Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3136302e34382e302f32302d3234203d3e2038303535.roa
File:                     3230302e3136302e34382e302f32302d3234203d3e2038303535.roa (raw, json)
Hash identifier:          lGd/tQSuXOfhxXOb+dyIBmn0yc+X2vbk6UH8O7OyA+s=
Subject key identifier:   61:DD:62:25:C8:D4:D9:FE:55:32:6C:67:1A:10:37:5C:56:6A:0B:79
Certificate issuer:       /CN=E3A05660BB6F81841BB49DE532F64F592B23928E
Certificate serial:       11E19139529E8D68FC6F54B9A350E9C3B0719219
Authority key identifier: E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3136302e34382e302f32302d3234203d3e2038303535.roa
Signing time:             Fri 18 Apr 2025 14:30:50 +0000
ROA not before:           Fri 18 Apr 2025 14:25:50 +0000
ROA not after:            Fri 17 Apr 2026 14:30:50 +0000
asID:                     8055
IP address blocks:        200.160.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl
                          rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e1:91:39:52:9e:8d:68:fc:6f:54:b9:a3:50:e9:c3:b0:71:92:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A05660BB6F81841BB49DE532F64F592B23928E
        Validity
            Not Before: Apr 18 14:25:50 2025 GMT
            Not After : Apr 17 14:30:50 2026 GMT
        Subject: CN=61DD6225C8D4D9FE55326C671A10375C566A0B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:44:67:ef:fe:96:a4:5c:86:de:aa:44:1a:
                    81:6e:9d:6d:44:12:19:15:79:a3:6f:4b:4f:66:d2:
                    c7:21:9d:5c:f7:0c:31:1a:9c:41:ad:5a:40:29:41:
                    4f:85:1b:37:1a:6a:ed:74:bc:c1:76:0c:36:18:d7:
                    8a:fb:a0:4f:2d:3d:ac:98:5b:87:3d:c4:cd:e0:12:
                    6f:7b:61:9a:62:dd:6c:6f:0e:af:38:8d:06:30:b5:
                    56:08:de:08:c0:bf:d1:33:4a:56:a2:42:a7:d0:88:
                    5f:b3:06:c4:ba:9a:13:6c:1e:a8:06:2e:6d:ed:ce:
                    68:7d:6a:25:ce:44:f7:f8:65:6a:23:73:10:7a:51:
                    96:f0:e4:3d:aa:1c:19:61:1f:a3:b4:7a:10:76:11:
                    c1:61:02:7c:de:41:79:bb:4c:ef:45:6c:52:94:63:
                    b3:70:f1:44:35:e2:49:dc:65:f5:66:be:c4:86:e2:
                    ed:c9:6f:79:45:4c:05:2d:26:3c:f9:ba:95:1d:8b:
                    ef:7b:c4:c6:9e:66:31:61:59:51:8c:15:34:d6:54:
                    66:14:48:50:4a:80:ee:00:fb:23:8a:a7:02:88:03:
                    6f:a0:5c:f0:01:22:6a:b9:a1:26:96:ce:a9:d4:d2:
                    84:a1:0b:48:bb:6c:ea:55:73:29:b2:4a:21:8c:4c:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DD:62:25:C8:D4:D9:FE:55:32:6C:67:1A:10:37:5C:56:6A:0B:79
            X509v3 Authority Key Identifier:
                keyid:E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3136302e34382e302f32302d3234203d3e2038303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:a2:26:ce:a1:89:06:ac:9a:84:25:a3:66:e2:7e:54:e2:a3:
         ac:8e:a0:ba:35:be:0e:24:dd:05:18:43:f1:30:4b:6a:7b:18:
         15:31:f3:78:43:ad:eb:2a:24:0d:ec:ce:99:01:b3:49:34:f5:
         81:07:3a:74:cd:a4:a4:bc:1c:4e:93:1f:36:f7:76:83:13:4a:
         95:ad:25:96:fe:d3:da:6a:a9:ea:b1:81:a9:69:3c:ad:d8:60:
         ab:83:84:b3:d3:ee:d4:9c:8c:46:d9:9f:f5:61:0b:94:3e:c6:
         75:24:f3:4f:cd:13:ad:80:8e:37:f1:20:8e:05:f7:63:06:b0:
         09:aa:e7:54:7d:f0:e8:64:6e:ca:e9:6e:63:49:34:79:a2:b4:
         a8:7e:44:a7:94:8d:9a:26:d7:81:38:c0:21:db:ee:02:78:36:
         55:af:96:bc:66:7e:c9:0a:8b:56:48:01:87:c1:3b:27:bd:9f:
         51:d5:8f:53:2e:c9:2a:cb:80:8e:54:26:2a:9b:fd:ba:ce:53:
         fd:ff:e6:ff:72:2e:af:b0:3d:78:21:ea:61:1a:14:08:b4:73:
         3e:17:fc:fa:d6:10:5b:da:ea:e8:61:49:cb:e2:f6:bf:13:27:
         61:6f:7e:f2:41:f8:ec:98:da:a9:37:07:2f:02:9d:e6:73:f4:
         d3:4b:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:40 2025 by rpki-client on console.sobornost.net