Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235312e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3235312e3235312e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          TiJj1KeXNXW2HEtQcU1ntzFxH8ALc0oEZW68bYqadBs=
Subject key identifier:   84:86:A4:88:88:12:C3:45:72:92:72:96:C9:1E:21:9B:84:BF:69:77
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       1D039253342084848BD0F319647DCAE1B007D1F6
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235312e302f32342d3234203d3e20323637353133.roa
Signing time:             Tue 24 Dec 2024 13:49:27 +0000
ROA not before:           Tue 24 Dec 2024 13:44:27 +0000
ROA not after:            Tue 23 Dec 2025 13:49:27 +0000
asID:                     267513
IP address blocks:        186.251.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:03:92:53:34:20:84:84:8b:d0:f3:19:64:7d:ca:e1:b0:07:d1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Dec 24 13:44:27 2024 GMT
            Not After : Dec 23 13:49:27 2025 GMT
        Subject: CN=8486A4888812C34572927296C91E219B84BF6977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:24:95:01:50:f3:63:b7:2b:b5:8e:5e:c1:b4:
                    5f:ea:ad:02:77:44:8e:1f:1b:4f:b7:0a:94:4a:3d:
                    c0:51:bf:9c:af:40:b9:b7:95:bf:c0:11:b7:e9:e2:
                    90:fd:e7:d6:e8:e8:99:c8:e1:94:7c:17:5e:cd:e5:
                    6b:72:cd:f4:91:a8:6f:58:b4:c7:b7:8f:6e:d0:50:
                    27:40:87:6d:02:de:2d:37:02:ab:1a:7a:98:02:e5:
                    ef:19:25:e5:08:3f:77:90:24:1c:0b:2a:4e:b0:0c:
                    b3:f0:83:65:7e:a8:8f:45:58:ee:c1:94:cd:97:68:
                    11:8e:24:ea:97:83:3d:74:e4:e2:16:91:69:8b:79:
                    ad:86:d1:6b:b8:d9:f7:23:9f:6e:a3:6e:b8:b9:5c:
                    82:24:89:24:97:31:fe:0b:9a:a8:fe:0d:e0:c8:58:
                    73:2b:b6:2e:c9:0a:f5:d1:46:d2:68:00:11:be:1f:
                    99:35:4d:08:70:4d:41:44:00:48:2e:d9:1b:d7:21:
                    b7:1b:a1:67:3a:35:61:7e:1f:2a:2f:fc:c4:fb:df:
                    87:da:a4:4a:13:f9:27:72:f7:6f:e7:d0:61:99:a6:
                    a7:80:10:30:dc:1a:e2:a4:f2:7c:de:69:fb:35:8b:
                    69:bf:72:19:8f:26:58:4d:78:59:4a:32:be:5e:dc:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:86:A4:88:88:12:C3:45:72:92:72:96:C9:1E:21:9B:84:BF:69:77
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235312e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:12:d9:4a:04:86:8e:d6:79:e3:f2:f5:c4:a6:19:15:fc:f9:
         14:10:ef:5a:e9:95:f1:76:bf:17:f9:a0:0c:7f:72:aa:f2:d1:
         29:6e:86:96:6c:77:48:8b:1f:ec:5e:b0:8b:67:57:f2:64:b3:
         ef:f8:8a:0f:28:7c:28:fa:47:61:3e:25:16:b2:98:f2:5d:0e:
         0c:eb:90:f3:d8:b8:c6:da:52:d1:fe:51:df:1a:b7:3c:43:bd:
         b3:99:e3:50:24:59:58:d6:f4:d1:bb:95:ee:3b:34:25:dc:5f:
         b7:c2:c0:8b:bb:14:d5:92:78:3b:57:73:25:14:a3:6b:e2:74:
         63:6e:1a:a8:36:a0:b1:c8:8f:bb:1e:0e:dd:95:04:cd:5e:29:
         f6:17:a9:8a:d5:b0:07:ec:6a:a1:12:2d:7a:ee:8e:65:6e:88:
         b5:0c:29:d1:c0:08:0f:e5:d6:1b:bb:9f:a0:5e:12:7c:88:e7:
         1a:89:9d:c4:93:7e:45:e8:2f:64:3b:7a:d8:bd:e6:91:7b:84:
         9d:e7:7b:b9:1b:af:a0:71:d7:94:c7:89:93:c8:ff:31:1c:8a:
         ac:88:8f:ae:52:f6:c7:a2:80:2f:6f:08:22:90:14:d7:bc:e8:
         d0:b6:36:23:09:b6:dd:a5:2c:d5:f2:1a:0a:16:ba:25:85:0b:
         04:fb:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:58 2025 by rpki-client on console.sobornost.net