Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3230312e37362e3139322e302f32302d3234203d3e203232333536.roa
File:                     3230312e37362e3139322e302f32302d3234203d3e203232333536.roa (raw, json)
Hash identifier:          H7O0RgQD2YQmmg/zd/Dw8LRIlxXUh+E2tsnun3K5MkM=
Subject key identifier:   3E:DF:79:51:41:C4:D0:B1:63:60:0A:4E:8E:91:94:6E:FC:8F:24:59
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       23E09BFED2FE576362AE2E8260B3E775653B51D7
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3230312e37362e3139322e302f32302d3234203d3e203232333536.roa
Signing time:             Fri 18 Apr 2025 14:30:50 +0000
ROA not before:           Fri 18 Apr 2025 14:25:50 +0000
ROA not after:            Fri 17 Apr 2026 14:30:50 +0000
asID:                     22356
IP address blocks:        201.76.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 23:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e0:9b:fe:d2:fe:57:63:62:ae:2e:82:60:b3:e7:75:65:3b:51:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: Apr 18 14:25:50 2025 GMT
            Not After : Apr 17 14:30:50 2026 GMT
        Subject: CN=3EDF795141C4D0B163600A4E8E91946EFC8F2459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:7b:59:5a:36:1d:24:4e:57:db:65:2f:72:
                    88:b5:7d:ab:7f:60:c6:49:0a:6e:28:26:58:08:8c:
                    71:9c:b9:8d:27:22:24:8f:ea:f1:07:32:c1:d0:75:
                    d9:07:06:1a:87:b0:86:14:21:2d:13:73:5f:5a:17:
                    27:8d:21:8c:0a:2a:c6:fa:92:fa:bf:3e:19:cf:02:
                    c2:30:22:75:5c:49:43:66:d4:06:ca:75:82:5a:cc:
                    b7:0a:52:ca:b4:9b:e0:02:ef:8d:82:fc:9e:23:1e:
                    ab:23:87:9e:57:bd:80:f7:56:bd:a9:2c:61:b4:e7:
                    62:a0:3d:69:c4:90:32:e0:e2:26:c2:2b:26:32:45:
                    7a:93:cf:60:4a:e9:fa:f8:1c:bf:b6:47:b9:ed:3a:
                    a1:05:d5:0b:4a:cf:9b:e3:23:7f:82:43:14:6a:23:
                    5e:a8:2b:72:18:00:8f:90:0c:c0:97:bc:6b:d6:2d:
                    67:f6:0f:bc:13:ff:21:31:93:e1:61:e6:c8:69:ba:
                    a5:f1:02:08:c5:70:6f:3d:23:ac:8d:78:20:92:b3:
                    82:b0:af:dd:76:18:5c:0f:5c:24:9d:a2:e2:d9:6b:
                    3c:14:b0:a1:8b:a6:ce:3b:dc:3a:e7:d7:f8:60:3d:
                    bd:fb:88:93:61:4c:2f:d6:eb:4a:45:d9:bc:46:1e:
                    8e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DF:79:51:41:C4:D0:B1:63:60:0A:4E:8E:91:94:6E:FC:8F:24:59
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3230312e37362e3139322e302f32302d3234203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:b4:e0:62:cc:f5:20:d2:f8:56:b5:a8:bd:16:dc:77:58:80:
         12:71:08:df:84:e1:2c:de:ce:8f:89:ed:a5:02:a2:62:46:8e:
         c9:d7:68:f4:c2:7d:65:ff:fc:15:b1:e9:a1:ee:a8:a0:d4:84:
         f7:da:1b:37:84:46:c0:62:45:3a:55:37:b5:7d:0f:a3:d9:66:
         a0:1a:8e:a0:6a:07:d5:6e:9c:56:c7:56:eb:68:5f:4a:3d:6f:
         3e:95:57:19:cb:47:b4:5c:a3:56:b9:16:ca:c8:0d:f9:40:9b:
         a4:2b:b0:8c:cc:a9:f9:60:c3:82:63:dc:4d:0e:a0:ca:3e:9a:
         54:45:81:f4:01:cc:54:2f:04:f9:90:d6:e6:3e:c1:77:04:bb:
         16:30:45:4c:e1:4a:ce:e0:de:a6:07:8f:b7:29:7e:8d:a3:ff:
         8b:76:21:a4:19:93:39:3d:0d:af:a3:a7:c1:00:6e:06:51:f3:
         e0:1d:83:05:39:a2:e9:b7:19:85:08:b5:94:d6:4d:8a:90:cd:
         c2:b5:7a:ff:9f:e6:09:e9:13:3e:9e:1d:6a:2c:8c:69:1d:6e:
         90:2d:5f:90:5d:ed:f2:67:a3:b1:99:3b:2e:69:bf:47:a9:3a:
         d2:8a:72:e9:5b:76:eb:6e:71:8c:80:7a:fa:a7:22:c4:f2:21:
         f4:86:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:25 2025 by rpki-client on console.sobornost.net