16:fc:3d:50:45:db:1c:f5:7f:fd:3c:71:b4:
         d8:df:9f:72:37:c6:ad:42:a3:05:58:ab:82:76:79:04:fc:f5:
         d5:2b:81:8f:68:b9:03:ff:4e:00:40:55:92:ee:de:49:84:3d:
         55:12:36:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:02 2025 by rpki-client on console.sobornost.net