Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138332e302f32342d3234203d3e203631373936.roa
File:                     3230312e3135392e3138332e302f32342d3234203d3e203631373936.roa (raw, json)
Hash identifier:          gkdDdF6vhsPyDCqSMAEUWqGfvYhcul7xxZHlV1ZK4I0=
Subject key identifier:   19:47:95:8C:42:5D:E7:96:D6:33:FC:D4:FB:DC:D2:C0:60:8F:B6:35
Certificate issuer:       /CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
Certificate serial:       2BF2F9F70007F877DCE41C1802703108DBC692F9
Authority key identifier: B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138332e302f32342d3234203d3e203631373936.roa
Signing time:             Wed 23 Apr 2025 08:04:36 +0000
ROA not before:           Wed 23 Apr 2025 07:59:36 +0000
ROA not after:            Wed 22 Apr 2026 08:04:36 +0000
asID:                     61796
IP address blocks:        201.159.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f2:f9:f7:00:07:f8:77:dc:e4:1c:18:02:70:31:08:db:c6:92:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
        Validity
            Not Before: Apr 23 07:59:36 2025 GMT
            Not After : Apr 22 08:04:36 2026 GMT
        Subject: CN=1947958C425DE796D633FCD4FBDCD2C0608FB635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:0a:1a:f6:30:ba:f9:18:de:32:a8:97:26:
                    d4:24:05:da:12:a4:0c:6a:05:1a:be:2a:66:5d:89:
                    0a:c5:33:13:ec:6a:9b:24:6d:ee:05:5e:c6:fb:e4:
                    7c:cc:49:ad:64:40:e1:a6:d5:86:74:33:25:4a:93:
                    bd:46:4a:c8:e9:f1:94:ad:75:82:1b:76:d0:41:43:
                    19:79:46:88:6b:15:44:37:74:86:55:51:b6:90:6f:
                    b1:4a:6b:21:fd:7f:db:a3:16:19:9e:2d:56:f2:cf:
                    5e:64:d3:89:75:f7:8d:02:b8:5c:74:b8:48:67:d0:
                    6a:8d:3a:ea:61:25:10:4a:6f:65:92:be:95:09:24:
                    e9:03:48:5f:5c:ac:7a:64:d2:dd:c5:09:d2:09:d8:
                    d1:c0:fa:af:8b:c4:db:97:88:80:e7:f4:de:b4:52:
                    6f:77:ff:67:6c:b5:60:0e:db:b8:df:f8:64:bf:fe:
                    05:ad:2e:0e:9c:56:33:0b:83:21:d5:5b:ca:41:44:
                    3c:8e:49:ad:47:c6:40:33:3d:e4:b4:6c:bb:45:90:
                    a3:29:c3:a5:54:2f:79:fb:f5:af:13:22:9b:56:96:
                    50:e7:7a:d0:61:d1:79:99:5f:66:4e:1a:cb:10:e7:
                    b6:b3:03:ed:3c:00:ac:6d:ab:e6:64:80:ca:06:a7:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:47:95:8C:42:5D:E7:96:D6:33:FC:D4:FB:DC:D2:C0:60:8F:B6:35
            X509v3 Authority Key Identifier:
                keyid:B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138332e302f32342d3234203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:aa:6d:93:42:7c:02:6f:c2:16:61:08:88:99:35:23:40:52:
         f8:ac:92:2d:9a:b7:f9:41:87:61:04:e0:be:a1:d8:e2:49:ed:
         aa:5c:33:81:54:36:19:32:da:6f:8e:6f:f0:87:0d:75:4f:c4:
         a6:2c:d3:ec:9e:40:d2:3f:50:08:af:a2:61:a3:1d:c2:7b:94:
         77:df:71:ba:8c:79:ae:2c:64:c4:89:51:4b:65:82:0e:d4:9f:
         f2:18:85:76:20:cf:21:3b:6f:db:0e:54:54:5d:39:3d:bb:6c:
         9c:0c:7f:ef:16:07:bf:d1:97:0f:ca:ef:ae:7a:20:10:a3:4b:
         64:83:f0:a4:a4:d7:44:4d:ab:89:8d:6a:b9:60:a7:c1:0a:d0:
         3d:0e:35:8c:31:4f:3e:d4:a0:4f:6a:3e:25:b1:ad:18:f6:94:
         15:16:b8:38:ca:e3:44:48:2b:3d:21:75:33:8d:85:e7:07:fe:
         e0:5a:22:fb:c2:3d:62:8a:06:d6:91:cd:45:21:69:67:06:0b:
         f3:65:48:68:02:4d:b8:66:8d:0b:ee:ea:13:d0:b9:4a:41:8a:
         bf:7f:1e:70:1e:ae:cb:3a:6d:36:9a:0d:a2:51:dd:da:a6:ce:
         bb:b7:84:74:7a:20:73:a7:42:fc:88:92:b6:b8:7f:44:6b:2f:
         e0:5c:6e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:16 2025 by rpki-client on console.sobornost.net