Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e36302e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          CD9teU4PlawYvoQ1PRCZGTVSESG9PV4kx8Peo0BVp8w=
Subject key identifier:   03:A5:7C:6E:0C:EB:F7:0E:55:66:44:D9:FE:70:0B:BA:76:22:DF:80
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       3F839674203AF93E7DC5626DFDF75CE9B6188506
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32342d3234203d3e203238333532.roa
Signing time:             Wed 23 Apr 2025 08:07:26 +0000
ROA not before:           Wed 23 Apr 2025 08:02:26 +0000
ROA not after:            Wed 22 Apr 2026 08:07:26 +0000
asID:                     28352
IP address blocks:        187.0.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:83:96:74:20:3a:f9:3e:7d:c5:62:6d:fd:f7:5c:e9:b6:18:85:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Apr 23 08:02:26 2025 GMT
            Not After : Apr 22 08:07:26 2026 GMT
        Subject: CN=03A57C6E0CEBF70E556644D9FE700BBA7622DF80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:95:c1:04:7a:61:18:9c:68:a7:be:eb:c6:
                    5a:46:5f:d5:b4:3e:e4:a7:cc:74:23:f9:b9:f4:d4:
                    04:27:8e:f7:11:cd:5f:9d:05:f7:29:61:fc:f2:d3:
                    b3:91:07:f8:3b:d2:39:3d:44:8a:de:8c:d4:40:d9:
                    b6:e6:33:54:7f:ce:d0:26:ec:86:2b:b1:c1:51:52:
                    65:d5:92:e9:90:fe:65:32:f4:29:94:01:40:29:37:
                    ec:29:f3:c1:35:e0:6b:54:a4:b5:f1:b9:68:e9:91:
                    3c:b4:1c:40:5d:98:81:80:ee:c9:3c:ba:e1:05:80:
                    c7:5b:b6:d0:e1:ce:e0:bf:7f:82:70:40:e1:54:68:
                    4b:64:fb:79:d6:af:e5:61:21:d7:e3:01:e1:33:52:
                    d9:8e:de:fe:c3:8e:2f:23:35:27:25:32:db:27:09:
                    a3:eb:37:43:6a:82:73:fe:55:20:80:63:89:2b:84:
                    91:69:88:25:3c:68:2c:70:35:d1:10:cb:5b:41:a0:
                    88:fc:e1:28:5e:78:01:fe:89:8d:d4:d5:c8:79:a7:
                    bf:30:17:8d:e9:42:27:46:44:c6:10:f5:4a:53:36:
                    4f:dc:50:41:f8:a0:88:3e:6d:cc:64:5d:9e:46:b6:
                    8d:8f:55:61:42:3c:1f:36:af:5a:d2:7c:77:b6:e2:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:7C:6E:0C:EB:F7:0E:55:66:44:D9:FE:70:0B:BA:76:22:DF:80
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c6:68:2e:82:aa:6d:ae:db:d5:a4:b5:e5:30:21:de:ae:71:
         2f:e0:a5:a3:3c:e3:71:fa:e9:75:19:76:72:47:d7:af:70:26:
         ee:ea:a4:74:ca:09:8c:fc:35:1a:4b:35:cc:42:b3:2c:17:b5:
         db:07:88:69:7c:1e:10:30:1d:10:dd:40:c7:de:1e:d3:42:bc:
         0a:fa:dd:2e:0e:69:a5:66:6a:77:e6:74:0f:a4:b5:b0:a4:26:
         6a:60:f5:0d:9e:91:3e:bd:a1:68:46:69:55:68:05:37:2d:04:
         b8:26:7b:3b:2b:c1:9f:4f:f2:7b:ef:97:b8:d2:95:a0:ee:91:
         9b:43:7f:15:4f:65:22:b6:ad:79:8e:5d:b7:52:c6:b8:b6:29:
         09:b0:55:ad:48:91:70:4c:29:b2:dc:60:1f:49:30:ef:b9:68:
         2d:27:51:d2:d9:df:a7:09:10:bb:b8:af:6a:02:36:22:05:9a:
         ef:60:ee:20:6b:d1:b0:59:06:06:c5:0f:78:55:81:dc:b5:4d:
         0d:14:d8:4f:ee:89:fb:f7:cb:db:5b:a7:6c:28:52:8e:96:1c:
         e5:6e:92:af:62:c4:a1:1b:8f:fd:37:c6:46:ef:e5:60:48:c1:
         22:98:e1:e1:b7:76:eb:ca:c3:4c:99:d4:12:f0:d9:a8:15:cd:
         4a:f9:c4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:57 2025 by rpki-client on console.sobornost.net