Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/3137392e3138392e302e302f32302d3234203d3e203238333039.roa
File:                     3137392e3138392e302e302f32302d3234203d3e203238333039.roa (raw, json)
Hash identifier:          gj4anIFoqS5An8dBcpGfcziSjC/4vyS/7Ef60ioYdXI=
Subject key identifier:   90:03:37:BF:4E:2C:F4:E3:1E:88:18:34:D3:8F:EC:EE:01:B6:C6:45
Certificate issuer:       /CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
Certificate serial:       19C5A51798ECED36CD35BC289B27F1AFBCFFA38A
Authority key identifier: 69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/3137392e3138392e302e302f32302d3234203d3e203238333039.roa
Signing time:             Thu 03 Apr 2025 13:10:54 +0000
ROA not before:           Thu 03 Apr 2025 13:05:54 +0000
ROA not after:            Thu 02 Apr 2026 13:10:54 +0000
asID:                     28309
IP address blocks:        179.189.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl
                          rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c5:a5:17:98:ec:ed:36:cd:35:bc:28:9b:27:f1:af:bc:ff:a3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
        Validity
            Not Before: Apr  3 13:05:54 2025 GMT
            Not After : Apr  2 13:10:54 2026 GMT
        Subject: CN=900337BF4E2CF4E31E881834D38FECEE01B6C645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:40:17:2d:7a:d4:20:a3:1c:48:4e:59:d3:52:
                    1a:38:df:38:47:03:ea:7f:18:fd:50:19:21:c6:8c:
                    ef:59:18:70:d2:1b:59:1c:08:3b:74:4b:df:25:11:
                    17:27:82:6d:ff:20:d9:d3:25:fc:fa:84:66:6f:ad:
                    b0:ad:9d:de:26:78:b2:d7:37:d0:c9:f4:b2:50:23:
                    d0:04:2b:dd:d7:a1:18:d8:99:44:02:1e:d9:93:e8:
                    61:31:84:ee:8e:fa:84:0c:a6:db:67:d8:fd:70:41:
                    ef:0f:ae:ef:b1:b0:76:79:c0:92:b7:37:c5:0d:59:
                    e0:34:29:fb:dc:9c:f9:44:ac:98:81:0d:20:12:5d:
                    ef:7a:4f:e7:5f:b0:f6:6b:c4:b3:98:40:d7:e0:7d:
                    a0:a7:a5:7b:d4:5d:a2:15:19:18:57:47:0d:3e:f6:
                    e6:95:61:54:5e:24:66:8b:41:4c:c9:4b:ee:c2:6a:
                    07:50:b2:37:d3:5a:db:84:32:44:06:6f:aa:88:15:
                    2e:7c:2a:98:fb:1b:40:75:bc:36:b7:77:06:37:25:
                    c2:9a:1c:56:82:a1:cb:4b:72:10:6d:2c:65:75:41:
                    7c:6f:25:4d:53:27:55:96:80:cf:5a:98:8e:aa:9b:
                    d6:b4:85:b8:96:df:b9:8e:9f:f3:bd:55:5d:81:c7:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:03:37:BF:4E:2C:F4:E3:1E:88:18:34:D3:8F:EC:EE:01:B6:C6:45
            X509v3 Authority Key Identifier:
                keyid:69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/3137392e3138392e302e302f32302d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:dd:37:14:51:d9:22:c6:6f:d1:33:3a:17:f2:3a:65:27:a8:
         83:6f:5a:26:76:ba:53:92:4f:80:1c:15:33:45:27:b0:54:37:
         b4:b2:0c:f1:a7:b3:24:6a:ea:e0:97:c6:37:c6:65:17:c2:f8:
         1a:1a:45:09:6a:79:17:54:67:54:de:e5:81:1b:26:ad:95:3f:
         cf:df:26:f3:f1:07:bd:04:58:ad:fd:40:9a:aa:07:b1:68:e1:
         e6:d8:be:85:58:c4:1c:49:93:6a:45:05:32:fa:25:b1:fb:fa:
         fd:2d:bb:13:fe:2d:d1:d3:d3:2f:64:62:63:69:c3:4d:d6:0e:
         76:54:d8:4d:e1:5b:aa:18:41:d0:64:14:0b:be:31:01:f0:b3:
         b9:cd:9d:b1:c6:42:9e:e2:63:5c:d8:ab:91:51:52:dd:c0:80:
         52:05:0b:d7:70:d0:99:b9:dc:e7:82:87:19:d5:65:a0:eb:88:
         b9:f3:b3:02:f4:60:3b:e5:5c:ca:3e:ba:3e:e5:94:a0:20:3c:
         73:ee:90:a8:38:3c:9e:28:6e:b8:5d:3b:c4:65:51:33:a5:6f:
         a1:c1:f5:09:76:27:e6:47:3d:1a:77:aa:c0:43:6f:63:63:e0:
         3c:82:93:27:78:b2:8e:11:7a:1a:de:32:1a:37:87:9c:d2:7f:
         10:a8:0a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:04 2025 by rpki-client on console.sobornost.net