Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa
File:                     3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa (raw, json)
Hash identifier:          lRrYpUjSMkeCuESmT1fpUgfIaFfPoRtacUeY2OQfinU=
Subject key identifier:   66:A8:DA:27:0B:13:DB:AF:7E:07:71:DB:C6:09:CC:F9:6D:F3:9E:75
Certificate issuer:       /CN=FF4C5A7CB5F90DAE8409EFA373627C2606355D20
Certificate serial:       7F51F5624402B1EBEBF87544EB79CB4570ED0709
Authority key identifier: FF:4C:5A:7C:B5:F9:0D:AE:84:09:EF:A3:73:62:7C:26:06:35:5D:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4C5A7CB5F90DAE8409EFA373627C2606355D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa
Signing time:             Tue 08 Apr 2025 19:29:08 +0000
ROA not before:           Tue 08 Apr 2025 19:24:08 +0000
ROA not after:            Tue 07 Apr 2026 19:29:08 +0000
asID:                     53209
IP address blocks:        186.233.176.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/FF4C5A7CB5F90DAE8409EFA373627C2606355D20.crl
                          rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/FF4C5A7CB5F90DAE8409EFA373627C2606355D20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4C5A7CB5F90DAE8409EFA373627C2606355D20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:51:f5:62:44:02:b1:eb:eb:f8:75:44:eb:79:cb:45:70:ed:07:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4C5A7CB5F90DAE8409EFA373627C2606355D20
        Validity
            Not Before: Apr  8 19:24:08 2025 GMT
            Not After : Apr  7 19:29:08 2026 GMT
        Subject: CN=66A8DA270B13DBAF7E0771DBC609CCF96DF39E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:c6:22:19:1b:2c:b1:69:3d:33:c3:3b:f5:
                    4d:b6:6e:6b:b1:d5:ce:89:c9:1e:65:77:65:fc:e1:
                    ef:80:35:d0:6f:ec:cc:9f:c2:65:f5:7f:35:a6:3f:
                    00:7e:d7:3c:eb:ff:8b:6b:97:38:f4:46:b2:91:48:
                    fd:8b:a7:46:cd:3a:66:53:79:dc:f1:a5:53:be:66:
                    fb:65:94:38:b0:33:05:b4:dd:83:a1:7b:91:8a:74:
                    7b:d6:4a:b1:1f:ac:95:2c:8b:88:d0:7c:59:b9:6f:
                    7a:8f:6c:91:76:b0:72:e2:77:22:b2:62:53:2c:78:
                    41:91:04:07:49:c3:89:38:41:dc:5f:82:47:1e:00:
                    eb:eb:86:51:71:53:76:c8:13:06:ff:91:71:3c:22:
                    d0:41:18:b5:30:83:0e:c1:34:7a:2f:6c:12:13:89:
                    73:af:0b:85:eb:31:fe:ff:4d:91:54:3e:23:58:d9:
                    8d:7c:e1:73:2a:db:1c:2c:aa:4f:1e:c1:10:ca:e4:
                    5d:12:5c:ce:15:91:31:8c:67:b8:5f:62:b3:6c:84:
                    fc:bc:b8:67:b8:ad:e4:4e:06:84:9f:57:89:15:36:
                    8b:24:46:0b:95:64:e1:df:cb:24:6b:5f:e4:87:d6:
                    9a:3e:a6:14:42:56:17:f3:2d:9f:33:65:83:41:fc:
                    d3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A8:DA:27:0B:13:DB:AF:7E:07:71:DB:C6:09:CC:F9:6D:F3:9E:75
            X509v3 Authority Key Identifier:
                keyid:FF:4C:5A:7C:B5:F9:0D:AE:84:09:EF:A3:73:62:7C:26:06:35:5D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/FF4C5A7CB5F90DAE8409EFA373627C2606355D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4C5A7CB5F90DAE8409EFA373627C2606355D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:05:37:27:a5:20:c9:8e:51:4e:0c:6b:a4:f5:ea:dd:24:f8:
         c2:3b:3b:0f:b0:99:1f:a6:dd:23:a2:41:7e:58:7a:e3:64:3d:
         1d:0a:af:d8:6e:f8:0f:6e:3a:b4:53:ee:f6:e6:00:54:d6:2a:
         a2:03:70:5d:2c:64:28:57:d7:3f:46:31:d1:7d:6d:3d:9e:2d:
         b2:a8:2f:bb:31:89:b8:82:16:36:a5:44:aa:7e:ea:2d:5d:8e:
         d4:9f:7b:bf:a7:2b:6a:06:10:f3:04:1a:b8:88:21:4a:e9:fa:
         5c:91:56:54:16:ef:9f:65:e0:67:b4:22:ee:96:45:08:35:13:
         1f:a5:f9:db:31:3a:67:4b:60:43:f8:45:fb:52:ef:60:14:e6:
         80:50:30:3f:26:9f:37:c4:d1:9c:8b:5d:58:4c:ff:d6:a4:1b:
         79:d1:f9:e3:f3:fc:ff:2a:f1:42:a6:92:b1:fa:57:48:1a:90:
         c7:2d:f4:06:1c:9d:7f:8b:ac:6f:b0:e8:46:94:2a:e7:36:7a:
         66:ae:c2:4b:00:19:da:be:27:5a:3a:2e:89:62:43:25:b1:d0:
         6b:4c:c8:64:b1:41:65:76:5f:72:72:2b:93:83:f6:ba:49:13:
         9c:52:03:73:5f:fc:69:06:ab:7d:54:02:14:26:d5:b2:10:f2:
         82:73:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:35 2025 by rpki-client on console.sobornost.net