Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/3137392e3132352e34382e302f32312d3234203d3e20323633363331.roa
File:                     3137392e3132352e34382e302f32312d3234203d3e20323633363331.roa (raw, json)
Hash identifier:          oyW9MkKp1p0lBB0df5o+dVg6NgKnns2QhX8ZDsyQUaw=
Subject key identifier:   56:45:BD:C1:D7:DF:0C:23:ED:C6:8A:E8:B2:59:71:01:DE:85:BB:47
Certificate issuer:       /CN=0E877B9FC3D57790790B0D857A7A2A890319B3FA
Certificate serial:       3847C20C3B3887D177405093E089DC7B5D222105
Authority key identifier: 0E:87:7B:9F:C3:D5:77:90:79:0B:0D:85:7A:7A:2A:89:03:19:B3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/3137392e3132352e34382e302f32312d3234203d3e20323633363331.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     263631
IP address blocks:        179.125.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.crl
                          rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:47:c2:0c:3b:38:87:d1:77:40:50:93:e0:89:dc:7b:5d:22:21:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E877B9FC3D57790790B0D857A7A2A890319B3FA
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:bc:fc:64:4b:d2:3f:f5:c9:37:0b:49:07:
                    a0:85:91:12:e5:89:2c:43:ff:88:75:34:a0:68:ca:
                    63:a3:a5:79:a3:17:3b:b2:cc:13:eb:ee:0a:8b:4d:
                    30:2a:c1:97:b9:10:38:66:6a:42:fd:3a:5f:0d:0e:
                    d5:89:a3:11:c6:ec:f7:e8:9c:4c:8f:de:27:f6:44:
                    36:ff:ac:89:d3:0f:cd:04:68:e0:eb:4f:42:38:aa:
                    29:48:b1:d1:2d:0f:49:50:66:2f:17:76:4b:df:1a:
                    82:2f:b0:4d:bb:01:35:52:3a:03:09:48:57:da:33:
                    3c:d5:aa:01:39:f9:5f:af:37:d3:ce:a6:86:11:4f:
                    5b:27:d4:29:a2:0a:65:3d:63:79:3e:ca:18:b0:be:
                    91:49:39:79:fe:4c:32:4d:d4:5b:79:04:5c:bf:5b:
                    05:d4:47:4a:cc:d7:a2:ff:a6:8b:f7:7d:f4:19:98:
                    73:40:1d:5d:84:4f:d3:99:4e:8b:9a:3f:fe:c5:bd:
                    a2:fd:e9:8c:3e:6b:8d:e2:93:c4:6a:d1:67:21:61:
                    a5:21:5b:97:54:df:0c:fb:30:96:70:ba:dc:c2:b0:
                    3c:79:b3:9f:91:7a:1e:da:13:ce:70:78:64:31:8c:
                    47:32:7a:7e:c2:6a:25:8b:57:dd:42:29:83:8e:98:
                    df:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:45:BD:C1:D7:DF:0C:23:ED:C6:8A:E8:B2:59:71:01:DE:85:BB:47
            X509v3 Authority Key Identifier:
                keyid:0E:87:7B:9F:C3:D5:77:90:79:0B:0D:85:7A:7A:2A:89:03:19:B3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/3137392e3132352e34382e302f32312d3234203d3e20323633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:2f:2e:88:47:7f:93:b8:be:a1:32:36:ee:88:8f:f0:7c:03:
         c4:c4:1e:d6:7b:09:68:2e:9c:71:56:fd:b3:09:6d:52:0a:fb:
         29:62:c9:b7:2d:d3:ee:c9:5e:3c:57:78:71:27:8c:58:a0:b4:
         f6:df:71:1c:7a:a0:d3:be:57:14:fe:c1:aa:d6:5f:b2:dd:23:
         35:ac:2b:a4:4f:e3:9f:46:f3:22:20:26:81:27:5d:2d:80:32:
         fb:8a:70:75:5b:64:b6:33:23:30:59:0d:8c:b8:8e:bd:9b:39:
         bd:d0:8b:49:6f:40:86:0e:7a:10:03:7b:35:78:c4:ae:ac:99:
         0e:9b:28:15:17:61:c3:2e:f6:92:a5:b7:2c:8a:f1:3d:9d:0b:
         75:cb:ee:57:ad:5d:f8:ce:6f:ee:d7:34:27:5f:57:38:b3:51:
         f3:5f:3f:9a:27:46:cb:76:10:06:1e:97:92:2c:54:86:52:48:
         cb:83:9d:3c:8a:f0:be:5e:58:d4:16:98:09:f1:4d:40:11:55:
         14:6c:44:66:3b:5c:f8:59:97:d6:95:b5:2c:1c:2f:8c:14:73:
         15:dc:6d:51:40:9d:2a:d1:fd:45:58:df:cc:dc:1e:e3:ee:f6:
         2d:df:3c:94:ec:79:14:1b:96:29:58:a7:dc:8f:7e:69:70:cb:
         a1:89:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:14 2025 by rpki-client on console.sobornost.net