Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/3133382e3138352e3132382e302f32342d3234203d3e20323633393134.roa
File:                     3133382e3138352e3132382e302f32342d3234203d3e20323633393134.roa (raw, json)
Hash identifier:          WxHQOjWTcLsxFSh0BSjbLy8dbkZFQsoCB0M+pnWx/9c=
Subject key identifier:   CB:8E:F4:73:0A:81:5D:B3:49:53:AE:4B:DF:71:EF:21:0D:AE:D8:85
Certificate issuer:       /CN=32F59A098BBE3BAFB45736B5DA4B6211B4E55561
Certificate serial:       73DDD4A6E1D6987A59CD6FC1758FA58CBFE02B49
Authority key identifier: 32:F5:9A:09:8B:BE:3B:AF:B4:57:36:B5:DA:4B:62:11:B4:E5:55:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/3133382e3138352e3132382e302f32342d3234203d3e20323633393134.roa
Signing time:             Fri 07 Mar 2025 01:00:33 +0000
ROA not before:           Fri 07 Mar 2025 00:55:33 +0000
ROA not after:            Fri 06 Mar 2026 01:00:33 +0000
asID:                     263914
IP address blocks:        138.185.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.crl
                          rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:dd:d4:a6:e1:d6:98:7a:59:cd:6f:c1:75:8f:a5:8c:bf:e0:2b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F59A098BBE3BAFB45736B5DA4B6211B4E55561
        Validity
            Not Before: Mar  7 00:55:33 2025 GMT
            Not After : Mar  6 01:00:33 2026 GMT
        Subject: CN=CB8EF4730A815DB34953AE4BDF71EF210DAED885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:cc:8f:df:b5:9e:92:c9:bf:ae:06:8b:a2:
                    30:ce:91:f8:61:8c:7b:ab:af:99:74:2f:81:b1:af:
                    6e:0d:48:37:99:b2:bb:c5:f4:11:12:17:ad:7a:6d:
                    2c:ad:29:25:f2:32:5d:79:1c:c9:9a:8e:60:6d:d7:
                    f0:83:62:56:fc:b9:5b:9b:26:c4:05:34:35:ee:61:
                    79:4a:22:79:58:5b:3e:ab:64:82:a0:88:b2:73:56:
                    c7:db:84:d3:e4:ae:05:58:d7:3e:da:b9:b4:38:45:
                    13:14:98:1d:40:1f:eb:ed:b1:04:51:cb:3d:cf:21:
                    19:4e:9b:a8:9f:f6:41:5d:32:05:7a:26:d0:f0:53:
                    5a:91:5d:80:8a:d8:a2:5f:9a:ab:98:5d:fc:7a:c0:
                    83:1b:fe:b5:74:18:6c:7c:da:90:0e:5f:3c:ae:2c:
                    d1:37:96:57:e3:5b:98:7c:45:62:23:8a:60:21:92:
                    6e:ae:c5:05:3a:ac:82:1a:4f:63:a9:42:74:0c:60:
                    30:23:b3:e0:4e:d5:b8:a0:e9:96:5c:39:35:c3:28:
                    a4:24:09:74:59:a6:61:d1:41:f5:af:ef:a3:5c:e5:
                    d8:e4:2f:95:63:a0:fb:8f:f9:28:4d:e4:bc:04:54:
                    cd:a1:93:20:8c:14:0b:7d:5b:2d:93:05:5d:af:ad:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8E:F4:73:0A:81:5D:B3:49:53:AE:4B:DF:71:EF:21:0D:AE:D8:85
            X509v3 Authority Key Identifier:
                keyid:32:F5:9A:09:8B:BE:3B:AF:B4:57:36:B5:DA:4B:62:11:B4:E5:55:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/3133382e3138352e3132382e302f32342d3234203d3e20323633393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:53:43:f4:7c:fd:bf:61:ff:b5:2e:82:5a:b6:d3:52:c1:bb:
         7d:fe:ca:ce:ed:b3:28:b8:94:4c:3c:fa:74:a1:47:ca:18:f2:
         f6:62:b7:e5:94:c6:a9:3f:44:22:5b:f6:f2:65:e6:68:15:87:
         b7:98:d8:d7:8c:93:49:5f:55:c8:ed:35:4e:15:db:48:6e:e4:
         fc:c4:33:a6:88:ce:da:da:af:04:13:c3:26:a5:72:82:e6:21:
         3a:7b:26:25:62:7f:43:88:60:0b:bf:ea:49:58:a2:bc:5b:79:
         2e:52:96:86:47:fa:fe:25:15:10:6c:86:3a:13:57:b3:42:b1:
         32:44:b1:83:d2:6b:12:a8:71:86:4d:2a:59:a5:18:cb:75:7b:
         71:98:d2:30:fb:44:c3:ef:a6:c4:4f:ca:5e:6b:2d:c4:a3:09:
         af:4b:50:5e:3d:ed:c6:39:03:df:19:6b:2f:0d:f7:b5:7b:b6:
         da:51:1a:c7:7b:ad:1e:5d:85:fc:46:65:7c:fc:19:0d:b7:ad:
         eb:e3:06:3d:66:13:e2:df:e8:8f:41:01:c3:13:37:2d:a8:74:
         83:48:b4:a6:17:a3:05:68:24:22:33:cd:f6:86:db:0f:0d:25:
         f0:89:28:63:d7:d1:45:07:99:62:75:dc:b0:55:2e:b4:3b:62:
         6d:7f:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:43 2025 by rpki-client on console.sobornost.net