Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3138392e3132342e39362e302f32302d3234203d3e203232333536.roa
File:                     3138392e3132342e39362e302f32302d3234203d3e203232333536.roa (raw, json)
Hash identifier:          4RWdX36bZMJLXgoSRSa1Ymc4At0rCJL3dL7BLqRu0LE=
Subject key identifier:   55:27:BF:A7:2F:17:5C:B4:84:A5:B5:C0:3B:B3:8E:29:B4:CF:11:F2
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       46EED510F7959FC6B7E31294079B00473F690538
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3138392e3132342e39362e302f32302d3234203d3e203232333536.roa
Signing time:             Fri 18 Apr 2025 14:30:50 +0000
ROA not before:           Fri 18 Apr 2025 14:25:50 +0000
ROA not after:            Fri 17 Apr 2026 14:30:50 +0000
asID:                     22356
IP address blocks:        189.124.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ee:d5:10:f7:95:9f:c6:b7:e3:12:94:07:9b:00:47:3f:69:05:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: Apr 18 14:25:50 2025 GMT
            Not After : Apr 17 14:30:50 2026 GMT
        Subject: CN=5527BFA72F175CB484A5B5C03BB38E29B4CF11F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:77:ca:2f:68:fc:87:9b:ce:6c:d2:1d:66:
                    b4:82:f4:1d:66:8c:eb:ee:16:59:60:80:22:8d:29:
                    5b:9b:9b:dd:53:a4:67:9d:8c:92:07:6b:c9:b3:e4:
                    13:52:1c:2d:c4:8f:8c:6a:ab:23:00:95:9d:8e:fd:
                    23:cf:2e:9f:88:58:9f:5e:27:72:0b:52:87:a3:b3:
                    6f:b4:7b:92:03:ea:3a:fc:b6:fd:f0:be:12:0e:78:
                    8b:a6:5b:ad:fe:b4:4d:50:2c:f6:05:44:bc:ad:e8:
                    f5:21:8c:06:a4:c3:54:e1:33:d8:3c:7c:83:1d:80:
                    69:df:da:21:70:27:ff:d0:39:e3:70:4c:0c:69:13:
                    02:61:37:06:0b:09:40:eb:31:a5:7d:a7:ac:b9:6f:
                    17:9e:50:6f:61:c2:ab:d2:d1:cd:f4:fd:31:58:e1:
                    f5:c3:0d:ae:e2:4a:4f:f8:f0:46:fd:50:92:20:2f:
                    d3:27:1e:fa:e4:ac:66:ed:d4:8b:d8:ab:ef:14:4c:
                    df:4d:13:3f:2f:84:36:e6:2a:75:e8:dd:e9:28:05:
                    a9:27:ba:04:a5:73:c3:e2:31:b2:0f:8f:fe:f8:1f:
                    5d:a3:c9:c5:44:c8:a7:48:ed:dc:6f:4d:22:b4:e5:
                    27:b0:29:d9:69:32:68:8b:f1:d1:a6:ae:5a:d2:9f:
                    74:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:27:BF:A7:2F:17:5C:B4:84:A5:B5:C0:3B:B3:8E:29:B4:CF:11:F2
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3138392e3132342e39362e302f32302d3234203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:50:20:43:da:4b:24:64:e6:6a:55:33:e5:90:7e:c4:d9:
         cd:e6:05:35:4c:00:44:cc:c2:85:c5:6b:e8:ed:5f:0d:c2:51:
         dc:4f:88:4c:9a:bc:a1:ad:db:1f:59:16:d5:d2:ef:7e:50:7f:
         99:8f:6f:8f:71:9b:22:dc:cd:19:85:1a:35:48:ab:27:c1:0d:
         ee:ef:76:98:4e:73:a4:0a:95:54:ff:c2:09:27:f8:9c:a9:06:
         95:07:db:bb:be:48:ea:60:ae:e8:ce:ec:aa:73:25:27:5f:08:
         61:6b:cb:c8:f2:e6:65:5f:63:fc:4b:9c:42:9c:86:8e:3e:34:
         e0:7a:14:9a:d8:4e:23:f6:87:ad:fe:9b:86:74:1c:6f:b1:03:
         20:8f:41:03:cd:3c:b5:87:e7:2f:e6:06:10:ff:90:89:8f:9b:
         50:a2:2e:e1:19:91:0f:f8:38:1f:af:51:03:5b:16:8f:84:be:
         ba:c9:50:3a:d3:c6:96:58:f9:4c:23:22:54:3d:6d:14:b6:05:
         f3:c1:ec:a8:d6:12:5d:d2:5b:37:9d:c7:30:66:b8:a6:95:bb:
         25:ed:1b:52:5d:b0:33:4e:c4:2a:87:43:9f:c3:6e:d1:88:6e:
         50:e5:65:4a:0d:8e:3c:0c:77:f3:08:26:7b:41:89:93:b3:03:
         5b:f0:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:47 2025 by rpki-client on console.sobornost.net