Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa
File:                     3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa (raw, json)
Hash identifier:          +OdSZ12OwgGDctuu2LtIhNX/EvDd0f320T5Ix8RuqQk=
Subject key identifier:   50:DC:94:F1:70:31:4A:20:06:72:C8:5A:B6:C7:E8:71:61:7D:B1:4C
Certificate issuer:       /CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
Certificate serial:       6C337919C3931CA16AFEC98A18026573F4913D3C
Authority key identifier: 31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa
Signing time:             Thu 24 Apr 2025 12:35:58 +0000
ROA not before:           Thu 24 Apr 2025 12:30:58 +0000
ROA not after:            Thu 23 Apr 2026 12:35:58 +0000
asID:                     52965
IP address blocks:        179.124.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:33:79:19:c3:93:1c:a1:6a:fe:c9:8a:18:02:65:73:f4:91:3d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
        Validity
            Not Before: Apr 24 12:30:58 2025 GMT
            Not After : Apr 23 12:35:58 2026 GMT
        Subject: CN=50DC94F170314A200672C85AB6C7E871617DB14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:7f:8d:05:ee:b7:08:1c:c8:89:a7:f1:2c:
                    26:ae:c1:ca:df:87:ca:e4:4a:91:1c:b1:b4:9c:66:
                    71:d6:d3:57:71:f3:23:49:8b:1d:fd:ff:fe:84:c2:
                    08:3c:21:c1:7b:82:ae:69:90:c7:0b:40:62:a2:0b:
                    58:34:82:59:54:d7:d3:f6:9e:d8:c1:c9:69:7d:28:
                    48:0b:86:fa:d8:29:2b:85:88:db:4e:20:97:9c:a7:
                    6e:90:b5:bf:c3:a0:ac:10:cd:44:aa:64:a4:d4:db:
                    9a:d9:90:fb:af:e9:ed:17:f1:e3:76:2d:42:4d:98:
                    23:d9:58:b0:22:83:ea:c8:d5:5f:8d:a4:d3:6d:93:
                    83:22:f7:3c:9b:5d:5b:ea:19:c7:dd:f1:69:e7:c7:
                    4b:42:f9:f1:cf:b1:b2:51:11:a2:59:c7:05:30:e0:
                    56:95:a7:60:a9:84:7d:88:df:d7:2f:95:ec:d9:05:
                    10:0c:c5:95:3f:a3:d7:ca:ab:19:6a:d7:14:8a:d3:
                    01:7b:30:97:6c:72:3d:c5:f2:53:c9:40:06:b7:66:
                    23:2e:fa:72:1c:8d:1f:21:e6:e5:62:69:70:e1:60:
                    27:a9:55:c4:83:03:cc:df:1a:f3:3c:03:57:ce:e4:
                    6c:0f:39:45:e9:4f:65:30:e4:98:99:a1:42:10:be:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DC:94:F1:70:31:4A:20:06:72:C8:5A:B6:C7:E8:71:61:7D:B1:4C
            X509v3 Authority Key Identifier:
                keyid:31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:01:1f:32:e6:e6:4b:e9:c3:51:4d:38:6a:19:a6:4f:2b:bd:
         eb:76:34:29:fe:5f:ea:1c:f8:b5:80:9b:8f:3c:49:2f:c2:af:
         c8:28:24:4a:08:36:46:d8:11:30:b8:62:dd:d4:4d:ed:28:51:
         a9:48:a7:c8:3e:59:66:c5:05:82:c8:37:d7:11:d5:0e:2b:f6:
         8e:2b:9f:4e:58:1e:80:ff:4a:ec:ef:66:04:1d:73:96:de:6e:
         66:7d:3f:e6:25:c2:b0:ac:ba:9a:93:05:b8:61:79:7e:67:15:
         26:64:96:70:98:ad:bc:ac:6e:9c:34:db:ad:4e:a9:c2:21:57:
         4d:84:14:e5:e9:76:bd:21:39:9a:3a:56:a7:e7:f9:1b:f9:72:
         5d:32:cc:48:da:73:63:91:76:cb:52:87:e9:64:58:b7:43:69:
         47:78:47:b1:99:2e:16:56:40:1d:8b:62:ad:c8:b0:0e:a4:52:
         bf:b4:27:39:eb:41:3a:b1:ed:a6:ad:5a:0a:75:7c:3c:7f:50:
         b5:bc:14:83:7c:06:fd:55:28:13:23:e5:46:c3:53:e8:6c:87:
         72:73:89:8a:9b:68:86:69:2f:90:a6:58:65:3e:e7:33:03:6a:
         fe:30:e6:00:d0:00:7f:06:6b:81:8f:fe:fa:0a:d7:ba:84:54:
         03:fb:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:42 2025 by rpki-client on console.sobornost.net