Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa
File:                     3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa (raw, json)
Hash identifier:          DOeYQ0dwoH/3lYRpTBMHS7pBOmoWUaYPPxSXnT1ujb8=
Subject key identifier:   1A:B0:D0:30:AF:5B:FB:9D:7E:96:16:89:5D:77:5F:45:67:C9:DB:63
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       08E802F25606F76CB7AD57D59940C22DD2FEC679
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa
Signing time:             Tue 08 Apr 2025 20:10:53 +0000
ROA not before:           Tue 08 Apr 2025 20:05:53 +0000
ROA not after:            Tue 07 Apr 2026 20:10:53 +0000
asID:                     263022
IP address blocks:        186.249.16.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e8:02:f2:56:06:f7:6c:b7:ad:57:d5:99:40:c2:2d:d2:fe:c6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: Apr  8 20:05:53 2025 GMT
            Not After : Apr  7 20:10:53 2026 GMT
        Subject: CN=1AB0D030AF5BFB9D7E9616895D775F4567C9DB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:59:a4:9a:e3:f9:92:48:5f:44:4d:f6:12:9f:
                    89:8c:04:8c:27:db:2d:38:92:c6:29:4e:3b:43:03:
                    0f:52:26:e6:f8:68:b4:f5:ec:35:12:fc:f9:3a:5a:
                    3d:a2:9e:f3:43:2a:0a:8d:89:7b:08:d0:54:46:23:
                    02:7d:af:fe:b5:6b:9e:29:39:a1:3f:da:c3:5a:d5:
                    7b:cc:7d:5d:04:c9:36:bc:5d:ac:7b:32:4a:4a:45:
                    2a:0f:8f:3f:33:35:f2:e0:98:8d:71:24:1b:48:37:
                    85:54:ef:f2:0f:cb:c2:33:2e:2d:3e:14:c3:03:c0:
                    00:54:04:5b:38:66:af:81:81:12:56:08:c0:82:92:
                    a9:1b:77:4c:14:7a:d5:3c:ad:e3:14:65:65:3d:4d:
                    ee:c1:2d:1d:82:86:c6:09:8b:9c:8f:a8:06:90:a6:
                    37:ab:7a:70:0e:ec:8f:15:19:67:95:14:84:4f:21:
                    bc:3e:e5:e8:83:ec:b1:8d:49:12:df:49:31:bd:d9:
                    e5:9d:b3:cf:ab:44:a6:41:62:18:a0:5d:8d:ec:f1:
                    aa:d6:68:9c:13:03:4a:b6:3c:b9:62:0e:75:93:fa:
                    31:0b:bb:62:52:9b:95:41:b7:47:b2:70:82:68:12:
                    ec:ba:0e:1c:fb:b5:27:aa:4e:e3:28:d2:2f:b5:ff:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B0:D0:30:AF:5B:FB:9D:7E:96:16:89:5D:77:5F:45:67:C9:DB:63
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:40:ab:6b:82:5f:0c:e7:d0:16:80:69:e9:93:7f:2c:c7:22:
         06:47:85:5b:d9:e3:74:95:d2:23:1c:ef:84:49:ff:98:84:09:
         38:d1:18:cd:14:26:ef:10:86:0d:6d:21:0b:09:ed:ab:0a:f0:
         07:6b:46:b3:20:e3:b8:49:2a:0e:83:97:f0:cf:73:29:6f:d8:
         f1:3d:74:af:c8:8d:14:49:4c:4d:aa:be:11:88:3d:9b:44:b1:
         a4:06:f9:2c:4b:db:ec:21:e5:96:2f:10:df:22:a9:d2:14:99:
         5a:da:44:b6:85:95:93:6d:50:51:c6:2b:b2:7f:eb:1f:e5:73:
         61:06:8c:db:f3:98:c3:5b:d9:93:e7:f1:97:83:76:8a:c0:ae:
         c9:d9:48:4a:55:3b:20:db:eb:6f:b2:08:04:bf:65:36:e8:f7:
         f8:03:68:57:23:06:84:f2:a9:b3:ed:fc:e9:c3:6b:95:f2:e1:
         b0:ec:95:c8:b7:78:14:4a:a7:ec:d8:69:b1:15:c3:05:04:c1:
         fa:72:90:66:79:18:ec:3c:f6:7b:5b:e5:9a:96:0a:c8:59:d3:
         b2:04:ec:1a:09:a0:34:6f:50:8b:bc:8b:85:a1:85:22:7e:cb:
         1c:cb:28:1e:b0:93:e0:f9:84:74:29:6b:f6:5f:d2:a3:05:1c:
         39:60:67:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:26 2025 by rpki-client on console.sobornost.net