Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa
File:                     3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          iUIlj8bU3D1YQi71akmv8N6JOC3/Xm/VMYK71LX7wYs=
Subject key identifier:   9D:9C:05:BE:2B:16:47:09:69:56:C9:7C:EB:6C:30:3A:14:83:DD:A8
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       1F2715B518E14E3924EA4BE5E9A2993C72D528CC
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa
Signing time:             Wed 16 Apr 2025 00:29:40 +0000
ROA not before:           Wed 16 Apr 2025 00:24:40 +0000
ROA not after:            Wed 15 Apr 2026 00:29:40 +0000
asID:                     198949
IP address blocks:        143.208.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:27:15:b5:18:e1:4e:39:24:ea:4b:e5:e9:a2:99:3c:72:d5:28:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr 16 00:24:40 2025 GMT
            Not After : Apr 15 00:29:40 2026 GMT
        Subject: CN=9D9C05BE2B1647096956C97CEB6C303A1483DDA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:57:00:d1:40:2d:1c:39:b0:b5:96:b0:14:
                    61:8a:aa:08:4a:c8:72:9e:0b:d1:e7:e9:75:0c:67:
                    6a:c5:96:35:21:65:16:8c:34:b9:e9:3f:3c:51:47:
                    a3:4e:d4:75:74:ca:b3:11:22:95:e1:35:01:f8:84:
                    7f:cd:e0:90:f1:33:17:64:41:dd:a9:df:a5:2e:78:
                    3f:2b:06:da:f9:f5:dd:1f:30:91:65:b6:28:4f:d1:
                    d4:2a:e6:c1:4d:4b:12:61:b4:81:cb:8b:c7:fa:e3:
                    36:97:ee:af:48:72:83:b8:8f:33:7b:32:5e:47:71:
                    eb:76:8d:e7:b7:df:83:25:ea:2c:cb:5a:61:43:54:
                    61:7f:70:14:a8:9e:e7:b6:65:7b:10:f0:6b:6a:de:
                    64:d3:4a:e9:ba:2e:de:eb:aa:ca:f1:2c:cf:34:08:
                    95:50:88:6f:62:88:62:89:4a:fe:43:a2:02:dd:0a:
                    c2:71:13:8b:7a:ab:73:d7:bb:94:6a:e1:77:11:d2:
                    8f:bf:93:f2:a1:62:f7:3d:f3:c9:99:3d:5b:aa:5b:
                    97:e3:2e:c5:a3:74:60:b3:44:ac:55:fa:1d:cc:08:
                    0e:22:f2:c2:58:41:7f:85:3d:24:f1:68:01:27:92:
                    13:e7:26:36:46:96:3d:f8:22:cc:7d:e1:ac:43:f8:
                    77:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9C:05:BE:2B:16:47:09:69:56:C9:7C:EB:6C:30:3A:14:83:DD:A8
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:2d:d1:dc:5b:d4:87:d0:ac:e0:87:19:11:5c:da:d3:91:83:
         70:b9:23:36:be:cb:49:67:80:bd:65:e8:64:a2:d0:e3:6b:eb:
         fd:37:50:6e:02:77:a0:8f:7c:aa:91:59:e8:2e:6d:d0:de:08:
         ce:64:02:8d:06:36:7d:90:b3:96:14:e2:ec:4b:05:ff:7b:8f:
         52:05:47:b1:c7:73:b5:67:d2:a6:5b:b8:3a:6d:11:ab:96:bf:
         eb:36:3c:4f:93:16:05:f4:2b:02:fd:9e:fb:c9:ba:cf:53:23:
         c3:e6:4b:c5:61:1e:fe:50:38:1a:c9:ca:51:a6:02:80:52:6b:
         a7:53:79:41:ed:de:98:93:3b:58:f1:15:c2:65:43:80:ad:a8:
         a2:3e:bd:e6:8e:5b:cc:5a:89:84:a2:df:56:57:48:a9:a1:09:
         3a:39:3a:9a:51:36:18:a9:db:46:f6:e6:69:bf:cb:c1:f7:ab:
         10:01:d5:f5:f8:86:0e:28:b3:ea:f2:6c:7e:b2:28:58:d6:64:
         13:a8:b3:88:79:c0:ad:5d:de:e6:84:7f:8f:b0:48:49:8c:1d:
         d8:4e:db:30:9a:dc:65:80:05:97:18:4b:e7:a5:69:76:dd:ea:
         f4:dc:e7:1d:1f:dc:cd:dd:47:ec:d5:da:ab:16:fa:44:b1:48:
         b5:61:82:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:52 2025 by rpki-client on console.sobornost.net