Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32312d3231203d3e203238333532.roa
File:                     3138392e35312e3139322e302f32312d3231203d3e203238333532.roa (raw, json)
Hash identifier:          5rTA8dhUzZAsmUPEhjbJtf9DYiB3dKxp9jpkKv7wVfA=
Subject key identifier:   15:2A:3C:95:B0:88:E2:DF:AD:E0:88:0E:E6:B4:63:74:04:4D:AC:AB
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       07B1B7D863AA316B203B540FBAA8A8B37C1EFF4E
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32312d3231203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:27 +0000
ROA not before:           Tue 04 Feb 2025 12:01:27 +0000
ROA not after:            Tue 03 Feb 2026 12:06:27 +0000
asID:                     28352
IP address blocks:        189.51.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b1:b7:d8:63:aa:31:6b:20:3b:54:0f:ba:a8:a8:b3:7c:1e:ff:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:27 2025 GMT
            Not After : Feb  3 12:06:27 2026 GMT
        Subject: CN=152A3C95B088E2DFADE0880EE6B46374044DACAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:31:c0:4e:c1:a7:37:37:69:0f:70:74:0f:
                    09:be:32:7a:c1:1a:5c:0c:45:18:68:67:3e:b2:a5:
                    e3:6b:ee:54:5a:b3:85:d3:8c:b6:fe:e9:46:91:e6:
                    61:98:c4:aa:16:df:57:00:e2:a2:f8:82:9e:2b:27:
                    f7:d4:63:e0:04:11:15:e1:16:10:8b:a2:40:1f:a5:
                    de:9a:92:df:9e:ab:46:db:64:35:16:9a:19:ee:0e:
                    b4:68:6d:db:08:c0:14:6f:d1:8f:12:b3:4d:1e:f3:
                    a3:c1:55:6b:f3:56:9e:38:c1:37:67:b4:99:48:e9:
                    0f:2b:46:ba:e9:3d:91:5f:14:57:59:4f:c7:15:f5:
                    b4:6e:11:15:8e:aa:7f:ef:e3:dc:98:c7:81:7d:da:
                    46:26:0e:54:9e:98:a2:13:54:f4:bd:43:47:a6:9e:
                    03:7e:b6:22:e7:c6:9a:51:56:05:06:0d:f7:27:8c:
                    60:ab:04:82:e6:13:d6:8e:1c:c7:bc:34:35:31:e6:
                    be:d6:b1:08:c7:1f:58:c5:65:56:04:5d:d2:34:44:
                    62:6f:d0:1c:a4:cd:05:f0:ec:02:5b:0f:df:80:e7:
                    e9:ff:31:56:53:d9:53:5a:a8:68:52:18:46:33:f3:
                    e8:15:17:5e:93:6e:50:d1:81:b0:de:94:d7:5f:d0:
                    4e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2A:3C:95:B0:88:E2:DF:AD:E0:88:0E:E6:B4:63:74:04:4D:AC:AB
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32312d3231203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:8f:12:05:b2:6e:21:a6:2d:ff:04:c9:28:85:c4:21:d2:17:
         e2:10:de:1c:b5:93:ea:a3:37:81:3e:b9:be:29:d2:57:20:a6:
         be:77:d0:47:b3:66:66:7e:27:2e:a7:eb:48:54:e0:9a:03:06:
         45:05:e6:1a:c8:68:9e:49:6c:fe:b6:72:4e:03:cf:5d:39:49:
         00:f6:fc:85:24:f4:b3:b7:17:ad:77:96:43:e1:52:0e:0d:bd:
         6d:8e:bf:4f:fa:95:0f:cb:93:76:c2:44:2a:63:f8:41:aa:d5:
         4a:3d:21:86:fa:c9:89:55:53:ea:10:03:50:6c:b3:d0:3a:63:
         28:28:d5:3b:6d:9e:6d:b0:ba:16:26:4a:45:ba:c5:fb:f2:ff:
         89:73:06:42:e9:26:25:0b:3e:34:a7:d6:5f:95:6e:a0:98:fb:
         70:d0:8d:10:67:57:59:0e:fb:45:7b:45:6a:da:7a:7e:cd:63:
         61:dc:e5:2c:18:cb:53:f7:a6:67:05:b9:59:55:59:23:fb:0f:
         60:4c:78:7a:82:c0:85:51:f4:b1:50:1a:02:56:d5:05:54:8b:
         00:1e:65:2a:62:27:a9:33:93:42:30:d5:83:cd:ea:62:25:e8:
         7b:df:e5:02:50:47:a3:d0:7d:73:f9:19:45:f7:d6:da:e2:05:
         6b:ac:09:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:57 2025 by rpki-client on console.sobornost.net