Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133382e3131372e33322e302f32342d3234203d3e20323634343739.roa
File:                     3133382e3131372e33322e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier:          xuzhXW/s7O7ed6mu5y3Z+mOPKG5bsg0yvPQB+NYaemw=
Subject key identifier:   5B:C3:0F:E8:F4:2E:4B:BD:D0:DE:23:D4:89:8C:16:59:74:70:02:D5
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       404177A275DB80A5187A7A51C32B10DBBB9D15C2
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133382e3131372e33322e302f32342d3234203d3e20323634343739.roa
Signing time:             Sat 05 Apr 2025 01:54:42 +0000
ROA not before:           Sat 05 Apr 2025 01:49:42 +0000
ROA not after:            Sat 04 Apr 2026 01:54:42 +0000
asID:                     264479
IP address blocks:        138.117.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:41:77:a2:75:db:80:a5:18:7a:7a:51:c3:2b:10:db:bb:9d:15:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: Apr  5 01:49:42 2025 GMT
            Not After : Apr  4 01:54:42 2026 GMT
        Subject: CN=5BC30FE8F42E4BBDD0DE23D4898C1659747002D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:a8:fb:cc:69:2c:64:84:a1:99:ca:f8:5e:
                    91:bc:81:26:59:60:2a:32:2e:db:2f:ca:9e:5a:5e:
                    f7:44:74:e1:ce:93:39:df:f8:b5:63:c0:69:01:d8:
                    f2:44:d1:77:ac:ab:45:a3:96:fc:79:66:3f:a9:a6:
                    ed:93:ee:11:06:95:42:43:61:c5:42:13:e0:10:f9:
                    18:1f:09:01:c6:2d:4a:86:40:05:13:5d:82:e5:f5:
                    b0:3c:87:3a:f3:f9:44:0e:06:bd:4e:60:df:09:00:
                    4f:83:c5:78:53:68:e3:2e:c9:37:66:11:91:6f:91:
                    79:48:b0:65:f0:0f:39:e0:11:67:b9:ca:d8:b1:7c:
                    2d:59:dc:36:41:e9:24:88:65:e9:98:bb:e8:1c:d2:
                    1a:43:79:90:53:87:6b:2e:cb:74:b5:bf:42:c5:a4:
                    f3:1e:b3:f9:81:4f:13:0b:2f:70:64:4d:d0:63:60:
                    00:3a:ae:8e:46:07:02:cd:5a:8a:e4:37:30:83:a5:
                    fa:38:c0:58:93:37:a0:45:63:a7:a4:b3:cb:dc:83:
                    75:6c:8a:16:0d:b6:61:9c:7b:1a:d4:7a:84:9f:12:
                    61:5a:a0:9b:ef:c5:5c:63:a3:ed:48:17:64:05:66:
                    bd:ec:28:17:55:5d:9e:bd:27:1b:cb:c2:cf:c7:fc:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C3:0F:E8:F4:2E:4B:BD:D0:DE:23:D4:89:8C:16:59:74:70:02:D5
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133382e3131372e33322e302f32342d3234203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:11:3d:43:7a:7f:07:bf:26:93:f4:d4:ce:a0:9f:de:19:12:
         20:c9:02:3f:d3:9b:57:23:fb:d2:06:b7:89:42:e6:2c:0c:b6:
         55:fe:0d:91:61:84:2f:22:b0:75:30:3c:28:fd:2f:01:f3:d0:
         94:27:09:6c:ba:98:1e:68:83:2e:84:59:04:a6:3d:4d:04:d6:
         64:24:13:f3:2b:0c:e7:5c:81:d2:8a:c7:a7:3b:8a:5a:0c:7f:
         ac:13:5e:ec:cc:dc:3d:4c:c3:6a:3d:76:51:8f:53:4e:d8:10:
         57:ec:0d:0f:56:6b:d5:3a:df:39:d2:64:92:9a:be:f2:3c:b3:
         8e:2c:81:00:3a:49:a0:f4:35:b2:9f:cd:6f:3c:fb:80:4c:0f:
         45:c4:ce:ef:0f:2f:0e:79:16:2d:c8:da:f0:0d:9a:c9:99:2a:
         61:b9:56:cf:80:2a:8d:a2:c3:ea:91:e2:d4:ca:9c:16:a8:65:
         b8:ed:a9:4e:4d:60:56:44:f0:80:72:4f:21:5e:e2:11:f9:a2:
         d2:02:17:b8:fd:84:cb:63:87:cb:18:8a:62:66:9a:34:5f:49:
         bc:33:3c:4f:3b:73:58:97:58:fc:68:b6:39:84:28:f6:43:6c:
         55:d8:cd:fb:d9:d9:f6:fa:bd:b4:c7:75:d7:db:98:45:c5:39:
         e3:cf:19:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:00 2025 by rpki-client on console.sobornost.net