Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/3138362e3139352e3136372e302f32342d3234203d3e20323734363736.roa
File:                     3138362e3139352e3136372e302f32342d3234203d3e20323734363736.roa (raw, json)
Hash identifier:          iPY8xo1qgutjW1dWtbApFlLt/QEGoVSJGazLGzyHsmg=
Subject key identifier:   1E:74:15:22:A8:83:39:BA:FC:B6:0A:BE:C3:9B:04:78:F9:D6:2A:7C
Certificate issuer:       /CN=6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5
Certificate serial:       721A5299B049AF318FD76B8B9F5E7B5BE75B2725
Authority key identifier: 6C:A8:F2:E3:76:D5:1B:5B:94:37:1C:8C:F8:53:DE:69:86:BA:4A:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/3138362e3139352e3136372e302f32342d3234203d3e20323734363736.roa
Signing time:             Wed 16 Apr 2025 12:56:33 +0000
ROA not before:           Wed 16 Apr 2025 12:51:33 +0000
ROA not after:            Wed 15 Apr 2026 12:56:33 +0000
asID:                     274676
IP address blocks:        186.195.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.crl
                          rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1a:52:99:b0:49:af:31:8f:d7:6b:8b:9f:5e:7b:5b:e7:5b:27:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5
        Validity
            Not Before: Apr 16 12:51:33 2025 GMT
            Not After : Apr 15 12:56:33 2026 GMT
        Subject: CN=1E741522A88339BAFCB60ABEC39B0478F9D62A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:31:1a:29:22:b3:e4:3d:08:db:5b:d3:0b:63:
                    32:a7:49:5d:ff:a7:b0:94:69:9c:27:76:36:6d:2a:
                    6b:ee:7d:78:03:1a:b9:92:c3:a3:53:d5:75:54:04:
                    00:08:00:65:b2:5c:c8:6a:d9:21:74:28:91:18:cf:
                    d3:c3:78:8f:ea:77:3d:7b:2d:1e:4f:39:14:06:a2:
                    91:c9:ea:0d:88:b8:92:b9:63:c9:e6:01:91:15:6d:
                    b0:6e:4f:28:b9:6b:27:e6:97:9e:d5:fa:e4:50:a8:
                    fd:da:99:cc:03:9b:6d:6d:6a:f3:53:04:57:4c:44:
                    58:52:ff:ae:89:79:48:b6:c5:21:94:3e:04:1e:af:
                    4c:8f:ba:0a:da:78:f2:6d:e2:8d:38:f4:dd:2b:f6:
                    94:5d:4f:31:02:27:2d:3d:6c:32:7a:9a:72:3e:cf:
                    3e:11:64:46:14:d4:ff:9f:87:f5:9d:12:a8:46:68:
                    64:89:2c:66:73:9b:5d:82:2d:eb:20:e3:f9:f9:c1:
                    a4:e0:22:88:c3:7a:89:d7:cc:c1:04:db:b2:38:8d:
                    c7:19:06:2e:c1:f3:2a:42:12:61:83:a6:05:a2:ec:
                    c5:a6:e2:73:56:cf:66:32:f5:15:23:9c:ce:3b:14:
                    67:ac:d9:03:b1:b2:03:3f:b6:03:a3:e3:75:50:b8:
                    df:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:74:15:22:A8:83:39:BA:FC:B6:0A:BE:C3:9B:04:78:F9:D6:2A:7C
            X509v3 Authority Key Identifier:
