Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa
File:                     3138362e3139342e36342e302f32302d3234203d3e203238333334.roa (raw, json)
Hash identifier:          ssF7lgdVeYo4WoEu0Et1cOFiGEBQ1Y4fCwwN0djQC5c=
Subject key identifier:   50:A3:66:4E:16:E2:E7:F8:25:BC:52:09:02:93:A0:9F:EA:3B:2E:E8
Certificate issuer:       /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial:       2178A0175F329D6527291999E3B3717366DE945A
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     28334
IP address blocks:        186.194.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
                          rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 07:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:78:a0:17:5f:32:9d:65:27:29:19:99:e3:b3:71:73:66:de:94:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=50A3664E16E2E7F825BC52090293A09FEA3B2EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:52:fe:6b:55:93:b6:18:39:11:43:47:cb:
                    c2:2d:98:de:c5:47:27:2a:c4:d1:70:fd:f6:91:2c:
                    df:15:63:32:b3:31:69:a7:b4:e0:b9:cf:fe:2d:b0:
                    50:30:eb:da:81:8e:de:ca:a7:68:d9:8a:bb:7d:d1:
                    d7:6e:00:cd:e6:f7:41:86:6c:89:98:fd:ec:91:3d:
                    53:95:f7:9e:c3:72:d9:63:5a:e4:4f:c1:54:a8:65:
                    c7:d9:81:5b:68:93:ab:dd:ff:c9:29:b6:71:ce:27:
                    7b:5e:18:3d:68:28:8f:f9:22:bb:3b:5b:90:28:5b:
                    19:d8:4a:db:3a:cf:67:40:83:4e:9f:1c:4f:a5:36:
                    cb:fe:90:5d:98:4b:ab:9a:b4:5a:b0:83:02:65:2a:
                    95:41:bd:c4:89:d8:61:e9:18:47:24:ea:45:13:2e:
                    f1:1a:86:69:8a:38:ce:32:bf:d3:ce:8b:34:37:1c:
                    d8:f0:91:1a:3d:71:2a:ad:b5:bd:03:d9:c5:b9:66:
                    d6:9c:f0:2e:e1:30:97:4a:ed:c6:64:5c:f5:2b:db:
                    af:88:a5:9d:28:0c:10:85:00:54:67:62:ad:ac:00:
                    66:24:f6:39:12:f5:48:ee:48:68:b6:9d:08:1e:80:
                    72:14:82:76:a7:90:6c:25:b6:3e:49:68:ea:90:59:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A3:66:4E:16:E2:E7:F8:25:BC:52:09:02:93:A0:9F:EA:3B:2E:E8
            X509v3 Authority Key Identifier:
                keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:f3:07:bd:22:01:f6:f0:a5:85:d8:91:dd:2d:df:0e:63:
         64:40:75:98:23:e4:44:4c:49:88:da:fb:df:74:a8:4b:05:a2:
         11:29:40:11:fd:0e:51:9b:7b:25:c2:ac:b1:f2:27:ac:c7:33:
         af:13:5c:ce:42:92:78:ef:0b:77:3b:22:07:bb:ac:48:b1:fb:
         e0:69:48:4e:9c:5b:7e:63:f3:62:bf:38:ee:4b:55:19:e8:95:
         ac:42:47:10:7e:e1:b2:20:0b:56:ef:9f:d0:b9:2c:cf:41:3d:
         72:a1:9e:0d:ba:21:58:df:e4:20:03:13:91:ea:cd:89:b7:5f:
         20:97:77:9b:b3:40:82:8a:10:e4:25:92:47:54:04:3f:15:08:
         f1:5a:c4:4f:27:02:87:02:6c:d3:1f:7c:cb:67:55:53:cb:51:
         08:49:1c:8f:c7:8d:b0:fc:d1:e8:8f:80:93:e8:21:97:68:a3:
         a6:5a:5b:7f:cf:a5:8d:f5:a2:59:83:1f:a2:8d:e1:a5:a6:dc:
         d6:61:29:37:dc:b1:78:88:26:54:67:e7:6d:d8:96:d8:c8:23:
         69:b2:25:96:cd:ec:d1:3b:96:52:ed:cb:47:58:45:e1:e3:23:
         74:66:de:21:f2:30:a5:26:82:55:5b:80:fb:a3:16:b1:a6:f1:
         d0:d3:a1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:06 2025 by rpki-client on console.sobornost.net