Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133312e3235352e3132302e302f32342d3234203d3e20323634343739.roa
File:                     3133312e3235352e3132302e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier:          aG5dCcpSbdE/Vz75i5YQAsLYWfAthk8/Dhxwb4z9FYU=
Subject key identifier:   98:E0:28:03:57:85:00:66:83:D3:6A:65:EE:BA:D3:66:9D:0F:62:C8
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       7EB7F4FD40A661D6CFA099FFB074CBF4D7D628CF
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133312e3235352e3132302e302f32342d3234203d3e20323634343739.roa
Signing time:             Sat 05 Apr 2025 01:53:20 +0000
ROA not before:           Sat 05 Apr 2025 01:48:20 +0000
ROA not after:            Sat 04 Apr 2026 01:53:20 +0000
asID:                     264479
IP address blocks:        131.255.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b7:f4:fd:40:a6:61:d6:cf:a0:99:ff:b0:74:cb:f4:d7:d6:28:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: Apr  5 01:48:20 2025 GMT
            Not After : Apr  4 01:53:20 2026 GMT
        Subject: CN=98E028035785006683D36A65EEBAD3669D0F62C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:35:9a:3a:14:59:0b:ee:e5:6e:94:e0:77:
                    f9:8a:d4:3a:52:7e:b9:fd:94:73:93:1f:69:68:0a:
                    5b:0d:70:0d:02:cc:b1:90:91:ab:ae:3c:2a:af:43:
                    03:3f:8d:5f:91:a4:27:cf:39:7c:03:dc:64:a1:27:
                    2e:e8:d2:54:59:23:6d:55:22:b1:28:58:9e:20:61:
                    a6:6f:1f:f4:0a:2d:58:32:4d:57:99:df:c4:ba:a3:
                    23:c7:2d:39:48:28:92:17:2b:e9:6e:d7:b5:d7:ff:
                    f3:91:b5:5d:15:f3:83:ff:97:3e:ba:c1:ca:1e:05:
                    db:94:6b:58:4b:32:8a:6d:63:25:a8:76:29:a3:16:
                    f8:e7:97:75:55:77:d5:89:1f:57:cd:6f:98:7c:99:
                    03:92:93:f3:67:63:02:59:24:e1:85:90:fb:a7:0f:
                    1a:1a:bf:20:e4:84:10:0a:83:4d:d8:48:38:86:42:
                    e4:66:5d:1a:f2:61:a8:89:d2:c8:22:29:31:51:78:
                    43:46:7e:58:bf:dc:3a:23:c5:e6:bd:29:95:11:07:
                    e9:69:0a:16:62:af:fa:c1:41:7a:b6:4f:d1:73:0e:
                    a0:3d:e3:42:b0:80:cf:78:89:40:ba:4b:4e:04:9a:
                    98:db:70:50:90:8e:87:8c:11:3a:25:3c:30:6f:72:
                    7e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E0:28:03:57:85:00:66:83:D3:6A:65:EE:BA:D3:66:9D:0F:62:C8
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133312e3235352e3132302e302f32342d3234203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:61:0f:3c:3d:7c:3f:26:e5:7a:f6:8e:37:07:4b:23:bf:73:
         94:4e:21:c9:07:8f:ac:03:d9:34:16:48:20:27:a6:ea:f5:e5:
         68:2b:9b:40:ff:56:67:5e:5d:c6:da:69:05:27:71:ad:a0:c1:
         eb:8d:d4:79:1f:2d:d1:66:58:48:3f:b0:39:74:24:6e:60:e3:
         00:07:f2:b2:55:94:f4:47:9e:33:87:31:28:48:a8:03:b8:d1:
         80:ba:38:11:44:0c:bc:30:71:f9:05:3d:3b:0c:fb:7d:67:bb:
         1c:c0:06:d0:11:10:4e:08:2e:c3:39:52:80:8e:d4:f6:b5:e6:
         1d:99:05:bb:ba:4b:13:d2:05:c6:3a:e7:66:78:b3:5c:e7:8e:
         71:b2:44:d7:2d:9c:39:5f:b8:17:e2:73:75:d4:cf:6b:bb:e3:
         56:af:1e:2d:db:ef:2b:f8:c1:25:e1:25:86:61:49:0e:38:ed:
         82:48:d6:b2:61:0f:f3:b4:f7:78:35:40:12:1f:04:8e:80:bc:
         84:eb:e0:70:4a:c5:5d:25:8c:f9:29:f3:08:bb:22:4b:d2:0c:
         5d:43:6a:5c:4b:4b:4c:24:e7:8f:26:94:6e:07:88:a2:eb:b2:
         9d:a6:fc:90:29:d5:eb:d9:0f:f6:46:bb:7b:1b:49:de:4a:00:
         4e:aa:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:30 2025 by rpki-client on console.sobornost.net