Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/3133312e302e3135322e302f32322d3234203d3e203631383739.roa
File:                     3133312e302e3135322e302f32322d3234203d3e203631383739.roa (raw, json)
Hash identifier:          a8BLYSbPWz4R+eUJKlAytaeE33WpfG5wzSLIqzrvN8Q=
Subject key identifier:   B3:85:10:DF:E8:4C:FC:1A:4D:A3:A9:B1:AC:4F:DE:CC:0D:44:E5:75
Certificate issuer:       /CN=129EEDE439F72016FF6D587AF04D37689F26C2E4
Certificate serial:       2F232B27484B8636A04C1DA09D7279AD163B06E6
Authority key identifier: 12:9E:ED:E4:39:F7:20:16:FF:6D:58:7A:F0:4D:37:68:9F:26:C2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/129EEDE439F72016FF6D587AF04D37689F26C2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/3133312e302e3135322e302f32322d3234203d3e203631383739.roa
Signing time:             Wed 23 Apr 2025 15:34:54 +0000
ROA not before:           Wed 23 Apr 2025 15:29:54 +0000
ROA not after:            Wed 22 Apr 2026 15:34:54 +0000
asID:                     61879
IP address blocks:        131.0.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/129EEDE439F72016FF6D587AF04D37689F26C2E4.crl
                          rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/129EEDE439F72016FF6D587AF04D37689F26C2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/129EEDE439F72016FF6D587AF04D37689F26C2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:23:2b:27:48:4b:86:36:a0:4c:1d:a0:9d:72:79:ad:16:3b:06:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=129EEDE439F72016FF6D587AF04D37689F26C2E4
        Validity
            Not Before: Apr 23 15:29:54 2025 GMT
            Not After : Apr 22 15:34:54 2026 GMT
        Subject: CN=B38510DFE84CFC1A4DA3A9B1AC4FDECC0D44E575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:b2:5c:dc:30:9f:98:7c:5f:db:d0:71:8a:
                    18:d8:ca:46:44:1f:3a:1d:f9:6b:26:d7:ee:9a:d9:
                    04:8c:88:1c:63:41:9b:3d:49:ec:eb:21:69:3c:c2:
                    da:8f:06:86:b6:0d:48:79:d6:ef:b5:97:ac:9d:e7:
                    ba:c4:70:34:b9:44:4c:94:0b:67:14:a3:26:bb:91:
                    33:89:44:89:31:bd:2b:6c:a2:3a:8f:fe:2d:71:79:
                    69:c2:02:98:62:80:16:f0:5c:9a:d3:43:16:f6:95:
                    c4:9a:62:e8:66:81:49:18:f1:84:0b:b6:b5:d8:de:
                    d5:ba:50:a1:fc:e9:94:cf:b5:1a:d8:a6:d2:b5:73:
                    cb:e2:c4:4d:08:92:d9:05:ef:74:9e:41:ca:51:94:
                    e1:ec:6e:f6:8f:f8:5c:99:70:80:40:0e:90:95:bf:
                    b3:9e:88:a5:c8:93:38:48:2b:e9:70:3b:92:14:b8:
                    f0:37:a1:6c:48:35:fb:89:7a:c8:70:52:ee:60:dc:
                    9e:25:bf:2d:5f:9e:4b:bc:2c:03:d7:2e:71:b7:24:
                    e4:a4:af:19:46:a9:53:a7:c3:ab:e5:fc:b0:73:d1:
                    8a:6c:01:d9:a0:2c:54:a4:a8:a7:2f:54:8f:fd:42:
                    f8:56:a8:1d:06:09:e6:16:6d:f3:80:2a:72:0a:80:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:85:10:DF:E8:4C:FC:1A:4D:A3:A9:B1:AC:4F:DE:CC:0D:44:E5:75
            X509v3 Authority Key Identifier:
                keyid:12:9E:ED:E4:39:F7:20:16:FF:6D:58:7A:F0:4D:37:68:9F:26:C2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/129EEDE439F72016FF6D587AF04D37689F26C2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/129EEDE439F72016FF6D587AF04D37689F26C2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/3133312e302e3135322e302f32322d3234203d3e203631383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:31:a1:2d:62:20:0a:a5:cf:59:2c:d2:30:87:be:87:b6:10:
         a6:cf:bc:5f:5b:db:3d:66:ba:3d:97:ba:5b:7f:ad:d8:05:d7:
         7e:18:dd:6f:b3:02:d9:85:fe:af:6d:a4:c6:ea:b5:96:8e:52:
         d5:b3:63:d8:05:fe:eb:05:37:14:ce:ee:68:39:65:3f:f5:87:
         a1:c5:36:69:86:0f:b2:5c:73:84:d6:0d:f3:bb:86:50:e3:11:
         87:fb:fe:a3:f8:ba:e2:1c:34:a5:a8:3c:96:b6:8b:97:82:ea:
         58:e2:24:3a:29:48:3b:f5:16:a4:0a:30:b6:30:5d:db:46:18:
         95:2e:5e:e6:71:81:51:a9:37:94:20:1d:eb:4f:ec:c9:4c:ad:
         e8:69:fa:48:3e:8d:e4:e9:4c:11:59:7e:86:b3:db:d6:5c:1f:
         1f:4e:19:4d:c0:26:b9:65:26:e0:86:c0:d5:89:e8:d0:a6:ac:
         6f:7a:71:51:3d:96:ce:fa:56:40:06:5e:64:9d:f1:54:ae:2f:
         99:92:11:5b:6b:ea:f6:f4:b8:a5:ae:ba:50:e1:44:86:e6:98:
         5f:72:28:55:ff:b2:44:2e:8a:8d:36:cc:d7:d0:af:e9:57:ac:
         77:25:8b:28:d8:b2:ba:6c:dd:bb:77:99:02:1b:43:51:9d:ee:
         71:02:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:53 2025 by rpki-client on console.sobornost.net