Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa
File:                     3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa (raw, json)
Hash identifier:          y72/0IyC7HP/ZfeayZlEjWPD5T7UCz7fjkVcSthnnxM=
Subject key identifier:   49:15:18:2B:D7:85:85:59:CD:0E:52:50:98:BD:A7:E4:00:D1:95:E7
Certificate issuer:       /CN=2EDF3A6D365602746F01E8AC590A46F0154D7D75
Certificate serial:       1A57F3A649CE5D27018E6883BF78D80CCF8ECD05
Authority key identifier: 2E:DF:3A:6D:36:56:02:74:6F:01:E8:AC:59:0A:46:F0:15:4D:7D:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EDF3A6D365602746F01E8AC590A46F0154D7D75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa
Signing time:             Thu 17 Apr 2025 13:16:21 +0000
ROA not before:           Thu 17 Apr 2025 13:11:21 +0000
ROA not after:            Thu 16 Apr 2026 13:16:21 +0000
asID:                     263165
IP address blocks:        191.52.248.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/2EDF3A6D365602746F01E8AC590A46F0154D7D75.crl
                          rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/2EDF3A6D365602746F01E8AC590A46F0154D7D75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EDF3A6D365602746F01E8AC590A46F0154D7D75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:57:f3:a6:49:ce:5d:27:01:8e:68:83:bf:78:d8:0c:cf:8e:cd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EDF3A6D365602746F01E8AC590A46F0154D7D75
        Validity
            Not Before: Apr 17 13:11:21 2025 GMT
            Not After : Apr 16 13:16:21 2026 GMT
        Subject: CN=4915182BD7858559CD0E525098BDA7E400D195E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:47:f3:cb:eb:a4:be:20:97:74:a3:04:04:
                    07:88:12:4c:ea:7e:b0:ea:4d:d8:6e:39:71:93:ec:
                    3d:31:1b:c6:01:32:cf:33:b4:18:68:93:dc:67:16:
                    d5:df:55:33:ff:2f:b6:26:89:aa:bb:04:90:e7:01:
                    94:ac:0e:58:48:35:03:fe:49:7d:aa:2e:46:90:c7:
                    e7:86:52:f2:67:8f:20:47:09:33:99:1e:71:83:ba:
                    c4:f1:60:10:3d:70:83:51:18:76:13:08:62:5f:c2:
                    8e:f6:dc:fa:31:2c:ac:91:6b:08:41:98:1e:7b:8d:
                    d2:4b:b4:3b:2c:40:84:41:26:bb:83:ab:12:87:ef:
                    b9:a6:c7:be:95:66:8d:42:6a:15:80:7e:91:cb:f3:
                    ce:4c:67:4d:49:76:08:e9:fc:43:51:d3:50:47:e9:
                    25:7c:3c:20:e2:de:b2:71:92:ca:12:28:bd:6e:1a:
                    0f:70:10:a8:7e:9d:e7:3f:04:62:b7:ca:80:b1:f2:
                    4e:ff:4d:6d:d4:46:c1:ae:a7:3b:78:e6:fb:4b:75:
                    5f:e3:d3:28:ab:4e:2e:d5:31:ac:2e:a3:30:82:8b:
                    dd:97:5f:1c:f0:11:22:bd:a6:5b:ab:29:ae:c4:07:
                    06:b1:d3:66:cb:65:3c:67:d6:87:fc:b6:bc:40:0b:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:15:18:2B:D7:85:85:59:CD:0E:52:50:98:BD:A7:E4:00:D1:95:E7
            X509v3 Authority Key Identifier:
                keyid:2E:DF:3A:6D:36:56:02:74:6F:01:E8:AC:59:0A:46:F0:15:4D:7D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/2EDF3A6D365602746F01E8AC590A46F0154D7D75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EDF3A6D365602746F01E8AC590A46F0154D7D75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:68:79:b0:f2:50:5d:ab:08:71:47:53:04:da:76:78:97:56:
         c7:72:56:ba:aa:66:90:51:d7:b5:ed:d0:1e:7b:10:62:71:89:
         8e:31:b6:fa:45:82:e6:8f:f5:df:64:4c:21:e7:28:de:12:8d:
         e9:50:22:ba:90:9b:76:ec:59:65:b3:6e:4e:df:5a:19:da:15:
         eb:a8:63:11:c7:93:dc:9d:a5:b1:8a:18:3a:80:72:ef:cd:e4:
         b0:46:f0:74:11:b4:26:06:05:51:e3:e3:13:12:4a:03:42:5b:
         04:b8:5e:ac:a9:a0:11:81:b8:52:c3:be:b1:38:46:a8:e6:c4:
         d8:46:1a:b1:4d:73:0a:a1:f1:66:ba:64:96:5c:3d:ad:a9:a5:
         da:5f:b8:54:33:86:67:8d:9a:bf:a2:26:dd:e6:35:a3:11:f7:
         ba:61:02:9b:f5:93:aa:9a:45:64:4d:2e:31:35:55:79:73:bf:
         1f:30:77:ed:49:07:01:49:3e:80:55:8c:f1:39:d5:ac:c0:c3:
         28:1c:d9:a3:2c:47:1a:88:ce:f6:46:55:f3:08:56:85:f5:88:
         6d:e0:48:cf:4f:bf:46:54:a9:98:6a:1b:80:51:b7:e5:1a:c0:
         9d:87:58:ab:e4:58:25:51:0d:a5:56:8b:86:89:f7:eb:18:3e:
         d1:5a:35:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:40 2025 by rpki-client on console.sobornost.net