Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          yu/7+ZbsO5aBQ8Jg/fsFF0fERu135CwAjamqnKenvtM=
Subject key identifier:   AE:AE:22:60:07:32:F0:34:03:91:97:9D:07:A7:A7:6F:63:49:E9:83
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       51D2449D94847EC65A3DB3BD5D02FB720C33FED0
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 27 Mar 2025 17:28:49 +0000
ROA not before:           Thu 27 Mar 2025 17:23:49 +0000
ROA not after:            Thu 26 Mar 2026 17:28:49 +0000
asID:                     263518
IP address blocks:        191.243.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d2:44:9d:94:84:7e:c6:5a:3d:b3:bd:5d:02:fb:72:0c:33:fe:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Mar 27 17:23:49 2025 GMT
            Not After : Mar 26 17:28:49 2026 GMT
        Subject: CN=AEAE22600732F0340391979D07A7A76F6349E983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ca:f5:c8:83:3b:44:49:f0:3a:1b:d0:c7:48:
                    27:fe:66:c5:92:dd:9f:8d:bb:f7:d4:be:c2:bd:c8:
                    ce:9d:16:fa:4f:7e:cf:29:2a:bb:39:44:bd:f4:e7:
                    0f:8f:a6:6e:f2:ae:0f:49:b8:90:28:50:56:27:0a:
                    28:b3:92:c4:bd:ab:65:c3:c9:24:f8:86:19:c8:3f:
                    79:6e:65:6f:54:c9:5f:80:0e:a8:f4:02:8a:09:df:
                    26:59:c1:b6:74:96:bf:b8:c2:b6:cb:b6:14:d8:21:
                    d2:a7:55:71:1a:40:ed:b3:e9:3a:f3:91:f0:65:6d:
                    aa:cb:7a:dd:3b:0c:e9:b0:3e:8b:7b:63:87:7d:01:
                    4b:57:ef:47:a8:cb:7c:32:84:c3:24:a5:e1:9c:11:
                    58:34:d8:f8:8f:8d:30:e3:49:e7:e3:b3:74:15:4d:
                    77:27:df:6b:e7:d9:8c:54:a9:ec:49:3b:de:6a:75:
                    6f:56:a3:9e:ad:f3:af:ec:99:5f:c2:47:34:a9:be:
                    b0:69:07:d6:ff:37:ed:51:cb:78:ee:0f:75:04:b2:
                    a2:69:32:1d:b0:69:73:e5:25:99:3b:f9:c9:9b:5a:
                    04:a5:7b:7c:93:5f:05:0c:7a:60:75:86:12:58:8f:
                    79:27:bc:98:75:3e:b0:d6:d6:bd:92:69:2e:61:fc:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AE:22:60:07:32:F0:34:03:91:97:9D:07:A7:A7:6F:63:49:E9:83
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:30:14:20:44:24:a2:6a:b0:21:c1:69:95:cc:90:b0:07:6b:
         50:2d:39:90:b3:0e:4a:3f:5b:5f:3f:1e:b9:09:91:88:17:41:
         a0:1b:7d:9f:08:96:0f:1a:44:cf:29:1b:c9:6b:16:a2:66:65:
         78:d1:d9:a2:ce:ec:ac:75:01:6d:e5:23:38:a5:99:27:d2:98:
         e0:7a:b6:c1:9f:5a:cf:16:63:06:7c:9b:18:f9:b9:7d:ac:00:
         10:23:6e:75:4d:ce:e2:a9:62:9a:bc:8f:12:e8:ca:12:ae:67:
         e2:63:b0:6b:94:99:77:07:93:76:9c:f3:8e:23:68:da:23:f2:
         7e:1d:ec:41:85:25:18:e2:03:2e:73:fb:dc:f7:5e:9e:9f:7d:
         c5:c2:16:35:9f:99:05:3f:19:fb:dd:ff:0e:f4:03:2b:9a:46:
         b0:78:f0:41:b2:af:bd:5a:f3:15:ca:06:ea:71:d0:04:8d:8f:
         79:e9:5d:dc:01:0c:06:5b:fa:1e:3e:e1:ae:f0:d0:1b:3e:78:
         bc:d5:35:11:da:74:6e:4b:8c:6b:e5:d5:c1:2c:1b:fb:5b:91:
         bd:e9:b1:f9:41:c4:ff:4f:54:56:2d:57:94:34:da:40:a6:4b:
         dd:70:97:74:7d:83:50:14:4b:73:6c:0b:b8:73:d8:e9:cf:1b:
         81:14:a7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:53 2025 by rpki-client on console.sobornost.net