Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35312e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e35312e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          VlMTd71CslL5KS2aA4/4STU9pqK6v6X5G2Dg/xlmSvk=
Subject key identifier:   69:B9:A8:2D:A0:A6:A6:0E:7B:4A:20:DC:9E:DB:7C:F7:6B:40:B7:3E
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       0599B404D0EF9837BA87E8402AFD0038EA56EB2A
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35312e302f32342d3234203d3e203238333532.roa
Signing time:             Wed 23 Apr 2025 08:07:01 +0000
ROA not before:           Wed 23 Apr 2025 08:02:01 +0000
ROA not after:            Wed 22 Apr 2026 08:07:01 +0000
asID:                     28352
IP address blocks:        187.0.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:99:b4:04:d0:ef:98:37:ba:87:e8:40:2a:fd:00:38:ea:56:eb:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Apr 23 08:02:01 2025 GMT
            Not After : Apr 22 08:07:01 2026 GMT
        Subject: CN=69B9A82DA0A6A60E7B4A20DC9EDB7CF76B40B73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:18:e8:ea:2a:05:4d:ca:76:80:e4:d8:85:
                    1b:e3:b8:9f:9b:d2:3b:4d:2c:fc:08:62:62:2d:ed:
                    c7:70:d0:c7:c9:a9:73:1e:7c:bf:35:8a:7b:ad:91:
                    43:7e:63:da:7d:3d:31:5b:1e:e6:ab:18:45:49:48:
                    d9:99:4e:c5:2f:71:70:e4:80:20:b0:7d:6f:c0:bf:
                    73:0c:a3:54:ca:40:59:8c:16:9a:93:dd:4d:1b:ee:
                    f1:02:be:90:8b:1d:7f:4d:8b:5f:d6:3d:29:7a:6d:
                    25:6a:27:f5:b2:91:43:69:6c:2f:81:05:96:93:9e:
                    7c:3c:47:c4:b5:88:77:0c:e2:94:81:82:7e:b5:29:
                    56:27:55:07:55:fc:14:1d:d5:22:b8:3e:5a:8b:a6:
                    b5:48:be:f3:2e:df:fa:ed:ab:9f:3a:c1:cb:d6:e0:
                    07:23:1c:fa:74:74:50:ad:50:24:0d:db:39:0c:3a:
                    8e:6d:fd:46:8a:98:50:0a:72:64:95:51:0d:84:cb:
                    f8:18:94:0d:85:db:bd:9b:f9:11:6c:6c:f5:78:fc:
                    b7:92:e3:32:73:91:09:7c:0b:4b:aa:77:70:8e:68:
                    4f:64:b4:0e:e0:07:9d:9f:47:b9:ae:23:b5:c6:d7:
                    51:ec:97:5e:22:67:c1:0b:37:47:bb:c1:f6:6a:6e:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B9:A8:2D:A0:A6:A6:0E:7B:4A:20:DC:9E:DB:7C:F7:6B:40:B7:3E
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35312e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:56:fd:e4:cf:93:b7:1f:69:60:01:78:3b:61:d4:9a:cc:1b:
         d9:df:95:67:13:a3:8f:ff:02:bb:ed:06:bb:00:64:db:3f:ce:
         a9:6a:74:83:df:08:a9:e4:8a:6d:bd:2c:e2:5f:52:67:7d:7b:
         e6:02:ab:56:df:45:0b:83:ef:7f:cb:fc:ab:99:b1:35:3d:58:
         22:ea:c3:c8:23:66:75:fc:19:a6:ca:19:01:30:4e:7e:f6:8f:
         63:50:f1:3c:02:bf:2d:9c:36:07:41:c0:27:06:a1:ff:1b:4a:
         43:a7:18:fb:0b:b9:3c:20:94:ca:aa:59:b6:38:ae:59:8b:d9:
         f4:9e:6f:76:d2:20:91:19:1b:76:15:02:4d:1e:9b:df:40:93:
         b0:3a:9a:9b:0b:86:16:d6:01:6d:31:9e:8f:cd:ae:59:7e:e4:
         85:91:71:be:c4:74:3d:0e:2d:ca:18:7c:33:a2:60:42:83:83:
         ba:c8:fc:46:b6:58:24:7f:3f:9e:b2:13:81:34:7f:e3:5a:26:
         28:b0:c8:92:3b:14:d3:c4:b3:fa:af:e1:d3:b8:0b:38:a7:25:
         57:a4:16:e7:33:44:b5:f0:bd:51:f5:c1:93:d6:30:29:da:60:
         29:77:60:60:20:ab:5a:00:8d:ee:8a:65:a8:09:98:e8:e5:b8:
         20:6a:53:63
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUBZm0BNDvmDe6h+hAKv0AOOpW6yowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA1RTlEN0UyNUZERDkyNTVFMEE4NzQ1MjIxQjQ0NzU0
OUEzM0Y5NTAeFw0yNTA0MjMwODAyMDFaFw0yNjA0MjIwODA3MDFaMDMxMTAvBgNV
BAMTKDY5QjlBODJEQTBBNkE2MEU3QjRBMjBEQzlFREI3Q0Y3NkI0MEI3M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCRjo6ioFTcp2gOTYhRvjuJ+b
0jtNLPwIYmIt7cdw0MfJqXMefL81inutkUN+Y9p9PTFbHuarGEVJSNmZTsUvcXDk
gCCwfW/Av3MMo1TKQFmMFpqT3U0b7vECvpCLHX9Ni1/WPSl6bSVqJ/WykUNpbC+B
BZaTnnw8R8S1iHcM4pSBgn61KVYnVQdV/BQd1SK4PlqLprVIvvMu3/rtq586wcvW
4AcjHPp0dFCtUCQN2zkMOo5t/UaKmFAKcmSVUQ2Ey/gYlA2F272b+RFsbPV4/LeS
4zJzkQl8C0uqd3COaE9ktA7gB52fR7muI7XG11Hsl14iZ8ELN0e7wfZqbqenAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUabmoLaCmpg57SiDcntt892tAtz4wHwYDVR0j
BBgwFoAU0F6dfiX92SVeCodFIhtEdUmjP5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMC9EMDVFOUQ3RTI1RkREOTI1NUUwQTg3NDUyMjFCNDQ3NTQ5QTMzRjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNUU5RDdFMjVGREQ5MjU1
RTBBODc0NTIyMUI0NDc1NDlBMzNGOTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAv
MzEzODM3MmUzMDJlMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC7ADMwDQYJKoZIhvcNAQELBQADggEBAE5W/eTPk7cfaWAB
eDth1JrMG9nflWcTo4//ArvtBrsAZNs/zqlqdIPfCKnkim29LOJfUmd9e+YCq1bf
RQuD73/L/KuZsTU9WCLqw8gjZnX8GabKGQEwTn72j2NQ8TwCvy2cNgdBwCcGof8b
SkOnGPsLuTwglMqqWbY4rlmL2fSeb3bSIJEZG3YVAk0em99Ak7A6mpsLhhbWAW0x
no/Nrll+5IWRcb7EdD0OLcoYfDOiYEKDg7rI/Ea2WCR/P56yE4E0f+NaJiiwyJI7
FNPEs/qv4dO4CzinJVekFuczRLXwvVH1wZPWMCnaYCl3YGAgq1oAje6KZagJmOjl
uCBqU2M=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:57 2025 by rpki-client on console.sobornost.net