Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/3134332e3133372e35362e302f32322d3332203d3e20323634303332.roa
File:                     3134332e3133372e35362e302f32322d3332203d3e20323634303332.roa (raw, json)
Hash identifier:          fi79g+bJaupI29fbmfSwXFJdcXqzcY7K55NwzziOMaw=
Subject key identifier:   D0:8B:7D:14:0F:6F:5D:BA:C4:1B:D2:8E:34:C6:DB:54:28:0C:4C:81
Certificate issuer:       /CN=DB99F3B22C4D4597BA1B8377C45F7519342444E3
Certificate serial:       3E9FDC2CD2C43A94FB8DEF2643618F16F532BBC7
Authority key identifier: DB:99:F3:B2:2C:4D:45:97:BA:1B:83:77:C4:5F:75:19:34:24:44:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB99F3B22C4D4597BA1B8377C45F7519342444E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/3134332e3133372e35362e302f32322d3332203d3e20323634303332.roa
Signing time:             Mon 31 Mar 2025 22:51:48 +0000
ROA not before:           Mon 31 Mar 2025 22:46:48 +0000
ROA not after:            Mon 30 Mar 2026 22:51:48 +0000
asID:                     264032
IP address blocks:        143.137.56.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/DB99F3B22C4D4597BA1B8377C45F7519342444E3.crl
                          rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/DB99F3B22C4D4597BA1B8377C45F7519342444E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB99F3B22C4D4597BA1B8377C45F7519342444E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9f:dc:2c:d2:c4:3a:94:fb:8d:ef:26:43:61:8f:16:f5:32:bb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB99F3B22C4D4597BA1B8377C45F7519342444E3
        Validity
            Not Before: Mar 31 22:46:48 2025 GMT
            Not After : Mar 30 22:51:48 2026 GMT
        Subject: CN=D08B7D140F6F5DBAC41BD28E34C6DB54280C4C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:2c:91:be:05:dc:0a:1c:27:fc:db:26:bb:
                    32:15:0e:e0:ed:40:da:52:44:27:91:69:4e:9a:98:
                    56:a7:0b:41:89:6d:eb:93:29:31:2b:92:44:87:9b:
                    f8:e0:c4:24:b3:3b:a9:dd:7c:9f:a5:05:c8:14:59:
                    1a:3a:17:42:ee:45:34:44:b8:6d:40:5b:69:9b:01:
                    f5:f2:d3:ac:d8:77:fb:29:be:16:0b:c9:a0:ae:1f:
                    6c:f9:1d:68:49:db:1f:b2:23:d2:b4:7e:4c:6c:2d:
                    b4:7c:c5:bd:42:49:88:69:43:27:9f:1a:67:ec:32:
                    8d:08:87:ca:fc:b7:55:a6:ea:a4:75:88:89:34:ac:
                    5f:01:09:e1:87:1e:1f:5e:03:40:0f:72:e5:9c:32:
                    54:db:6d:d4:8b:d5:26:49:ab:b7:c1:4b:7e:ac:04:
                    92:59:f3:0b:ce:d4:87:73:b2:15:3f:d7:cc:4b:67:
                    61:85:df:02:8e:f3:2e:74:a8:99:02:28:1b:ac:33:
                    9d:5e:c7:92:85:95:85:97:90:5d:0c:77:1c:21:a7:
                    d5:3e:56:ff:e9:d0:ba:7a:40:c0:d4:ea:a6:b5:e4:
                    2c:ae:4f:91:12:5a:93:46:72:32:2d:f7:56:a8:59:
                    40:c6:39:a5:63:f3:34:94:f3:08:e4:4b:7b:36:18:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8B:7D:14:0F:6F:5D:BA:C4:1B:D2:8E:34:C6:DB:54:28:0C:4C:81
            X509v3 Authority Key Identifier:
                keyid:DB:99:F3:B2:2C:4D:45:97:BA:1B:83:77:C4:5F:75:19:34:24:44:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/DB99F3B22C4D4597BA1B8377C45F7519342444E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB99F3B22C4D4597BA1B8377C45F7519342444E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/3134332e3133372e35362e302f32322d3332203d3e20323634303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:20:37:6b:de:3d:ef:23:12:42:6d:da:9a:af:97:4a:62:ab:
         7b:99:2e:91:c8:ee:f0:3e:b9:88:c6:b0:9a:5d:6a:7b:5b:cf:
         bb:e6:46:b7:a0:1b:d0:8b:b3:4b:96:5b:fb:51:e1:fd:f1:06:
         64:93:ec:72:d3:64:e4:11:04:b9:12:8e:0d:17:1f:07:7a:97:
         67:ab:4e:03:e3:61:3e:6a:17:38:76:ea:c2:56:66:58:ea:d8:
         26:d3:1d:59:34:76:ba:b3:8d:75:9f:d6:fa:e4:6a:3c:91:e9:
         9d:a1:ca:53:2e:f4:ce:fc:26:6a:d4:5e:f4:74:12:d3:b1:39:
         b1:54:dc:6b:b0:bb:74:ee:3e:f6:94:32:a3:57:a9:c8:48:5c:
         06:75:33:74:86:76:f2:91:56:7a:2d:91:04:49:bc:55:ce:d2:
         75:55:ae:92:d7:8d:31:6b:70:19:13:00:fa:2c:02:f3:41:ba:
         fd:dd:2d:f4:d1:e7:3c:47:a8:3f:7c:bd:c6:42:10:b9:e6:78:
         6f:35:7f:3b:bd:c2:8d:0c:69:2e:56:95:e3:f8:6e:4d:4d:f3:
         a5:8a:a3:43:74:77:fb:5e:e8:16:40:3e:47:cc:81:74:fc:ec:
         96:4b:3c:10:25:f6:80:ec:99:1b:b5:29:d7:3f:85:aa:c7:62:
         c8:7c:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:15 2025 by rpki-client on console.sobornost.net