Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138362e3231362e36342e302f31382d3235203d3e203238323032.roa
File:                     3138362e3231362e36342e302f31382d3235203d3e203238323032.roa (raw, json)
Hash identifier:          1/pyHMIAfL06J0VEIZqoHDUBduatU86nbTixn3aNe10=
Subject key identifier:   1A:12:06:4B:0D:3F:F7:9D:73:62:E5:6C:CD:42:3F:36:02:FF:CF:7A
Certificate issuer:       /CN=3438EF474B88120C954212EE504ACF2C02AF3889
Certificate serial:       6BBF080ED78C33048AD6182A49CDD8264068E204
Authority key identifier: 34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138362e3231362e36342e302f31382d3235203d3e203238323032.roa
Signing time:             Tue 22 Apr 2025 11:57:33 +0000
ROA not before:           Tue 22 Apr 2025 11:52:33 +0000
ROA not after:            Tue 21 Apr 2026 11:57:33 +0000
asID:                     28202
IP address blocks:        186.216.64.0/18 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bf:08:0e:d7:8c:33:04:8a:d6:18:2a:49:cd:d8:26:40:68:e2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3438EF474B88120C954212EE504ACF2C02AF3889
        Validity
            Not Before: Apr 22 11:52:33 2025 GMT
            Not After : Apr 21 11:57:33 2026 GMT
        Subject: CN=1A12064B0D3FF79D7362E56CCD423F3602FFCF7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:5e:10:28:6c:0b:4c:bc:6e:c7:dd:52:56:
                    82:60:7b:e0:42:00:40:6a:c5:a0:7d:19:51:07:d9:
                    2e:aa:3a:c9:4e:42:c2:96:27:a2:82:dc:c3:87:0d:
                    01:ec:75:56:5d:a6:7c:47:26:b8:9e:15:44:06:4f:
                    07:9c:19:98:cc:52:56:f3:93:24:04:61:8a:7d:49:
                    1a:23:40:be:af:3b:d4:80:b7:ff:9f:55:13:2c:6e:
                    f7:a3:1e:20:34:dc:b1:35:06:d2:08:a7:c8:28:16:
                    8b:83:ed:67:cf:88:41:e2:e6:91:a9:84:28:83:b0:
                    79:c1:61:ec:7b:f9:e7:6c:23:0a:c6:3f:e9:1b:c0:
                    72:c8:fd:f7:71:db:1d:13:12:ac:bb:06:9f:21:49:
                    d1:dd:50:da:8c:60:88:70:fb:79:87:d4:1c:6e:2a:
                    62:f2:02:18:e1:43:97:71:63:94:be:8a:40:7f:ed:
                    30:67:ba:26:83:c0:ad:e4:cd:9d:97:4e:38:d5:bd:
                    22:69:ba:29:8a:7a:c4:f9:d6:9a:2b:a9:10:30:af:
                    cb:2f:6e:f4:48:b7:19:da:60:02:a9:9a:69:a7:eb:
                    10:df:b5:d5:a1:75:83:fb:b1:7d:ac:a2:e9:50:ad:
                    32:42:b9:e4:04:0f:19:70:04:05:a2:ac:50:28:15:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:12:06:4B:0D:3F:F7:9D:73:62:E5:6C:CD:42:3F:36:02:FF:CF:7A
            X509v3 Authority Key Identifier:
                keyid:34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138362e3231362e36342e302f31382d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         25:60:ff:8b:76:8b:2a:b3:eb:8c:48:83:99:dd:ee:1d:f5:de:
         54:be:65:63:be:7f:40:11:04:b1:a5:9f:3f:c1:ae:cd:48:e0:
         4b:76:b8:00:39:69:d4:f7:96:2e:12:77:03:71:cd:8e:ff:f7:
         cb:2f:3e:ec:69:9b:08:d3:78:fe:01:bf:6c:d7:99:62:52:ea:
         d8:a4:87:df:97:02:60:d9:dc:f8:7c:d4:dd:b3:6b:e6:26:99:
         5f:0b:63:67:f0:58:a9:cb:4d:e0:bb:c1:fa:4e:60:cf:e2:1b:
         29:cf:b8:4b:cc:95:ca:5c:aa:d9:6a:18:8f:77:3f:d0:e1:e3:
         c3:3b:bd:24:ff:e7:96:41:ce:68:77:c3:e6:53:0b:bf:cb:a4:
         b4:ad:aa:26:5e:8f:94:9b:5c:ed:b5:8b:7f:4d:46:1c:eb:5f:
         e2:42:2b:d2:df:73:e6:97:2d:66:e8:c2:e2:b9:df:bc:8f:30:
         b2:7d:b5:6d:75:9d:d2:53:00:f8:d9:4f:0b:50:cb:a3:8d:65:
         84:32:b1:f4:11:08:5f:d0:f5:dd:32:6b:65:29:73:0c:4b:16:
         db:b3:b6:f2:ce:0e:06:5c:4e:af:03:65:a7:5f:59:a4:7a:ce:
         a1:53:26:62:29:eb:d5:5a:40:c4:14:0f:03:19:7f:6d:a5:0b:
         38:e6:db:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:38 2025 by rpki-client on console.sobornost.net