Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35362e302f32332d3233203d3e203238333532.roa
File:                     3138372e302e35362e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          e+R8hsVnBoQvFd793KvkZQ87SQ3Dp8ReGwGHC630lwc=
Subject key identifier:   AC:2F:EA:7C:6F:68:64:A9:37:51:92:6E:83:98:DD:9D:CC:B0:63:1D
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       05B3111093236211BFDFE4A00CD86256CBE7C598
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35362e302f32332d3233203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:25 +0000
ROA not before:           Tue 04 Feb 2025 12:01:25 +0000
ROA not after:            Tue 03 Feb 2026 12:06:25 +0000
asID:                     28352
IP address blocks:        187.0.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b3:11:10:93:23:62:11:bf:df:e4:a0:0c:d8:62:56:cb:e7:c5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:25 2025 GMT
            Not After : Feb  3 12:06:25 2026 GMT
        Subject: CN=AC2FEA7C6F6864A93751926E8398DD9DCCB0631D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:24:cb:e5:5a:8a:55:d7:ff:e9:cd:04:dd:
                    14:8a:42:1d:e8:fa:27:90:49:40:07:23:eb:ce:85:
                    43:86:6f:48:85:13:2f:e2:65:f1:77:73:ae:f9:17:
                    f9:a3:43:b4:3c:5b:13:a3:42:1b:75:ef:30:59:28:
                    92:2f:b3:3f:b1:bb:f2:b3:8f:3f:5f:42:5b:1c:79:
                    e4:d9:31:9f:75:0e:ce:9d:10:c2:cd:fc:98:41:3e:
                    db:24:6c:5c:cf:da:13:90:07:de:60:b6:49:9d:6b:
                    e2:e5:94:b7:35:82:71:9e:f8:2a:92:4e:a1:fc:fe:
                    76:4c:ba:b4:00:ca:58:b6:01:4d:bb:99:06:86:46:
                    aa:4b:69:8b:ce:1d:fa:f7:94:90:a4:43:eb:a5:b4:
                    05:1b:7c:77:d0:2e:d6:d7:20:a2:77:6b:d2:0d:33:
                    2b:8b:d1:d4:3d:83:75:95:ff:a4:a9:57:47:8e:8e:
                    51:e2:e1:61:f7:ef:36:ff:1b:a3:cd:a2:bc:ef:39:
                    8a:23:24:80:4f:bb:e7:29:97:ff:57:93:33:6a:9e:
                    7a:44:cf:da:d7:87:bb:7e:7c:19:b1:42:1a:0f:7a:
                    d3:60:2e:c4:a5:42:45:77:2d:3d:c6:0e:8c:35:ce:
                    5a:1f:c6:31:97:80:ad:7d:c4:e5:2b:eb:0d:0f:80:
                    72:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2F:EA:7C:6F:68:64:A9:37:51:92:6E:83:98:DD:9D:CC:B0:63:1D
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35362e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:ed:02:40:8f:e2:13:47:13:ed:7f:39:18:f3:69:58:fd:f8:
         e1:ca:6f:76:22:1b:62:3f:71:5a:97:ef:da:c7:3d:35:95:12:
         b9:d0:99:2d:9f:b0:fe:91:9c:b9:73:a0:ab:dd:d6:af:fb:2e:
         59:0b:f5:2d:5e:e7:a3:67:da:c1:67:3c:65:49:55:89:5c:88:
         4f:c1:6e:fd:b2:df:78:23:e8:3b:70:bd:57:02:a6:a2:35:1f:
         58:ac:36:db:a4:30:b2:28:09:63:6c:72:a9:84:39:b4:c5:2b:
         a1:d8:6c:40:36:57:bc:8b:44:01:dd:a6:42:0e:db:89:ca:41:
         6d:68:23:ca:93:5b:ed:d8:30:7b:81:17:0b:c0:88:ab:98:cf:
         da:b2:4f:79:5b:c1:cc:82:ed:9d:e4:de:9a:51:7c:e4:a7:68:
         71:42:4b:82:ac:38:d9:f3:4a:c0:3d:bf:7a:3d:4c:14:50:22:
         5b:b7:44:19:80:5e:d3:5d:c6:d1:12:98:ab:dc:29:e4:f2:2c:
         5f:05:75:f7:ed:fe:51:ef:02:6f:31:5c:6c:f6:2f:2c:9b:1b:
         dd:66:72:45:65:4b:b2:f3:cf:c8:fe:f7:2b:df:e8:36:81:0d:
         e1:78:a1:52:3b:d2:20:5b:47:52:96:d0:e1:68:3b:85:8d:5f:
         65:26:17:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:57 2025 by rpki-client on console.sobornost.net