Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/3137392e3138392e3230382e302f32322d3234203d3e203238313333.roa
File:                     3137392e3138392e3230382e302f32322d3234203d3e203238313333.roa (raw, json)
Hash identifier:          v7A59cNihVuoQ8xCnbIa1ITZ+P+AUUV0pKC0LhjQEnQ=
Subject key identifier:   F4:C5:02:07:19:C5:F0:6E:BC:77:5D:0D:DF:A0:A4:2B:5B:54:D1:74
Certificate issuer:       /CN=57293D96DAFC56E0450C22FBEE7A673DF7BB26B8
Certificate serial:       42DA4868EAE95E679FC6F74B6DB7A108F41BE6C5
Authority key identifier: 57:29:3D:96:DA:FC:56:E0:45:0C:22:FB:EE:7A:67:3D:F7:BB:26:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/3137392e3138392e3230382e302f32322d3234203d3e203238313333.roa
Signing time:             Fri 07 Mar 2025 00:41:32 +0000
ROA not before:           Fri 07 Mar 2025 00:36:32 +0000
ROA not after:            Fri 06 Mar 2026 00:41:32 +0000
asID:                     28133
IP address blocks:        179.189.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl
                          rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:da:48:68:ea:e9:5e:67:9f:c6:f7:4b:6d:b7:a1:08:f4:1b:e6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57293D96DAFC56E0450C22FBEE7A673DF7BB26B8
        Validity
            Not Before: Mar  7 00:36:32 2025 GMT
            Not After : Mar  6 00:41:32 2026 GMT
        Subject: CN=F4C5020719C5F06EBC775D0DDFA0A42B5B54D174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:6f:27:93:6c:f1:36:90:1a:80:32:4f:bd:
                    b7:ec:1b:66:9b:48:60:20:18:46:70:c4:d2:c6:40:
                    c1:c4:2c:10:20:ec:61:f9:74:93:6c:4e:fc:ac:bc:
                    74:23:38:f7:71:ed:a0:1d:a1:bb:a6:0f:49:64:b0:
                    a6:1f:2b:46:cd:51:08:db:53:02:a5:db:b4:29:87:
                    42:d4:6f:d9:89:7f:4a:5c:4b:ea:a9:30:df:d9:05:
                    bc:7d:c5:55:f8:7d:b5:e0:aa:66:97:ed:38:db:50:
                    9d:68:b2:12:b0:9a:ac:8c:84:c6:6e:22:46:ef:ce:
                    e6:ff:3b:be:6a:1d:d0:dc:e5:eb:38:bf:9b:db:12:
                    11:9f:ca:75:7c:d0:ab:0a:af:80:f3:63:84:0f:0e:
                    b5:52:b7:83:2f:82:ab:3e:a3:60:84:90:c0:f5:af:
                    c1:c1:65:ed:46:59:bd:1a:bb:82:e1:bf:71:3e:d6:
                    e9:40:03:03:64:ba:af:e2:68:36:c7:d2:ec:05:a0:
                    d3:2c:c3:bb:8e:5d:ed:4f:ed:ce:c0:00:c5:7c:bf:
                    73:6d:ba:d7:5c:43:42:53:67:7a:42:ff:c5:17:cc:
                    5b:a2:f0:fa:1d:a5:05:ce:aa:99:9e:92:98:18:e0:
                    f3:92:fa:ab:ae:66:84:34:c8:24:2f:2a:bf:01:19:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C5:02:07:19:C5:F0:6E:BC:77:5D:0D:DF:A0:A4:2B:5B:54:D1:74
            X509v3 Authority Key Identifier:
                keyid:57:29:3D:96:DA:FC:56:E0:45:0C:22:FB:EE:7A:67:3D:F7:BB:26:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/3137392e3138392e3230382e302f32322d3234203d3e203238313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:8a:ba:9b:09:b3:7e:97:7d:36:90:3a:fc:cd:bf:94:d1:
         10:08:18:31:6d:59:ae:f8:95:57:28:63:0c:22:ff:2f:67:fa:
         b6:63:83:58:ab:00:a7:ea:78:cb:0a:4c:f9:6b:2e:e9:34:c1:
         a6:ca:6f:45:ec:27:15:51:2a:29:7d:6b:70:55:cb:0d:ef:54:
         29:1a:ea:a9:2d:4b:5d:e6:90:c7:9a:a2:71:0b:1c:30:80:f1:
         fa:96:84:fd:94:04:a1:9e:83:e2:5f:c2:fd:b9:04:47:6c:ea:
         53:76:de:ff:bc:ba:98:c3:fe:6b:5a:8d:37:cb:a8:55:12:40:
         18:ee:95:02:53:61:be:35:de:d8:5b:7b:23:02:8d:92:e2:58:
         aa:0c:70:b0:0c:99:92:9a:52:38:9a:ce:51:19:63:34:bb:7a:
         b4:93:2f:d5:35:52:47:17:5e:69:b3:ce:0b:3c:f8:d6:f5:86:
         1c:c0:15:6c:0a:e1:9a:19:68:2e:36:e2:f3:89:a3:2e:db:62:
         b0:16:05:bb:8c:ef:91:de:c4:81:5e:2a:3c:17:6f:52:f6:2e:
         c2:e8:c5:2a:f4:85:c9:e2:26:1b:4c:0b:33:6e:0c:79:59:f0:
         8a:db:81:e9:74:b6:43:9c:d9:7e:e7:c9:52:49:bf:ec:50:9e:
         eb:cd:e1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:46 2025 by rpki-client on console.sobornost.net