Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3138372e3130332e36342e302f32302d3234203d3e203532393635.roa
File:                     3138372e3130332e36342e302f32302d3234203d3e203532393635.roa (raw, json)
Hash identifier:          oOMb8u/hgLDBI9S1BBhGon4PYwZYeXrW9/06QiZpUTo=
Subject key identifier:   8A:9F:44:61:B6:FC:B7:39:12:E9:92:77:BF:98:8D:11:AC:99:E5:10
Certificate issuer:       /CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
Certificate serial:       6DED526F2959DAE056B9FEC9541607CD52A7D6
Authority key identifier: 31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3138372e3130332e36342e302f32302d3234203d3e203532393635.roa
Signing time:             Thu 24 Apr 2025 12:36:05 +0000
ROA not before:           Thu 24 Apr 2025 12:31:05 +0000
ROA not after:            Thu 23 Apr 2026 12:36:05 +0000
asID:                     52965
IP address blocks:        187.103.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ed:52:6f:29:59:da:e0:56:b9:fe:c9:54:16:07:cd:52:a7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
        Validity
            Not Before: Apr 24 12:31:05 2025 GMT
            Not After : Apr 23 12:36:05 2026 GMT
        Subject: CN=8A9F4461B6FCB73912E99277BF988D11AC99E510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:41:de:fa:41:b2:6d:55:02:8f:79:42:98:
                    68:fa:3b:c8:c5:75:6a:4d:cf:6e:ba:16:cc:07:e5:
                    05:a2:ce:d2:69:b3:b5:b9:27:a3:d6:0e:b1:3a:be:
                    f5:3d:d2:8b:8d:2d:58:f1:14:41:e9:72:b5:45:fb:
                    41:ef:3b:bc:1f:6f:41:ea:5f:88:64:c6:05:da:73:
                    96:19:57:eb:38:80:47:3d:69:c3:ad:14:d3:78:a7:
                    eb:cf:24:0f:05:35:a1:33:30:03:f8:5e:03:89:05:
                    f8:13:af:29:80:0f:42:78:b0:2a:29:3a:af:e6:77:
                    22:5f:3a:26:8b:1b:95:c1:5e:89:14:05:b6:83:2c:
                    cf:f8:91:17:2e:f0:1f:ba:f0:05:85:89:a5:0f:85:
                    c6:90:d9:61:1c:b5:20:51:fb:5f:be:dc:a4:a9:a6:
                    c1:75:15:0f:42:ba:46:88:68:c0:a6:4b:0a:77:14:
                    43:34:c4:26:cb:78:1c:74:ec:fe:41:a5:e2:3c:74:
                    a8:20:59:1b:9d:51:27:cb:53:fe:f3:c1:45:8b:ab:
                    1c:40:25:f4:27:23:c9:10:3f:dc:70:38:66:29:fb:
                    05:1a:26:07:c9:7b:db:15:66:0f:7b:5c:8c:97:50:
                    8c:48:66:22:42:72:e2:37:79:e7:79:cf:93:a5:bf:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9F:44:61:B6:FC:B7:39:12:E9:92:77:BF:98:8D:11:AC:99:E5:10
            X509v3 Authority Key Identifier:
                keyid:31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3138372e3130332e36342e302f32302d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:92:dc:7b:6f:f0:10:6e:43:04:85:25:2c:72:f7:8d:f7:89:
         41:fe:1d:73:11:4b:6f:8c:82:6d:3b:9b:f6:db:28:a9:5f:38:
         a7:09:9d:36:c5:b7:83:53:17:86:1c:a0:4d:44:9f:63:07:71:
         9f:70:8d:7c:e6:bb:00:8c:ba:4d:73:00:e7:48:65:ff:c7:1e:
         ff:b0:6b:3f:59:ef:91:67:bc:03:67:5d:1c:c9:ff:93:a4:1c:
         79:98:57:a3:d9:03:02:10:57:06:ff:ba:25:5c:95:80:94:81:
         b3:03:a3:98:7a:cd:65:eb:d0:8b:5f:7a:e9:cd:d1:01:07:d2:
         e0:cc:00:7b:cb:05:89:65:fa:2e:f4:e9:96:08:6d:4e:ee:1b:
         6f:ff:b2:1a:40:81:76:0d:bd:8e:78:78:b4:ec:36:26:b7:fa:
         de:b3:42:10:58:86:e0:0f:33:77:fd:7e:ae:2b:68:10:b7:15:
         6a:52:b1:f3:f4:47:5d:3d:36:ae:eb:39:91:e1:2c:5a:d4:99:
         f1:67:6a:4e:a4:bd:b6:3b:1a:71:b2:c8:31:88:a1:45:06:31:
         be:04:c4:db:74:d3:a7:30:43:07:ea:06:e1:29:49:9d:55:b4:
         25:2b:18:4e:7a:4f:9a:cc:64:51:e0:00:9e:17:65:a6:2e:ba:
         3c:52:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:42 2025 by rpki-client on console.sobornost.net