Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3133382e33362e3138342e302f32322d3234203d3e203532393638.roa
File:                     3133382e33362e3138342e302f32322d3234203d3e203532393638.roa (raw, json)
Hash identifier:          3LSRCg9xhTh8D1mP+/c+TYTFrw00bM4ONeaWuhigrtQ=
Subject key identifier:   73:E1:5E:28:01:DB:2C:93:97:70:2F:F2:2E:C6:CB:AB:60:6B:4B:C8
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       2A855B0A9958D74D8FC46E4552723029913FBA1E
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3133382e33362e3138342e302f32322d3234203d3e203532393638.roa
Signing time:             Thu 06 Mar 2025 07:30:52 +0000
ROA not before:           Thu 06 Mar 2025 07:25:52 +0000
ROA not after:            Thu 05 Mar 2026 07:30:52 +0000
asID:                     52968
IP address blocks:        138.36.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:85:5b:0a:99:58:d7:4d:8f:c4:6e:45:52:72:30:29:91:3f:ba:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Mar  6 07:25:52 2025 GMT
            Not After : Mar  5 07:30:52 2026 GMT
        Subject: CN=73E15E2801DB2C9397702FF22EC6CBAB606B4BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:1d:72:f9:08:5c:30:0a:f2:f6:63:38:a1:
                    63:71:23:05:70:06:61:e3:04:f7:27:4a:0b:c0:f3:
                    cc:1a:3a:2a:22:71:ec:5f:d0:5a:e5:7c:ee:63:f7:
                    b9:f3:99:cd:6b:b9:65:85:93:3d:9c:26:7a:5c:ae:
                    2c:0f:eb:cd:35:e2:31:11:2b:2e:cd:59:bb:7b:3d:
                    11:bb:50:65:27:66:3d:11:38:0c:20:30:02:0f:69:
                    14:c8:6c:63:dc:99:49:3b:37:8e:a5:15:57:9c:af:
                    35:36:77:77:85:59:7d:8c:a9:b4:10:f8:94:15:02:
                    b3:84:eb:d6:ee:a3:5c:41:09:6e:e7:c5:a6:db:24:
                    e1:c2:66:9c:08:cf:3a:7e:63:79:38:3b:0a:c4:c4:
                    a1:cf:31:18:a6:a0:6a:f8:b6:90:fe:9a:e2:b6:a0:
                    6d:bb:40:42:8c:05:76:de:c8:6e:5e:e8:f2:c9:91:
                    1b:6b:21:a8:ec:33:9b:d7:76:1d:e6:08:2e:4d:de:
                    96:f5:59:57:bd:a8:35:b8:5a:19:bd:5e:64:68:f0:
                    18:10:04:eb:c9:0e:31:c6:31:03:5d:73:8d:13:b7:
                    eb:9e:1d:0f:f5:cd:35:54:4b:68:ac:67:5c:e0:d1:
                    95:a3:9e:c3:da:a0:06:17:ea:32:0a:6f:f7:16:e5:
                    01:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E1:5E:28:01:DB:2C:93:97:70:2F:F2:2E:C6:CB:AB:60:6B:4B:C8
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3133382e33362e3138342e302f32322d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:c0:58:23:31:df:a4:3c:f4:38:5d:c1:ce:b5:0c:56:93:53:
         15:99:cf:6f:ce:80:42:a5:c4:e4:9f:a2:d4:ae:3f:52:c2:da:
         76:b5:39:dd:2d:0a:67:5c:e9:0b:1a:ab:f6:10:e2:97:fb:10:
         15:f4:fd:69:73:f5:dc:8c:07:6e:e2:64:97:b2:15:e3:9d:66:
         42:cc:de:15:31:56:04:e9:f5:7f:76:a5:17:aa:2a:fc:bd:0e:
         c4:5c:71:88:aa:23:ca:0a:72:d0:1c:24:b8:61:2b:b2:bc:58:
         b2:36:19:03:2b:41:87:01:78:64:34:8b:31:33:72:34:4c:67:
         ee:da:00:b9:86:bf:a6:0c:eb:b5:32:b3:6f:15:42:fd:63:8c:
         2f:38:9f:d9:39:b7:65:5a:6a:19:30:06:2c:36:44:b1:e5:3d:
         c9:b7:33:a0:ff:ba:25:fe:73:f3:e7:41:78:a2:3f:50:b1:58:
         3f:e4:2b:6e:c2:3a:db:10:65:94:99:a5:6f:f2:a7:6c:59:d1:
         42:58:1f:3f:6a:a9:ac:4b:7a:27:b5:d7:4a:2b:fb:60:cd:cf:
         bc:68:9f:94:97:6d:e9:d2:40:f8:9a:85:9f:38:38:5b:9a:3c:
         76:cf:72:7d:ec:fe:74:79:6c:b9:cc:b1:3d:ff:ba:45:98:05:
         47:43:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:03 2025 by rpki-client on console.sobornost.net