Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/3138362e3139352e302e302f32302d3234203d3e20323632373334.roa
File:                     3138362e3139352e302e302f32302d3234203d3e20323632373334.roa (raw, json)
Hash identifier:          DhRxrtfQjT4NB8Bt8sfdP4LqhknKF3f3iI3zG7ssbkg=
Subject key identifier:   DC:50:C6:5F:90:7C:7E:9E:1F:F4:12:6F:1F:4E:01:51:1C:92:82:5B
Certificate issuer:       /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4
Certificate serial:       0FBA32F928F67AFD306CD1F153A5FFA5B6602081
Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/3138362e3139352e302e302f32302d3234203d3e20323632373334.roa
Signing time:             Tue 18 Mar 2025 18:22:12 +0000
ROA not before:           Tue 18 Mar 2025 18:17:12 +0000
ROA not after:            Tue 17 Mar 2026 18:22:12 +0000
asID:                     262734
IP address blocks:        186.195.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl
                          rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ba:32:f9:28:f6:7a:fd:30:6c:d1:f1:53:a5:ff:a5:b6:60:20:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4
        Validity
            Not Before: Mar 18 18:17:12 2025 GMT
            Not After : Mar 17 18:22:12 2026 GMT
        Subject: CN=DC50C65F907C7E9E1FF4126F1F4E01511C92825B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:da:a6:8d:d9:42:1c:e3:62:e6:e7:59:18:
                    84:3e:81:f9:80:6e:ba:a3:4c:88:94:f3:bd:cd:f4:
                    d9:00:a0:8d:02:ad:7e:df:cd:7b:58:07:c0:7c:17:
                    9a:9e:45:7e:aa:40:fe:9e:18:a4:c1:5f:ed:52:72:
                    89:17:8f:6d:2a:3a:82:da:24:d7:68:aa:f6:7b:ff:
                    d6:92:1a:f0:c3:f9:1f:33:39:82:3e:a2:6b:54:97:
                    09:d6:8e:8a:c2:7c:c7:78:11:97:d3:87:a6:69:14:
                    da:45:12:b6:9b:db:14:29:b5:ba:d3:53:92:07:26:
                    29:8a:d5:9c:cc:5e:d4:c7:3d:9b:89:3e:df:5c:86:
                    87:c6:f1:4d:ff:58:a5:20:57:73:9d:d4:0c:22:67:
                    6e:1f:fa:f4:78:d7:f2:3b:da:02:d3:14:8c:bf:db:
                    e5:46:6c:c8:13:99:ff:40:f8:8c:b4:64:77:86:ef:
                    1b:ae:7f:04:89:23:b4:e5:ad:b1:3c:71:1f:51:e3:
                    9f:41:8a:3c:8f:88:01:b8:e0:53:a9:51:f7:6f:b1:
                    e4:09:8d:91:2e:89:16:42:c5:a9:3f:8b:0a:03:b8:
                    40:8c:06:b4:bd:7f:17:a1:42:8d:3c:d1:b4:9b:0b:
                    e0:f2:b2:b7:04:e4:4c:f1:c7:36:77:9e:63:b1:12:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:50:C6:5F:90:7C:7E:9E:1F:F4:12:6F:1F:4E:01:51:1C:92:82:5B
            X509v3 Authority Key Identifier:
                keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/3138362e3139352e302e302f32302d3234203d3e20323632373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:db:22:2c:4d:7a:cc:3f:b7:97:ff:03:9c:8e:50:7e:8d:10:
         a0:6a:e7:66:21:d9:14:ea:4f:f8:48:6f:c6:fb:ed:76:ef:df:
         99:9c:77:4e:73:bf:6e:97:b6:fc:8f:6f:41:3a:4d:32:61:4f:
         c3:93:6b:af:6f:85:31:ca:37:99:08:3d:aa:ca:70:5b:8e:1c:
         cb:d1:c5:47:84:4d:51:95:e8:49:33:e5:de:09:75:0b:f2:bc:
         8e:43:ad:37:af:d0:4c:0f:82:9b:b1:56:6e:f9:a4:91:33:cf:
         b2:0f:f1:4d:15:38:da:7f:a4:1e:cc:51:ae:7c:2b:ee:aa:f0:
         1f:8f:ca:24:9c:63:28:3a:2d:c4:ee:4d:84:47:47:a3:56:00:
         81:6e:d2:00:48:ca:8f:87:5c:76:27:9f:45:1b:98:03:01:f3:
         03:ff:0b:6d:70:2f:c5:78:3e:37:9c:5b:f7:84:99:7f:7d:5f:
         57:86:2c:0f:b0:93:9e:da:9f:22:13:ad:68:85:5b:b6:21:87:
         57:ae:6a:b8:bf:9b:5e:b5:ab:72:11:24:01:7e:9d:ac:43:72:
         39:e3:7f:42:7d:25:35:ed:0f:3b:46:d1:5b:51:a4:34:39:11:
         d7:9d:25:24:9e:80:dc:6a:eb:93:e1:7c:e6:f9:3b:11:56:75:
         16:ee:3f:55
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD7oy+Sj2ev0wbNHxU6X/pbZgIIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRFQTNFMTRDMzJGMjlBQzgyRURBMTVCMkQ0RUQxQUQy
NTA0RkZBNDAeFw0yNTAzMTgxODE3MTJaFw0yNjAzMTcxODIyMTJaMDMxMTAvBgNV
BAMTKERDNTBDNjVGOTA3QzdFOUUxRkY0MTI2RjFGNEUwMTUxMUM5MjgyNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5P9qmjdlCHONi5udZGIQ+gfmA
brqjTIiU873N9NkAoI0CrX7fzXtYB8B8F5qeRX6qQP6eGKTBX+1ScokXj20qOoLa
JNdoqvZ7/9aSGvDD+R8zOYI+omtUlwnWjorCfMd4EZfTh6ZpFNpFErab2xQptbrT
U5IHJimK1ZzMXtTHPZuJPt9chofG8U3/WKUgV3Od1AwiZ24f+vR41/I72gLTFIy/
2+VGbMgTmf9A+Iy0ZHeG7xuufwSJI7TlrbE8cR9R459BijyPiAG44FOpUfdvseQJ
jZEuiRZCxak/iwoDuECMBrS9fxehQo080bSbC+DysrcE5EzxxzZ3nmOxEu2JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3FDGX5B8fp4f9BJvH04BURySglswHwYDVR0j
BBgwFoAUveo+FMMvKayC7aFbLU7RrSUE/6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1
UUEvMC9CREVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERUEzRTE0QzMyRjI5QUM4
MkVEQTE1QjJENEVEMUFEMjUwNEZGQTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVheHo1aDNpQ3F0Q3NOMkV1OHNqTEdES0R3WDloUmhRMnN0TTJNTjJFdVFBLzAv
MzEzODM2MmUzMTM5MzUyZTMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzczMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEusMAMA0GCSqGSIb3DQEBCwUAA4IBAQBY2yIsTXrM
P7eX/wOcjlB+jRCgaudmIdkU6k/4SG/G++1279+ZnHdOc79ul7b8j29BOk0yYU/D
k2uvb4UxyjeZCD2qynBbjhzL0cVHhE1RlehJM+XeCXUL8ryOQ603r9BMD4KbsVZu
+aSRM8+yD/FNFTjaf6QezFGufCvuqvAfj8oknGMoOi3E7k2ER0ejVgCBbtIASMqP
h1x2J59FG5gDAfMD/wttcC/FeD43nFv3hJl/fV9XhiwPsJOe2p8iE61ohVu2IYdX
rmq4v5tetatyESQBfp2sQ3I5439CfSU17Q87RtFbUaQ0ORHXnSUknoDcauuT4Xzm
+TsRVnUW7j9V
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:44 2025 by rpki-client on console.sobornost.net