Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa
File:                     3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa (raw, json)
Hash identifier:          HehrNIzW8YIj50NZzvz1VRN/ThMuVHcdZYg24/SmLgI=
Subject key identifier:   7E:D2:60:50:F0:97:31:10:20:DC:DE:F0:86:6F:4F:C6:16:65:54:13
Certificate issuer:       /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8
Certificate serial:       5CAE39DF163518B5330B83BA0B2F74A13868561E
Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa
Signing time:             Tue 26 Nov 2024 11:34:41 +0000
ROA not before:           Tue 26 Nov 2024 11:29:41 +0000
ROA not after:            Tue 25 Nov 2025 11:34:41 +0000
asID:                     262754
IP address blocks:        186.219.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl
                          rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 18:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ae:39:df:16:35:18:b5:33:0b:83:ba:0b:2f:74:a1:38:68:56:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8
        Validity
            Not Before: Nov 26 11:29:41 2024 GMT
            Not After : Nov 25 11:34:41 2025 GMT
        Subject: CN=7ED26050F097311020DCDEF0866F4FC616655413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:f4:00:88:ac:cd:e8:77:f7:af:ca:19:fe:
                    79:75:51:f3:20:b1:9a:ba:5d:f8:6a:77:d9:61:8a:
                    64:84:de:da:93:0a:dc:32:70:d3:83:4f:a9:64:87:
                    9e:9c:6b:11:92:4b:3d:e8:a2:28:3d:e9:ca:37:63:
                    a6:8d:96:92:b1:2e:3f:88:65:86:80:e0:08:ff:87:
                    db:87:e0:a4:42:78:b5:9c:fd:c5:71:73:b9:bf:33:
                    ab:b9:94:2f:d3:87:11:27:a0:f9:09:6b:7f:a1:63:
                    db:b0:60:fb:28:a9:48:85:d8:05:ec:11:26:a8:33:
                    90:18:f7:a3:65:6f:51:c4:29:7d:09:40:40:10:84:
                    03:43:3a:1a:3b:ed:30:59:33:7f:4a:e0:d0:34:2a:
                    39:40:7c:6d:28:92:44:c2:91:0b:53:4a:c7:f4:fe:
                    d1:30:9e:ad:94:4a:36:91:c1:ec:05:79:c2:c8:a7:
                    f0:cd:fc:58:18:b5:cd:2f:5c:94:1b:d4:e8:0c:6d:
                    2e:c8:31:51:d0:27:74:9e:2d:0c:21:cf:f2:4d:9f:
                    96:8e:be:82:7b:93:59:02:6d:81:db:90:07:78:6a:
                    09:b3:5b:7f:85:c1:6c:97:3b:7b:4a:4d:ca:8a:37:
                    98:3c:06:9a:5a:ae:92:92:38:86:32:97:c7:90:77:
                    53:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D2:60:50:F0:97:31:10:20:DC:DE:F0:86:6F:4F:C6:16:65:54:13
            X509v3 Authority Key Identifier:
                keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:2c:06:5a:65:a7:e7:d0:2c:d7:57:fc:7a:0e:b7:0f:c5:23:
         c0:53:7f:93:5f:00:2f:19:d4:d8:90:3e:0d:27:f6:09:ac:f4:
         13:4c:fd:49:20:bb:79:e7:cd:25:ab:6c:29:61:87:29:4d:45:
         8b:b1:8f:20:84:2d:cf:25:e8:b7:1e:69:7c:88:b6:af:3c:d1:
         60:3b:dc:cb:b3:4c:ec:27:06:a9:7d:1b:4d:eb:5a:26:59:a2:
         ed:8a:f7:93:bf:56:38:62:34:f3:46:0b:12:ff:f0:38:76:2a:
         c4:3d:32:93:91:40:a6:f2:a3:d2:86:9c:2c:92:5a:aa:47:86:
         20:4d:39:3b:30:63:b9:5d:73:55:dd:cd:2c:e5:e6:98:48:ac:
         36:b3:ed:f7:01:35:a6:75:ac:cb:ee:85:2b:ae:b8:62:08:9e:
         52:4c:ed:42:6d:8c:70:2d:b0:57:9a:15:23:3f:b7:ff:fe:c4:
         d4:2a:95:a5:cc:e8:2f:b9:4f:d2:8e:98:70:7c:cc:d6:fc:24:
         95:7c:37:45:31:63:53:93:3d:81:15:98:a8:b0:fb:fa:9b:96:
         71:12:01:46:bf:49:49:52:03:60:c1:0b:b6:c2:62:79:e7:79:
         47:c9:2b:b2:47:c7:8c:63:75:3a:36:bd:c3:72:c1:07:2a:9f:
         23:7e:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:12 2025 by rpki-client on console.sobornost.net