Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa
File:                     3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa (raw, json)
Hash identifier:          B5EJgtLM2ltWM4c3Wuw9cDv7LLNqbv6oM20k24azvL0=
Subject key identifier:   CB:57:22:B7:D7:F1:65:29:29:48:BF:A7:3A:DA:DC:92:CB:0E:06:B3
Certificate issuer:       /CN=44C4E7EA427432C8AF052B0213629A818E595AF0
Certificate serial:       66792D1CB2BFEA09F4F575295E1C5FE4A2B08D22
Authority key identifier: 44:C4:E7:EA:42:74:32:C8:AF:05:2B:02:13:62:9A:81:8E:59:5A:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C4E7EA427432C8AF052B0213629A818E595AF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa
Signing time:             Mon 23 Dec 2024 17:02:03 +0000
ROA not before:           Mon 23 Dec 2024 16:57:03 +0000
ROA not after:            Mon 22 Dec 2025 17:02:03 +0000
asID:                     263336
IP address blocks:        191.36.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/44C4E7EA427432C8AF052B0213629A818E595AF0.crl
                          rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/44C4E7EA427432C8AF052B0213629A818E595AF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C4E7EA427432C8AF052B0213629A818E595AF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:79:2d:1c:b2:bf:ea:09:f4:f5:75:29:5e:1c:5f:e4:a2:b0:8d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C4E7EA427432C8AF052B0213629A818E595AF0
        Validity
            Not Before: Dec 23 16:57:03 2024 GMT
            Not After : Dec 22 17:02:03 2025 GMT
        Subject: CN=CB5722B7D7F165292948BFA73ADADC92CB0E06B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:a2:1c:01:14:c5:f3:31:1d:ac:10:5c:cc:
                    2e:19:7a:bf:e5:37:27:0c:0b:43:78:b3:df:47:db:
                    81:15:d4:3c:dc:ed:f8:5f:6f:18:93:ff:28:30:eb:
                    0c:7d:5d:ec:5f:21:ad:5c:b2:18:a3:4b:ba:41:c8:
                    09:7d:9c:96:70:4c:ef:a2:07:5c:55:c9:9f:51:fd:
                    7f:0d:25:83:8d:44:dc:b1:f6:00:ae:71:ff:3c:3a:
                    00:cb:c7:e0:ee:3b:de:15:71:c7:a9:48:cc:c2:f1:
                    2b:ee:db:32:be:f6:59:ac:ef:c3:bb:4c:48:b1:05:
                    73:c5:9c:98:0a:bb:41:49:77:44:fd:c8:27:e2:d8:
                    2f:cd:97:53:4b:21:de:10:3d:1c:11:7c:e8:75:f9:
                    f9:61:8d:2a:ff:52:fd:84:3e:1d:7e:93:42:33:55:
                    a5:18:e5:84:95:86:52:a3:04:a6:db:7b:e0:96:95:
                    4f:d6:5e:81:50:71:63:52:1f:eb:f9:ce:04:48:20:
                    3b:96:b8:2a:8f:4d:c6:9e:25:fc:f5:88:4b:07:40:
                    d4:1c:eb:ab:c9:39:33:9d:29:4b:f5:42:b2:90:01:
                    00:88:a9:01:9d:53:27:7e:0d:4f:34:ec:95:3d:cb:
                    4d:e7:10:41:9c:f8:87:db:97:53:27:e5:9c:50:7a:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:57:22:B7:D7:F1:65:29:29:48:BF:A7:3A:DA:DC:92:CB:0E:06:B3
            X509v3 Authority Key Identifier:
                keyid:44:C4:E7:EA:42:74:32:C8:AF:05:2B:02:13:62:9A:81:8E:59:5A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/44C4E7EA427432C8AF052B0213629A818E595AF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C4E7EA427432C8AF052B0213629A818E595AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:69:22:26:5d:8f:a7:11:13:94:9e:00:e0:d3:db:f4:4c:57:
         3a:c6:0d:c6:0e:d6:8f:fa:66:8f:2b:6e:06:1f:af:08:bb:99:
         33:62:10:18:1c:3a:49:88:8a:11:44:02:70:f9:29:91:6a:b3:
         1b:1d:e2:00:cd:df:85:c1:d5:7d:1d:f2:9f:31:76:09:b3:9a:
         0f:1f:7a:23:63:f9:37:1f:90:2f:e4:b4:0c:1f:26:ac:ef:46:
         df:6b:2a:0e:31:81:03:5f:dd:11:ff:f3:de:1d:fd:95:f8:bf:
         88:d2:52:8c:d8:10:ed:10:94:5e:18:28:f9:e5:56:e4:c0:08:
         e1:33:a6:33:48:7b:b3:28:cc:b0:4e:d1:87:bf:de:dd:5a:b5:
         24:0e:71:35:2f:bf:70:51:82:eb:c7:60:c7:a1:52:8e:c7:f8:
         2d:6f:99:ba:c1:b5:10:18:4d:16:45:67:aa:51:8b:b3:b3:77:
         84:42:6d:f5:c6:e6:73:43:9f:e4:45:b1:de:39:62:b8:cf:8a:
         6b:73:d8:b9:ed:3c:e1:e6:71:b5:05:bd:19:98:a4:56:70:33:
         6c:5b:c0:db:a1:fa:13:b1:3a:dc:68:22:63:6e:27:eb:d8:9f:
         14:f6:f3:da:f3:7d:33:31:85:8d:e9:7f:97:2d:f2:43:0c:cf:
         4b:08:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:33 2025 by rpki-client on console.sobornost.net