                keyid:6C:A8:F2:E3:76:D5:1B:5B:94:37:1C:8C:F8:53:DE:69:86:BA:4A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/3138362e3139352e3136372e302f32342d3234203d3e20323734363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:6c:d7:8b:22:ec:1d:ea:8e:58:4c:ef:00:18:b3:4c:8b:39:
         36:b0:22:92:76:f1:12:72:11:31:96:d1:f7:d1:5f:1a:85:06:
         78:83:45:cf:80:ac:b3:77:e0:d1:6f:ad:c0:e2:e5:fb:60:bd:
         d7:d3:01:94:bf:dc:88:ab:63:c0:29:ba:63:f1:de:ed:95:03:
         36:92:97:0e:e7:14:10:2a:94:d7:b9:6d:ea:9c:2e:83:10:38:
         c0:cb:fe:d4:2a:ea:0a:05:d9:98:37:f0:86:6f:67:2d:c0:69:
         c0:f1:27:81:ba:9f:cd:12:97:04:b9:63:11:77:8d:a0:e2:d4:
         04:1e:83:27:97:61:53:05:cf:94:16:c0:a0:16:5d:a8:f0:d8:
         84:ea:d1:33:7c:c3:18:7d:7b:ac:28:f7:0a:59:52:8a:b4:0b:
         c5:18:6b:bf:42:a2:a3:dd:24:02:20:93:1d:49:4d:62:73:d5:
         7b:a4:7d:10:83:71:42:4c:e5:18:1c:3a:0f:c3:2d:a7:60:c5:
         90:51:43:c0:f7:2a:53:a6:14:85:3a:70:2f:20:67:78:77:5b:
         a4:55:ee:73:03:34:89:90:a8:6f:ac:a9:fa:f9:59:de:2a:03:
         58:37:70:e4:b7:18:11:02:24:e3:eb:f5:17:e4:8a:ee:32:91:
         28:93:6c:3a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUchpSmbBJrzGP12uLn157W+dbJyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNBOEYyRTM3NkQ1MUI1Qjk0MzcxQzhDRjg1M0RFNjk4
NkJBNEFGNTAeFw0yNTA0MTYxMjUxMzNaFw0yNjA0MTUxMjU2MzNaMDMxMTAvBgNV
BAMTKDFFNzQxNTIyQTg4MzM5QkFGQ0I2MEFCRUMzOUIwNDc4RjlENjJBN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4MRopIrPkPQjbW9MLYzKnSV3/
p7CUaZwndjZtKmvufXgDGrmSw6NT1XVUBAAIAGWyXMhq2SF0KJEYz9PDeI/qdz17
LR5PORQGopHJ6g2IuJK5Y8nmAZEVbbBuTyi5ayfml57V+uRQqP3amcwDm21tavNT
BFdMRFhS/66JeUi2xSGUPgQer0yPugraePJt4o049N0r9pRdTzECJy09bDJ6mnI+
zz4RZEYU1P+fh/WdEqhGaGSJLGZzm12CLesg4/n5waTgIojDeonXzMEE27I4jccZ
Bi7B8ypCEmGDpgWi7MWm4nNWz2Yy9RUjnM47FGes2QOxsgM/tgOj43VQuN9FAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHnQVIqiDObr8tgq+w5sEePnWKnwwHwYDVR0j
BBgwFoAUbKjy43bVG1uUNxyM+FPeaYa6SvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnh4R0NadzlNNDhlVUpzSEpHVVJhUWtwNnJOZFA5aXRFbXdwSDRoekVt
ZUwvMC82Q0E4RjJFMzc2RDUxQjVCOTQzNzFDOENGODUzREU2OTg2QkE0QUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDQThGMkUzNzZENTFCNUI5
NDM3MUM4Q0Y4NTNERTY5ODZCQTRBRjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ4eEdDWnc5TTQ4ZVVKc0hKR1VSYVFrcDZyTmRQOWl0RW13cEg0aHpFbWVMLzAv
MzEzODM2MmUzMTM5MzUyZTMxMzYzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNDM2MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrDpzANBgkqhkiG9w0BAQsFAAOCAQEAUWzX
iyLsHeqOWEzvABizTIs5NrAiknbxEnIRMZbR99FfGoUGeINFz4Css3fg0W+twOLl
+2C919MBlL/ciKtjwCm6Y/He7ZUDNpKXDucUECqU17lt6pwugxA4wMv+1CrqCgXZ
mDfwhm9nLcBpwPEngbqfzRKXBLljEXeNoOLUBB6DJ5dhUwXPlBbAoBZdqPDYhOrR
M3zDGH17rCj3CllSirQLxRhrv0Kio90kAiCTHUlNYnPVe6R9EINxQkzlGBw6D8Mt
p2DFkFFDwPcqU6YUhTpwLyBneHdbpFXucwM0iZCob6yp+vlZ3ioDWDdw5LcYEQIk
4+v1F+SK7jKRKJNsOg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:32 2025 by rpki-client on console.sobornost.net