Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3133312e37322e34382e302f32322d3234203d3e203532353435.roa
File:                     3133312e37322e34382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          kG6nUEotpXMy4cecsagMIIJheZ/obHoILOyX/coKc38=
Subject key identifier:   44:A3:86:52:6F:31:92:4C:88:2F:FB:34:8F:5F:E6:2C:13:6A:FD:49
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       4AC8795A5ED4A02ACE2002F01AA5D0230D8D08F2
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3133312e37322e34382e302f32322d3234203d3e203532353435.roa
Signing time:             Thu 06 Mar 2025 02:06:27 +0000
ROA not before:           Thu 06 Mar 2025 02:01:27 +0000
ROA not after:            Thu 05 Mar 2026 02:06:27 +0000
asID:                     52545
IP address blocks:        131.72.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c8:79:5a:5e:d4:a0:2a:ce:20:02:f0:1a:a5:d0:23:0d:8d:08:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Mar  6 02:01:27 2025 GMT
            Not After : Mar  5 02:06:27 2026 GMT
        Subject: CN=44A386526F31924C882FFB348F5FE62C136AFD49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bc:83:a2:2a:64:c5:bc:9f:f3:3b:39:ad:c4:
                    20:19:e8:bc:15:e4:6f:39:e2:59:88:9a:7a:eb:d6:
                    d5:74:de:49:e8:53:ec:7e:2f:5c:fe:3c:09:61:6f:
                    fb:2c:9a:20:13:1e:17:30:58:66:4c:33:c4:5c:ff:
                    0c:a8:49:23:bf:bc:d9:65:bc:2d:62:51:2b:2a:a7:
                    6f:d6:cb:a0:d8:9d:2e:a7:dd:01:63:9e:ec:95:8f:
                    bf:fe:fa:7e:77:15:3c:9d:bd:b1:73:16:28:19:88:
                    c9:9c:db:7f:dd:77:bc:ea:9b:23:51:9e:62:43:15:
                    0b:5e:c2:63:98:ea:55:7b:77:f3:3b:32:68:02:c6:
                    32:ea:03:dd:31:e5:74:a5:dd:ee:5d:7a:b2:63:43:
                    bc:9e:24:d9:52:1f:01:fa:af:63:fd:28:48:43:e1:
                    82:fa:66:51:51:8a:22:06:e3:a2:1c:03:41:62:fa:
                    8d:7f:7d:68:b6:b6:8b:90:7e:28:4a:7a:f5:93:a8:
                    50:93:94:9c:3d:82:60:f2:31:86:36:f9:d3:31:0f:
                    d2:af:1a:65:a6:4b:c4:32:2f:bc:bb:72:8b:9a:10:
                    0f:ee:2d:06:ff:9c:3b:de:6d:9d:88:43:77:78:5b:
                    1f:35:8e:77:2d:af:b9:06:a8:e8:7b:dc:cb:5c:ed:
                    2f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A3:86:52:6F:31:92:4C:88:2F:FB:34:8F:5F:E6:2C:13:6A:FD:49
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3133312e37322e34382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:c9:8e:fc:06:2b:70:fe:13:b7:50:2c:33:57:3b:a8:a3:70:
         79:d1:1a:71:21:9b:fe:ec:cb:55:47:84:32:e2:20:d4:54:ae:
         e9:47:a1:68:90:5c:49:b7:b6:03:f2:15:04:c6:e6:24:6a:bd:
         a0:5f:a6:1c:06:8d:14:46:f3:40:37:9f:85:e0:f5:a3:b3:f4:
         5a:5a:b6:cc:2d:be:ce:66:87:62:1f:24:40:ae:1a:63:ff:11:
         7f:db:f7:6c:46:3e:4f:a8:19:7b:f7:f6:d2:53:f6:97:82:8c:
         0e:5c:3d:69:6f:ea:70:e1:bf:74:78:61:ef:77:1d:a0:94:fe:
         6d:e9:e4:5a:d5:ea:cf:0e:b7:d8:02:6f:bc:59:8b:4c:51:3a:
         db:4d:f2:93:07:ee:36:92:34:6d:57:e8:e7:f8:ca:a7:29:8b:
         fb:fb:af:f9:64:0a:49:37:c5:43:c7:63:46:12:62:7d:23:63:
         65:57:e3:13:b8:15:94:56:7d:6c:25:4a:d5:73:16:32:8d:3a:
         74:01:1c:25:04:89:ac:4c:ff:c4:a7:a8:33:42:ad:21:b3:d8:
         9a:dd:9e:1b:5a:59:73:da:8a:6d:24:32:32:73:d6:3a:b8:14:
         86:29:9c:4a:a1:85:20:df:44:00:13:25:00:f7:2e:0d:f1:93:
         e7:8e:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:46 2025 by rpki-client on console.sobornost.net