Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3133362e302f32322d3234203d3e203533313431.roa
File:                     3138362e3139342e3133362e302f32322d3234203d3e203533313431.roa (raw, json)
Hash identifier:          3a1Rlrf3iCob61KGUw9AbKDy7PokBN+DJeb1h+YAqTw=
Subject key identifier:   F8:30:69:0B:9C:35:BE:BB:07:48:E4:76:96:A6:39:70:B5:62:66:D8
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       2E3787C2593C908B485D9A200FB16E1F98BFDED9
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3133362e302f32322d3234203d3e203533313431.roa
Signing time:             Fri 18 Apr 2025 14:30:51 +0000
ROA not before:           Fri 18 Apr 2025 14:25:51 +0000
ROA not after:            Fri 17 Apr 2026 14:30:51 +0000
asID:                     53141
IP address blocks:        186.194.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:37:87:c2:59:3c:90:8b:48:5d:9a:20:0f:b1:6e:1f:98:bf:de:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Apr 18 14:25:51 2025 GMT
            Not After : Apr 17 14:30:51 2026 GMT
        Subject: CN=F830690B9C35BEBB0748E47696A63970B56266D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:0a:29:57:4d:d6:69:d1:c6:e5:12:59:ab:
                    fb:2b:32:4c:1d:e5:1a:01:64:ac:7c:5f:54:74:b5:
                    99:9c:ee:3c:67:49:1f:91:60:1d:29:99:0b:75:a4:
                    14:58:17:65:00:10:69:6d:7b:8e:8e:3b:e6:f5:ea:
                    a4:ed:41:4c:22:f1:eb:0c:19:1e:7d:47:26:a1:ab:
                    63:92:2d:53:e3:3a:dc:1a:f5:0f:af:54:66:2e:6f:
                    55:5d:80:96:41:cf:b0:c2:6b:86:1c:8b:fa:2e:27:
                    00:82:e4:0f:c9:5b:62:d4:4f:c5:34:b2:e5:5f:36:
                    b8:68:20:ec:59:c4:5b:3c:f2:fb:11:64:4b:db:39:
                    39:2d:6f:2a:bc:f9:3c:11:c2:15:69:2c:dd:fc:52:
                    80:dd:96:bd:5d:27:d5:c2:78:05:39:e8:51:2c:34:
                    4c:6b:c7:96:70:ea:27:de:ae:57:59:ed:a2:37:f6:
                    ed:c0:96:79:c9:8a:3c:5f:77:55:67:da:ca:ae:37:
                    58:c4:6a:0d:81:d2:31:88:e2:75:25:45:ad:ae:3e:
                    58:54:4b:3e:ea:a6:7b:6b:da:33:47:28:31:7a:e8:
                    ef:01:e1:76:14:47:19:30:19:91:f3:e3:c3:c3:1d:
                    f2:b5:ee:05:ba:8c:10:fb:e3:57:f6:1f:81:9c:f6:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:30:69:0B:9C:35:BE:BB:07:48:E4:76:96:A6:39:70:B5:62:66:D8
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3133362e302f32322d3234203d3e203533313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:af:7c:d7:4d:84:62:2c:be:89:b9:fd:9e:b6:ef:d8:90:04:
         aa:3a:20:78:60:a1:74:10:4e:d8:73:12:b6:2e:be:bd:19:a8:
         d0:88:04:d5:07:4b:cb:f2:bd:fc:15:4c:9b:13:71:39:15:10:
         e6:a6:c6:9a:de:a1:9e:19:d2:f9:3a:d4:49:22:72:0d:68:19:
         e0:b7:52:38:c3:bb:05:b0:ae:c1:f8:74:91:ff:51:c7:97:d6:
         bf:6a:0a:26:9e:a9:5c:e0:d9:39:45:c3:7f:68:d6:99:ec:05:
         42:80:4a:91:70:d7:1f:4e:c6:b2:8d:ac:5c:72:8c:38:ff:08:
         50:b7:c8:74:4c:a8:0d:5c:19:7d:e2:c1:63:cf:31:1a:8c:38:
         94:13:f1:d4:22:cb:7a:7c:fa:b1:89:65:21:b7:28:4c:99:25:
         ad:08:5a:70:ad:35:31:c0:22:37:54:fb:fd:e1:df:84:11:8a:
         bb:35:27:52:83:5c:d8:1d:cc:fa:8a:31:83:dc:d7:92:72:02:
         65:c2:22:53:8d:20:23:52:2e:f7:1e:3f:aa:88:fc:e5:52:28:
         47:f8:c6:0c:22:aa:63:d2:32:aa:09:8b:13:d8:2c:cd:14:40:
         e6:98:0d:22:1e:18:45:99:04:18:d2:7e:9a:97:c5:cc:8e:97:
         ac:44:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:32 2025 by rpki-client on console.sobornost.net