Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/3133312e3130302e34342e302f32322d3234203d3e203631373535.roa
File:                     3133312e3130302e34342e302f32322d3234203d3e203631373535.roa (raw, json)
Hash identifier:          /YZ4IPDd7OOUod6wKlSriI11Pxh0scZ5fYZKkIe/IHo=
Subject key identifier:   AB:80:15:79:27:8A:45:A1:65:30:22:53:8F:EE:21:03:A8:5E:04:88
Certificate issuer:       /CN=36B2926E723BECEF46FC5A02BE2413B1F7EF2179
Certificate serial:       553CF81800084DD46344F129E5B291FA0BE85ECA
Authority key identifier: 36:B2:92:6E:72:3B:EC:EF:46:FC:5A:02:BE:24:13:B1:F7:EF:21:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36B2926E723BECEF46FC5A02BE2413B1F7EF2179.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/3133312e3130302e34342e302f32322d3234203d3e203631373535.roa
Signing time:             Mon 14 Apr 2025 15:58:27 +0000
ROA not before:           Mon 14 Apr 2025 15:53:27 +0000
ROA not after:            Mon 13 Apr 2026 15:58:27 +0000
asID:                     61755
IP address blocks:        131.100.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/36B2926E723BECEF46FC5A02BE2413B1F7EF2179.crl
                          rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/36B2926E723BECEF46FC5A02BE2413B1F7EF2179.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36B2926E723BECEF46FC5A02BE2413B1F7EF2179.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3c:f8:18:00:08:4d:d4:63:44:f1:29:e5:b2:91:fa:0b:e8:5e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36B2926E723BECEF46FC5A02BE2413B1F7EF2179
        Validity
            Not Before: Apr 14 15:53:27 2025 GMT
            Not After : Apr 13 15:58:27 2026 GMT
        Subject: CN=AB801579278A45A1653022538FEE2103A85E0488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:3a:e5:9c:90:d8:35:84:56:66:4c:f1:1f:
                    80:5f:9f:0b:dd:42:c7:94:74:6e:01:0c:d0:ac:8e:
                    6d:f3:2b:59:30:c5:14:4e:90:68:67:ae:07:7f:7a:
                    6f:3c:0c:de:f7:43:8e:1b:9e:5b:59:75:9b:f0:d4:
                    a2:d4:06:61:04:e3:af:d6:2f:b4:dd:29:81:2c:e0:
                    88:44:75:2e:1a:20:e0:99:ca:f4:1a:7b:cb:2b:5c:
                    dd:f1:48:42:76:3a:91:3f:b5:1b:2a:0b:7b:b2:17:
                    1b:2a:dc:26:16:91:9b:89:06:8c:ef:9d:73:95:26:
                    ba:cd:f0:3b:a3:4a:ea:2d:54:fa:8e:a5:94:65:c5:
                    5d:42:a3:b1:ac:65:67:b4:fb:2a:b1:f2:af:ae:db:
                    d5:27:b2:a7:0d:27:7e:6f:f5:b7:bc:2a:05:ed:3a:
                    19:19:f0:20:fc:0d:08:4e:78:e1:ea:c9:b9:1e:a3:
                    c7:3d:95:7f:3f:d4:0f:3f:3d:1b:2e:53:2b:f8:05:
                    de:1b:2a:dd:7a:41:94:38:12:5f:83:07:f9:00:38:
                    fb:51:9f:90:3c:45:95:f5:37:08:24:03:7a:2c:67:
                    ad:6f:f6:81:a8:79:33:35:2a:85:09:c3:a1:21:05:
                    ec:2f:0c:0a:81:23:a9:4f:4b:14:54:96:ab:d7:d1:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:80:15:79:27:8A:45:A1:65:30:22:53:8F:EE:21:03:A8:5E:04:88
            X509v3 Authority Key Identifier:
                keyid:36:B2:92:6E:72:3B:EC:EF:46:FC:5A:02:BE:24:13:B1:F7:EF:21:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/36B2926E723BECEF46FC5A02BE2413B1F7EF2179.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36B2926E723BECEF46FC5A02BE2413B1F7EF2179.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/3133312e3130302e34342e302f32322d3234203d3e203631373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:39:ca:cf:fe:52:d5:75:f4:1a:42:d6:88:67:8d:50:27:60:
         84:9e:a9:bc:62:40:56:f5:4a:b6:02:f7:9f:f7:62:f3:65:d9:
         ab:79:91:b1:38:d5:29:54:d8:f3:f3:67:8a:27:64:07:31:bf:
         b4:2e:f7:c2:b4:3b:db:f6:62:28:d0:cd:e5:fc:65:6c:48:62:
         cf:a2:f1:fa:e7:62:2d:00:69:c0:94:6b:d0:aa:bc:25:5d:38:
         87:22:0a:f8:f2:56:6e:a9:46:32:c9:cb:d7:9e:ed:45:33:db:
         64:1e:bc:e3:fc:0b:b2:c5:c3:80:cc:7d:e7:0d:93:a6:31:71:
         a9:89:64:e8:04:dd:32:a7:d0:de:7f:c3:17:a9:b8:68:36:20:
         2b:3c:72:b4:d2:2d:30:6b:ae:8c:54:cc:36:c1:19:46:06:b8:
         90:dd:ef:b6:ef:33:11:6e:20:2f:5c:7e:25:9d:e2:45:c4:63:
         ea:0a:55:36:02:4d:3b:b2:bd:c9:4b:3c:1a:80:d7:16:02:42:
         5c:71:84:e2:8c:58:20:e4:73:a5:b6:82:5a:79:72:9d:bc:57:
         f0:be:dd:4c:60:84:81:fc:1f:3e:3d:0e:58:a0:9a:38:0c:75:
         c5:a4:f5:29:a9:a1:04:81:54:22:c1:51:52:2e:35:09:f5:29:
         1a:76:71:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:14 2025 by rpki-client on console.sobornost.net