Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37392e302f32342d3234203d3e20323731363432.roa
File:                     3139302e392e37392e302f32342d3234203d3e20323731363432.roa (raw, json)
Hash identifier:          efOB6BUnFRkXMc/5Xb/3RhyF8NSmzmGLP+0nD5VgYIA=
Subject key identifier:   07:DC:1A:4B:87:08:A3:B1:54:11:81:CB:6A:1A:58:23:1E:11:D0:49
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       08CA223708C90496269F1459912099911FC23E33
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37392e302f32342d3234203d3e20323731363432.roa
Signing time:             Thu 06 Mar 2025 14:57:47 +0000
ROA not before:           Thu 06 Mar 2025 14:52:47 +0000
ROA not after:            Thu 05 Mar 2026 14:57:47 +0000
asID:                     271642
IP address blocks:        190.9.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ca:22:37:08:c9:04:96:26:9f:14:59:91:20:99:91:1f:c2:3e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: Mar  6 14:52:47 2025 GMT
            Not After : Mar  5 14:57:47 2026 GMT
        Subject: CN=07DC1A4B8708A3B1541181CB6A1A58231E11D049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:b9:4e:f5:e9:d5:83:b8:9b:98:cc:02:cf:
                    cc:10:7c:d7:fe:31:a3:91:c2:9a:ea:d4:b6:3f:3c:
                    b6:b1:da:0d:da:24:cd:52:02:8f:f8:d9:ac:77:69:
                    0d:8e:72:5f:74:a0:ab:d2:cb:9f:46:95:a5:98:2b:
                    14:af:bf:ba:76:70:0b:17:ae:6b:07:56:cb:bb:9f:
                    92:65:85:e4:55:6e:7c:40:3d:06:25:d0:af:c1:3e:
                    3d:d1:7a:d5:b8:61:8b:46:8a:64:19:b3:0f:06:d8:
                    54:86:b8:1b:82:74:00:4d:82:7d:57:b0:d6:74:75:
                    de:5c:59:e4:32:1b:d2:4c:c1:d5:b4:8c:ee:08:a3:
                    76:9d:76:03:53:29:4e:99:df:7a:b7:fd:d3:c0:af:
                    06:ac:8a:09:8f:e0:16:2b:fa:f8:8f:58:4c:34:85:
                    0a:06:f8:97:83:69:8d:54:63:cd:19:a7:66:34:a6:
                    f6:71:f7:f1:a3:a6:96:ef:95:d9:10:ef:4f:12:37:
                    76:22:a5:ed:4c:e3:4d:ed:46:4d:ad:c7:54:4e:f0:
                    0b:06:3e:87:24:4c:b0:87:dd:3b:9b:1f:02:0b:eb:
                    1c:0c:be:55:ee:14:4a:71:e8:ce:dd:2a:1d:ff:95:
                    95:71:1e:76:bc:21:d3:92:28:b9:f6:70:73:d4:4b:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DC:1A:4B:87:08:A3:B1:54:11:81:CB:6A:1A:58:23:1E:11:D0:49
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37392e302f32342d3234203d3e20323731363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:27:34:92:6a:1d:1d:ae:46:9f:41:4a:af:80:8f:20:9e:20:
         fe:17:47:c9:86:45:31:75:46:a9:79:fa:bd:ca:e5:38:6a:c2:
         5c:6a:51:00:4d:59:b1:be:f3:e9:f9:17:e8:0d:75:de:18:10:
         4d:c7:42:ee:9e:e3:af:a2:a8:cf:fa:61:e9:22:24:22:27:30:
         ed:03:22:65:5c:9f:72:56:2b:a7:ed:b1:7d:36:02:19:34:c8:
         50:cf:27:af:fa:aa:a6:b6:ea:41:f6:bb:f0:86:44:e6:07:6a:
         56:ea:45:d9:d3:e0:d6:13:67:18:78:52:73:7f:55:ea:08:75:
         32:4d:bd:d5:ce:64:51:03:f1:74:5f:da:89:96:e1:5d:28:c6:
         18:9f:e7:4a:4b:21:93:8a:ed:95:2a:a4:e2:5c:e6:73:d7:eb:
         0f:ac:dd:96:7d:67:fe:9e:94:a1:1b:50:24:57:70:4a:10:65:
         f4:41:ac:f7:6d:de:09:1b:12:8f:6d:36:db:bd:cd:41:29:01:
         e5:16:93:55:dc:d5:b2:46:58:12:4d:7c:61:33:43:ca:42:19:
         80:1f:07:46:45:1a:aa:62:96:ea:f8:6c:c0:64:a1:b9:9f:79:
         4c:e3:19:fa:91:9d:29:24:b9:cd:71:12:3c:2c:06:4e:53:65:
         05:a4:23:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:09 2025 by rpki-client on console.sobornost.net