Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3138372e38342e3136302e302f32302d3234203d3e203238323835.roa
File:                     3138372e38342e3136302e302f32302d3234203d3e203238323835.roa (raw, json)
Hash identifier:          4YfqBCHFYoW5nKW0dVuahfEHe1ENeREfZUKk1ZyBwFw=
Subject key identifier:   6C:0C:36:B6:7A:D7:75:40:5F:29:FA:72:C3:5B:DF:F9:26:A2:21:C8
Certificate issuer:       /CN=18304E37E7B30DCE85765ECFC90E798EBF358498
Certificate serial:       79358023EC5D43F2B6C375F049819147B2D7490F
Authority key identifier: 18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3138372e38342e3136302e302f32302d3234203d3e203238323835.roa
Signing time:             Thu 06 Mar 2025 17:52:26 +0000
ROA not before:           Thu 06 Mar 2025 17:47:26 +0000
ROA not after:            Thu 05 Mar 2026 17:52:26 +0000
asID:                     28285
IP address blocks:        187.84.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl
                          rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:35:80:23:ec:5d:43:f2:b6:c3:75:f0:49:81:91:47:b2:d7:49:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18304E37E7B30DCE85765ECFC90E798EBF358498
        Validity
            Not Before: Mar  6 17:47:26 2025 GMT
            Not After : Mar  5 17:52:26 2026 GMT
        Subject: CN=6C0C36B67AD775405F29FA72C35BDFF926A221C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:c7:c0:61:66:8d:7d:a2:ec:f2:f0:4f:9b:
                    21:0f:e4:ff:22:12:d5:6f:91:74:f2:4e:a7:d0:cb:
                    fe:76:75:fc:a0:b6:26:98:40:2e:cb:d4:d8:cb:73:
                    01:04:10:7a:79:18:27:7c:53:5a:18:cc:5d:96:50:
                    0f:b8:ee:42:31:93:89:b4:e7:6a:ac:b2:33:ad:03:
                    2d:18:e9:7e:28:4e:18:62:1f:af:34:e0:40:fc:29:
                    e6:78:96:99:1f:85:c6:0b:08:5b:6d:56:f0:7e:4b:
                    34:9e:a7:c8:f8:c8:d9:77:6c:ee:a8:aa:bf:47:e0:
                    ed:df:5d:5f:58:fe:31:76:c7:ff:5a:75:c1:82:b0:
                    57:d3:29:cf:7b:77:1a:31:49:50:27:15:79:d9:ab:
                    96:ea:fb:52:24:cd:c6:37:d7:bf:fb:92:95:be:56:
                    9f:75:f3:7a:ff:77:b5:07:65:3c:ca:6a:36:3c:c1:
                    f9:38:c1:fa:43:6b:7d:ed:fd:6b:8f:3a:a8:e9:4f:
                    64:65:fc:21:a5:09:ee:b7:60:fe:2b:28:94:da:7a:
                    94:be:14:11:2c:c4:e5:62:4f:e0:da:91:ca:fb:2f:
                    e8:fd:95:74:67:b4:a6:b3:d7:94:52:06:68:8c:18:
                    9b:95:d6:8f:c1:b2:11:fe:b5:c8:50:6c:1b:83:5d:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0C:36:B6:7A:D7:75:40:5F:29:FA:72:C3:5B:DF:F9:26:A2:21:C8
            X509v3 Authority Key Identifier:
                keyid:18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3138372e38342e3136302e302f32302d3234203d3e203238323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:e5:7a:0f:60:30:a5:b5:8d:d7:2a:4c:76:b5:94:14:5c:2d:
         6c:3a:03:59:df:99:15:12:b3:3a:60:9d:ba:4a:a0:35:37:0b:
         4d:88:cd:1b:52:f5:7d:fe:d1:78:2c:42:e7:42:de:4b:04:82:
         ec:b3:e1:ef:79:b4:5a:9d:9b:49:da:82:56:e6:43:a3:6b:47:
         2b:70:e7:3d:79:1d:e4:c4:f5:8d:ba:57:0f:40:6b:28:03:73:
         bd:19:6a:3a:79:2c:30:88:d7:de:a3:84:0c:12:9a:a5:25:97:
         3e:b2:f1:c2:a7:75:0b:4f:e7:05:43:29:86:c4:dd:71:cf:bc:
         0b:13:25:55:20:bc:7e:ea:bc:b4:99:6e:61:e5:60:aa:0b:80:
         c2:b2:9c:9e:ff:40:78:73:a2:14:5f:d9:9f:b2:97:65:19:c5:
         d2:78:8c:b3:6f:c1:11:be:00:9b:04:3b:b2:66:29:84:8b:79:
         6b:d7:4e:9f:0a:4c:b1:7a:c7:77:7c:99:64:ac:62:e5:50:18:
         bd:e7:ba:0b:00:b8:02:8e:25:3f:2c:19:96:64:06:97:03:87:
         54:89:ab:54:33:3c:c2:31:9b:ae:bb:5b:9d:9a:b8:1f:eb:c0:
         e8:42:3a:b7:b3:21:b6:b8:f5:bb:a7:df:2a:1e:03:23:8b:0e:
         a5:13:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:16 2025 by rpki-client on console.sobornost.net