Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/3137392e34392e39322e302f32322d3332203d3e20323731333834.roa
File:                     3137392e34392e39322e302f32322d3332203d3e20323731333834.roa (raw, json)
Hash identifier:          ffc24DirVxIQnVqfTtEg3+C/HpHq42Uy2LI+FNSnsY4=
Subject key identifier:   9A:FA:33:6B:28:27:6E:D8:00:D1:BC:0A:8C:98:72:8C:21:CA:E8:AA
Certificate issuer:       /CN=10EC5E4CC1905B32F23845726B4A13773CC62985
Certificate serial:       04B353FE13D852482C789DC61FEF6A5AC8338812
Authority key identifier: 10:EC:5E:4C:C1:90:5B:32:F2:38:45:72:6B:4A:13:77:3C:C6:29:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10EC5E4CC1905B32F23845726B4A13773CC62985.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/3137392e34392e39322e302f32322d3332203d3e20323731333834.roa
Signing time:             Wed 26 Feb 2025 13:19:02 +0000
ROA not before:           Wed 26 Feb 2025 13:14:02 +0000
ROA not after:            Wed 25 Feb 2026 13:19:02 +0000
asID:                     271384
IP address blocks:        179.49.92.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.crl
                          rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10EC5E4CC1905B32F23845726B4A13773CC62985.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b3:53:fe:13:d8:52:48:2c:78:9d:c6:1f:ef:6a:5a:c8:33:88:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10EC5E4CC1905B32F23845726B4A13773CC62985
        Validity
            Not Before: Feb 26 13:14:02 2025 GMT
            Not After : Feb 25 13:19:02 2026 GMT
        Subject: CN=9AFA336B28276ED800D1BC0A8C98728C21CAE8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:49:a7:bc:4c:0e:ad:c0:74:b1:44:9d:bd:
                    e2:b5:6b:03:8f:cf:f0:ea:42:7c:cf:f5:f8:cf:32:
                    d1:c4:aa:9c:43:ce:53:19:8c:fc:bf:01:a6:02:e9:
                    82:2e:1d:88:29:4c:0f:dd:a7:66:11:f4:45:78:79:
                    65:27:8b:99:a2:e7:da:8d:81:2c:09:51:a1:5b:a3:
                    1d:65:6f:a7:38:c3:48:91:1f:14:fc:28:70:1d:ba:
                    a1:ed:74:a7:ba:03:7e:ae:f7:78:ca:72:8c:60:9c:
                    87:4c:4d:db:06:40:ab:1a:1d:d9:32:0c:d5:2e:be:
                    08:29:4e:9c:8c:13:d9:48:d6:ed:f4:f9:65:91:6d:
                    dc:ab:50:4b:50:6d:7a:8f:10:aa:21:96:33:f9:8a:
                    1e:8f:63:f4:44:98:9f:72:4e:c1:0e:9f:af:d3:99:
                    61:63:38:99:35:b2:ba:7e:df:af:1f:af:c8:e9:8b:
                    20:af:32:33:68:ac:88:97:ed:93:54:2a:9c:6f:cd:
                    dc:e0:0f:b5:ef:c2:f9:fa:7d:84:49:85:53:ae:37:
                    de:d8:f2:5b:d0:0d:2a:1f:9d:09:02:52:fd:78:65:
                    c4:7c:a0:e6:47:e2:d3:75:c1:4c:61:be:4c:ab:5c:
                    59:6c:97:67:64:4b:32:5b:39:65:c4:d3:89:7a:0d:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FA:33:6B:28:27:6E:D8:00:D1:BC:0A:8C:98:72:8C:21:CA:E8:AA
            X509v3 Authority Key Identifier:
                keyid:10:EC:5E:4C:C1:90:5B:32:F2:38:45:72:6B:4A:13:77:3C:C6:29:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10EC5E4CC1905B32F23845726B4A13773CC62985.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/3137392e34392e39322e302f32322d3332203d3e20323731333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:c4:30:f7:4f:9e:13:92:18:e2:51:c2:88:cd:05:28:66:3e:
         80:68:54:82:30:4f:58:bc:f8:26:29:5a:60:18:58:85:30:ca:
         13:0b:88:bc:0e:e4:7c:3e:74:56:b7:02:eb:26:51:79:1c:8e:
         29:ea:94:59:21:82:20:5c:ef:46:c6:f1:cf:0a:a2:6c:57:af:
         37:48:72:f9:73:52:72:41:49:18:ec:87:68:74:58:53:60:69:
         b3:9c:b6:f5:4c:0a:69:9e:c0:80:01:bc:a7:e1:e6:fa:3f:2a:
         4e:80:2e:f0:07:b4:05:4b:c3:78:15:ee:36:1f:cb:c1:c4:20:
         f9:a2:1c:93:4a:a3:14:f5:39:f1:2c:ee:66:16:4f:0a:a6:ee:
         6e:48:8c:2f:2d:de:c0:c2:19:a8:2a:64:bc:a2:70:30:25:9e:
         4e:a5:c7:ab:eb:f1:be:67:0b:8f:84:a5:85:6b:65:66:96:0b:
         f9:05:24:ca:ee:08:6d:50:7b:6d:a1:12:a7:cf:a8:3c:99:48:
         a7:f1:5a:d4:71:14:33:dc:67:e6:98:2d:29:3b:bd:8b:c0:17:
         29:b7:ed:5f:30:78:c7:b8:cd:23:c2:fa:e9:90:57:92:e9:24:
         ab:c7:ab:3a:73:21:e3:9e:bb:06:91:9e:5e:95:e6:2c:c3:61:
         bd:f7:20:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:14 2025 by rpki-client on console.sobornost.net