Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/3139312e33362e3132382e302f32322d3234203d3e20323633333332.roa
File:                     3139312e33362e3132382e302f32322d3234203d3e20323633333332.roa (raw, json)
Hash identifier:          AD/gp5MkRPMYegFOn1WQUyh52T0eFPqEEOU8suKcE9U=
Subject key identifier:   E0:FB:2D:C1:E0:27:51:92:E1:76:FE:3C:F3:96:D0:7E:33:D1:62:AE
Certificate issuer:       /CN=DEDFE50B85B1681B34DAB1409FBD31C636A0474B
Certificate serial:       0484B88AC4441FED2AC615021440D1281D536119
Authority key identifier: DE:DF:E5:0B:85:B1:68:1B:34:DA:B1:40:9F:BD:31:C6:36:A0:47:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/3139312e33362e3132382e302f32322d3234203d3e20323633333332.roa
Signing time:             Tue 18 Mar 2025 19:29:24 +0000
ROA not before:           Tue 18 Mar 2025 19:24:24 +0000
ROA not after:            Tue 17 Mar 2026 19:29:24 +0000
asID:                     263332
IP address blocks:        191.36.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl
                          rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:84:b8:8a:c4:44:1f:ed:2a:c6:15:02:14:40:d1:28:1d:53:61:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDFE50B85B1681B34DAB1409FBD31C636A0474B
        Validity
            Not Before: Mar 18 19:24:24 2025 GMT
            Not After : Mar 17 19:29:24 2026 GMT
        Subject: CN=E0FB2DC1E0275192E176FE3CF396D07E33D162AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:c3:f8:87:4e:49:17:b7:74:20:8d:93:db:
                    10:b1:19:d9:6e:c0:42:d7:9a:11:29:a1:eb:08:2a:
                    84:35:fb:ea:4b:a4:d9:36:67:f3:f8:ae:96:63:1c:
                    b7:11:cd:f9:4b:2d:d7:a5:ac:2c:1a:dd:f4:7b:7f:
                    c3:d5:d3:0b:5f:85:50:56:e6:a4:16:12:98:92:15:
                    92:5e:a8:dd:fa:d6:c7:b2:6c:d4:12:45:05:3f:42:
                    02:0e:60:ec:bb:61:03:6f:e3:6f:d0:4f:27:87:f2:
                    93:b4:af:ce:18:db:b9:21:b7:f1:cd:ef:87:d6:6f:
                    03:16:9d:23:5f:20:f0:7c:f7:b8:ea:71:00:10:7a:
                    a9:02:0b:56:69:48:66:d9:91:30:5c:50:1b:f1:51:
                    e8:f4:15:38:1b:0c:e4:06:58:06:c1:fc:bd:c3:a0:
                    1b:be:39:37:e8:48:e9:fd:aa:f9:94:b1:0f:5c:30:
                    f0:be:07:6c:ce:c3:10:ce:86:9e:d4:af:02:f8:4f:
                    f1:66:c8:70:7b:70:16:a7:be:d0:49:5e:e2:76:8c:
                    fb:3b:57:2a:f2:26:1a:83:26:f4:75:16:d7:e0:77:
                    01:df:1c:d0:5c:d4:79:19:69:74:64:dd:60:24:e2:
                    55:18:5f:7e:b1:a8:8c:f8:da:84:80:53:34:b0:0c:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FB:2D:C1:E0:27:51:92:E1:76:FE:3C:F3:96:D0:7E:33:D1:62:AE
            X509v3 Authority Key Identifier:
                keyid:DE:DF:E5:0B:85:B1:68:1B:34:DA:B1:40:9F:BD:31:C6:36:A0:47:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/3139312e33362e3132382e302f32322d3234203d3e20323633333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:b4:00:5b:e3:3d:98:57:95:25:a5:df:f1:a8:d1:ca:e2:55:
         eb:ab:55:c5:12:65:ad:8e:58:6a:1d:7b:f0:ba:64:fa:07:40:
         b6:2d:1d:27:fb:da:45:9d:c8:37:f4:32:db:45:18:6e:95:30:
         17:64:26:19:fb:3a:2d:6b:d8:da:ed:3d:30:a3:b3:0b:e1:33:
         05:84:a9:a7:ca:06:c1:d4:f0:11:01:80:c9:90:8e:79:98:f3:
         7b:aa:1f:3f:e5:87:b7:5b:74:60:e0:fa:ca:5a:a7:6d:ae:55:
         84:a6:02:d9:0f:a5:ab:2b:4a:b1:1b:f9:2c:d3:e1:9b:0b:49:
         eb:b0:0a:3f:d6:a1:5b:0f:b7:e3:ce:d2:51:64:34:b4:26:72:
         0f:8b:1c:cb:d2:d8:e9:69:6a:92:82:a2:26:7b:54:97:6b:89:
         43:fe:5a:60:5e:28:f0:7f:35:4c:06:09:8e:6b:56:2c:01:10:
         7b:09:ef:d1:a8:ea:63:da:02:db:40:45:b8:fb:f8:d9:23:e8:
         f9:36:b0:a2:e3:72:0d:e5:64:e4:9c:66:4a:29:e6:a9:2d:4d:
         6b:1b:26:44:a8:be:6e:65:d2:c0:97:9c:ba:e4:ab:c5:03:53:
         63:8f:69:d8:42:c1:e0:a6:96:9c:3d:9f:8a:8d:a5:9d:f2:48:
         9b:ff:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:54 2025 by rpki-client on console.sobornost.net