Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230312e302f32342d3234203d3e203238333532.roa
File:                     3138392e35312e3230312e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          rtZulZl/Z5BqfdNwGyJXyR+8rJdEi2EDqHfcit995U0=
Subject key identifier:   6E:A9:C7:17:CE:37:4A:15:3C:70:01:48:41:36:0B:94:27:AF:FE:3D
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       6E281BD3117C6F90EDF275090813DA9376ADB79C
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230312e302f32342d3234203d3e203238333532.roa
Signing time:             Wed 23 Apr 2025 08:07:43 +0000
ROA not before:           Wed 23 Apr 2025 08:02:43 +0000
ROA not after:            Wed 22 Apr 2026 08:07:43 +0000
asID:                     28352
IP address blocks:        189.51.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:28:1b:d3:11:7c:6f:90:ed:f2:75:09:08:13:da:93:76:ad:b7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Apr 23 08:02:43 2025 GMT
            Not After : Apr 22 08:07:43 2026 GMT
        Subject: CN=6EA9C717CE374A153C70014841360B9427AFFE3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:af:4e:06:36:8f:3e:2e:ed:b3:36:84:4a:46:
                    26:eb:1e:16:50:1b:f7:48:cb:87:7f:06:cf:69:b4:
                    6b:b6:42:ef:85:29:7e:c9:d5:41:a2:3c:02:fd:28:
                    99:73:bf:b7:20:81:e5:78:ca:e3:e4:29:95:c4:1e:
                    2d:97:fd:0a:4a:98:c5:dc:3c:83:29:8e:64:41:15:
                    be:d2:79:6a:47:9a:f7:75:2d:78:eb:b0:f6:d1:5f:
                    b8:b9:a0:20:be:2f:99:02:00:dc:05:4c:c4:59:a8:
                    b6:fb:01:28:43:34:80:41:f8:5e:c6:d2:6f:bc:a6:
                    4c:bd:00:dc:d5:04:07:8d:4d:25:8a:ef:f8:02:a9:
                    d9:e4:5c:74:05:a4:39:6a:e5:77:43:93:0c:4d:a9:
                    a9:a0:cc:b7:71:64:c7:2f:e1:be:99:8b:ce:c0:a5:
                    a9:c1:77:5d:d2:60:34:b7:7a:f0:6d:49:a5:e0:29:
                    b6:28:8d:bb:e0:46:a3:a6:3e:c5:36:b5:54:03:4b:
                    49:11:10:ec:84:bf:50:97:d2:ec:9a:a7:56:e5:45:
                    c8:0f:f8:dc:de:31:e8:ac:90:da:a9:5f:12:9d:5f:
                    16:c3:cb:fc:30:33:a8:c7:cd:2e:15:e0:0e:58:71:
                    47:28:f7:a7:92:56:3f:d8:49:27:2a:28:2a:a2:fd:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A9:C7:17:CE:37:4A:15:3C:70:01:48:41:36:0B:94:27:AF:FE:3D
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230312e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:07:d2:13:d7:6c:71:bd:a5:c0:9c:a2:df:0d:d3:35:5f:13:
         15:01:77:87:53:ec:26:e1:04:35:a5:1b:ad:a7:d6:66:23:49:
         43:84:fc:d0:e2:a4:90:f7:42:ff:aa:6d:fd:aa:38:44:41:39:
         ea:c8:e4:70:1b:61:63:a8:5e:a1:fc:9d:4e:27:af:28:48:eb:
         e6:22:26:48:27:d2:af:ce:ab:14:48:53:05:94:62:29:db:67:
         f7:71:8c:68:5a:26:2a:4c:88:ce:75:1b:42:48:26:2d:1e:01:
         f9:ff:c7:fd:2a:aa:32:48:cb:60:cc:8c:2d:54:26:cb:83:b2:
         38:ef:38:de:ed:94:e7:67:73:dd:87:91:08:dd:29:eb:8d:a2:
         ff:be:67:a7:9e:b2:d4:ec:fb:d4:06:91:c5:c2:c1:ab:1d:fd:
         3d:23:35:f7:30:d0:b2:56:bd:2b:e2:17:87:4d:cb:38:b8:0b:
         54:d0:7c:b4:48:9f:6e:78:a5:1f:44:ea:08:dc:36:a7:95:47:
         a2:89:5d:29:1a:ab:8f:33:56:80:4f:9e:ef:ab:72:7e:3d:88:
         8e:83:1a:20:a3:2e:e1:aa:7b:cd:f7:83:67:aa:a5:6f:41:54:
         c3:29:8f:41:89:f4:f6:87:6f:af:18:c2:d9:8e:5f:44:93:bf:
         e0:0a:f5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:57 2025 by rpki-client on console.sobornost.net