Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa
File:                     3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa (raw, json)
Hash identifier:          GySXPydP/gD/XzkOGI1egDXLG762j1Q35901zhD4AxU=
Subject key identifier:   BD:FE:79:7C:76:59:92:03:01:B8:80:9D:FB:FA:88:89:91:9F:55:1E
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       481886BB0C21410CD878AD426A3E75B587479281
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:23 +0000
ROA not before:           Wed 05 Mar 2025 20:51:23 +0000
ROA not after:            Wed 04 Mar 2026 20:56:23 +0000
asID:                     264344
IP address blocks:        138.185.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:18:86:bb:0c:21:41:0c:d8:78:ad:42:6a:3e:75:b5:87:47:92:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:23 2025 GMT
            Not After : Mar  4 20:56:23 2026 GMT
        Subject: CN=BDFE797C7659920301B8809DFBFA8889919F551E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3b:80:36:a2:48:22:3b:39:3c:ec:ca:a2:bf:
                    f0:51:c9:f3:f4:0b:da:69:b3:84:25:db:9d:29:91:
                    35:b0:79:03:57:4e:8d:ad:83:c5:24:db:11:dd:84:
                    3a:4a:82:62:2a:87:17:97:bc:8f:cd:0c:4b:5c:02:
                    95:83:f4:3b:5d:da:e0:07:58:44:af:c7:de:73:ae:
                    52:8a:f4:a6:66:07:91:ea:37:86:1d:d8:0e:bb:59:
                    c6:79:80:e1:c8:fe:fd:9a:6b:f2:92:7c:9a:c8:75:
                    57:e2:92:f8:bc:07:89:c0:99:53:20:5a:58:6d:42:
                    67:97:02:07:76:3f:04:86:60:f2:1b:25:79:91:93:
                    7e:28:e2:cf:2f:47:f6:0b:41:54:16:60:1b:c0:f0:
                    f8:d2:93:6b:9b:14:a0:29:9b:91:77:07:15:09:ae:
                    38:2e:5e:52:91:88:e7:0f:d6:c5:34:50:dd:2d:88:
                    58:ae:e8:6d:16:84:c2:21:9c:40:b7:a4:f1:d4:1b:
                    f7:8f:94:10:40:fc:6f:7d:07:28:f5:4d:de:70:11:
                    a4:7c:a8:61:28:5f:b8:0a:6f:b7:01:db:6f:ad:d7:
                    06:d0:ad:ca:d7:1d:72:de:6b:99:db:80:31:ff:82:
                    ea:e4:f2:ed:27:fb:ae:bc:fd:e9:2b:82:a3:1b:25:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FE:79:7C:76:59:92:03:01:B8:80:9D:FB:FA:88:89:91:9F:55:1E
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:90:69:06:1f:ba:c3:6d:46:6f:18:a9:8a:73:c3:1d:bf:06:
         b1:93:28:95:75:fc:46:92:f0:a5:ab:c2:de:23:61:e2:37:1f:
         9a:7d:29:5d:94:fd:5e:26:ba:74:6c:2c:e1:dc:85:8d:3a:03:
         8c:e1:74:67:44:5e:00:01:a3:1e:92:22:92:d9:ba:10:ee:e4:
         fa:b9:db:c1:b8:72:19:c4:9f:cc:c0:91:e6:fa:5b:13:2f:82:
         51:66:51:7f:2d:28:b6:92:bc:1d:ad:3d:ba:62:80:8b:89:5a:
         ee:d2:a1:9d:ab:0e:dc:9d:78:a3:0e:c9:35:82:ab:79:d2:b1:
         ba:79:51:4f:ba:8d:8d:6e:52:8d:1b:42:cf:fa:15:2e:d2:17:
         21:6f:41:f8:a4:74:8f:57:2a:3e:4f:12:9d:9d:90:3a:2a:2e:
         1f:1a:4e:98:f9:75:a9:eb:ee:83:36:70:b8:f3:43:59:59:82:
         f9:27:3b:1e:55:92:ca:c7:79:52:3d:fa:dc:b3:fd:5d:04:8c:
         5a:5c:77:fa:a0:aa:b9:09:49:af:f7:c7:96:de:2f:93:5f:53:
         98:f5:6f:15:b5:3d:65:3e:d2:0d:3d:c1:7c:bd:b7:61:86:1c:
         e7:34:a8:54:c9:26:4e:0d:94:f2:2b:90:a1:10:af:1a:2e:77:
         ef:8f:ba:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:58 2025 by rpki-client on console.sobornost.net