Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230362e302f32332d3233203d3e203238333532.roa
File:                     3138392e35312e3230362e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          8DNHOLzh/BvKxrF8KEAp1Mxa5mLXllDK/iYRPY5e/ys=
Subject key identifier:   7D:CD:BC:12:6B:E6:A5:6F:AB:87:5D:18:EB:CF:B7:26:48:F7:E7:E4
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       353A481DFE650C08092CCC3BA6FFB05126785B7C
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230362e302f32332d3233203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:24 +0000
ROA not before:           Tue 04 Feb 2025 12:01:24 +0000
ROA not after:            Tue 03 Feb 2026 12:06:24 +0000
asID:                     28352
IP address blocks:        189.51.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:3a:48:1d:fe:65:0c:08:09:2c:cc:3b:a6:ff:b0:51:26:78:5b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:24 2025 GMT
            Not After : Feb  3 12:06:24 2026 GMT
        Subject: CN=7DCDBC126BE6A56FAB875D18EBCFB72648F7E7E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:da:9c:31:e4:d1:5e:01:81:f8:dc:a3:bb:
                    c2:72:52:9d:73:88:65:06:12:c4:76:f2:8f:67:92:
                    75:1a:8d:4b:24:48:d4:77:1d:7b:c4:5a:ea:5f:9b:
                    73:d7:64:59:40:d6:9c:c7:f7:ca:d0:2a:62:50:04:
                    b0:3f:b7:16:bb:51:bf:4e:72:26:51:8c:9b:ff:6c:
                    64:0b:92:24:e3:c4:82:b3:ad:0d:79:13:79:62:34:
                    59:a7:ae:60:e2:a9:12:10:19:8b:95:b5:36:0e:c0:
                    e0:c5:54:74:d2:b2:3d:5a:c2:3a:78:3c:71:a4:84:
                    8e:08:43:97:7e:c4:e2:f5:61:fc:03:33:a5:06:ef:
                    47:6c:ec:91:7d:fb:2d:b9:b8:bc:4f:bd:2f:0f:00:
                    5d:71:57:b8:70:24:fa:f8:d8:ee:bc:3a:56:cf:d3:
                    13:94:a0:2e:22:5c:e2:64:ca:38:1d:0c:54:4e:5d:
                    51:0a:21:78:9e:5f:30:6b:50:19:04:05:1f:28:c3:
                    6a:4e:e3:f2:3c:e0:07:ca:33:da:e5:90:ab:ef:66:
                    db:52:3e:47:33:0a:2c:d0:26:b5:74:0a:86:61:b6:
                    52:21:10:d2:ba:44:43:1c:6c:29:6a:08:62:ae:49:
                    dd:7e:93:92:66:e2:77:a9:94:ca:a4:20:e9:8e:29:
                    2c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CD:BC:12:6B:E6:A5:6F:AB:87:5D:18:EB:CF:B7:26:48:F7:E7:E4
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230362e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:c3:df:34:8f:42:2e:fd:fa:74:23:2c:27:0c:48:42:85:b6:
         b6:05:37:53:c8:af:65:f1:5d:ed:e5:b8:93:68:5e:58:ef:23:
         3b:86:eb:42:05:b3:fc:b7:a6:4d:bc:ec:c8:89:b6:6a:6a:07:
         c9:99:4e:ea:66:f0:ed:c0:14:83:3a:7e:4f:a4:fe:18:3f:67:
         9c:92:46:40:2a:a7:11:f7:22:3e:7f:77:14:ca:2f:2d:fd:4f:
         06:fc:bf:ae:54:eb:77:58:13:49:35:56:8c:ad:8c:ec:29:8b:
         79:ef:53:af:d9:8d:5f:12:7b:11:6d:c4:f9:df:79:10:e2:b3:
         f2:b4:36:1d:1c:9c:d2:ba:83:1a:c6:9f:c5:7c:64:15:a7:21:
         2d:39:a7:25:3e:6b:de:1c:51:3e:d8:51:38:ce:6e:6c:6e:be:
         44:6d:81:78:43:3d:e7:8c:26:88:84:fe:2c:d0:61:2c:0d:a3:
         e4:10:77:e0:e1:28:9f:66:2f:35:4c:92:a2:55:d8:87:ab:47:
         ef:1d:55:ca:1b:42:e9:66:d1:52:83:8f:74:b9:4b:ac:9a:5d:
         62:f6:86:30:b8:a0:4b:b6:d7:66:e1:77:9c:5c:a8:07:3e:39:
         75:d5:bd:58:56:2d:1c:3a:27:51:2e:2e:a9:90:07:39:a5:aa:
         74:a0:be:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:57 2025 by rpki-client on console.sobornost.net