Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/3138362e3139352e34382e302f32302d3332203d3e203533313032.roa
File:                     3138362e3139352e34382e302f32302d3332203d3e203533313032.roa (raw, json)
Hash identifier:          VPSjE985EF4vJJpMGdqbY5e5jbo1KrEK+OGcecwraQQ=
Subject key identifier:   C6:A9:75:9F:F3:F1:C3:FC:EF:78:18:61:39:05:BC:93:F8:B4:C8:1C
Certificate issuer:       /CN=47A0BA8B6BFD6528B70033FEAB848C965238B383
Certificate serial:       39B418155D58679B68FAB9FA23570AB86572FB48
Authority key identifier: 47:A0:BA:8B:6B:FD:65:28:B7:00:33:FE:AB:84:8C:96:52:38:B3:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/3138362e3139352e34382e302f32302d3332203d3e203533313032.roa
Signing time:             Thu 06 Mar 2025 04:08:45 +0000
ROA not before:           Thu 06 Mar 2025 04:03:45 +0000
ROA not after:            Thu 05 Mar 2026 04:08:45 +0000
asID:                     53102
IP address blocks:        186.195.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.crl
                          rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 05:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b4:18:15:5d:58:67:9b:68:fa:b9:fa:23:57:0a:b8:65:72:fb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0BA8B6BFD6528B70033FEAB848C965238B383
        Validity
            Not Before: Mar  6 04:03:45 2025 GMT
            Not After : Mar  5 04:08:45 2026 GMT
        Subject: CN=C6A9759FF3F1C3FCEF7818613905BC93F8B4C81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:9c:21:28:3f:74:39:f8:94:42:31:5b:08:
                    57:0c:86:74:d9:2c:49:f3:7a:be:79:3c:e0:22:3c:
                    59:cc:0f:e8:08:a3:e7:c3:ec:8c:56:da:e1:f4:ca:
                    24:c6:66:8b:51:99:89:44:bb:dd:60:f0:03:8b:36:
                    c9:21:99:e8:d7:03:0c:dc:7c:c3:df:60:ab:10:3a:
                    7d:71:26:8a:48:16:75:22:7a:0e:34:3a:fe:77:bd:
                    46:28:f3:d6:41:f4:6e:f5:24:f7:bc:fe:ab:68:7d:
                    81:8e:9c:2a:7d:f1:6b:b8:ae:48:2b:29:52:48:36:
                    7b:bd:12:2c:5b:53:a1:27:9d:70:49:f9:aa:5d:ff:
                    67:fd:fa:2f:c0:64:ef:6a:9f:ce:88:64:d9:ec:da:
                    d7:f4:d1:b6:b4:3b:07:da:fa:30:09:26:57:96:b2:
                    91:b8:66:bb:b1:5c:1d:0e:1f:82:d0:35:ef:dc:d1:
                    67:e3:17:69:d7:9c:21:e0:6d:e4:12:a8:44:59:f2:
                    09:e2:16:5d:50:6e:f2:50:fa:5d:0b:1c:b2:3f:a8:
                    1f:98:6f:94:80:a5:19:93:39:d7:11:52:8d:56:bf:
                    32:2c:c7:64:3b:ac:a6:72:da:d6:67:5b:62:ef:01:
                    eb:be:18:52:4b:fd:22:86:75:04:17:26:ae:b8:bb:
                    e9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A9:75:9F:F3:F1:C3:FC:EF:78:18:61:39:05:BC:93:F8:B4:C8:1C
            X509v3 Authority Key Identifier:
                keyid:47:A0:BA:8B:6B:FD:65:28:B7:00:33:FE:AB:84:8C:96:52:38:B3:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/3138362e3139352e34382e302f32302d3332203d3e203533313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c3:e6:ca:47:a7:56:96:f9:24:7d:2e:49:2c:d5:71:fa:d4:49:
         42:4b:80:4c:80:2c:82:03:fe:cc:da:91:d9:08:5c:ac:4d:e7:
         dc:3c:e0:0b:81:0c:91:5a:77:55:6e:89:6d:c8:0e:4b:18:7e:
         4d:02:f4:85:a1:1c:26:71:b7:83:b0:4c:10:5e:6c:4a:00:72:
         30:04:4b:65:2f:03:88:89:5f:da:8f:b3:2c:41:34:7a:7b:23:
         ab:84:50:33:e7:fd:e8:ea:12:52:e5:14:96:2c:2f:7f:f1:62:
         73:6b:72:50:9c:97:49:f1:e8:03:ee:13:54:03:56:8e:c8:27:
         bf:3f:31:a8:28:55:f5:d6:6e:b2:fd:dc:97:45:09:33:31:70:
         20:4d:e6:5d:1e:d1:3b:56:c0:92:12:33:2e:9e:54:98:85:94:
         a6:da:8a:b5:fd:f5:18:af:84:c6:a5:30:39:e1:98:63:5c:b2:
         6d:65:3c:14:12:f5:83:18:db:c6:5e:3b:fb:d2:f0:ef:cd:b0:
         9e:4b:4e:42:11:b1:45:c9:df:ff:8d:52:b5:18:61:ef:83:b9:
         e6:41:db:dd:23:97:a2:02:97:3e:0f:8e:91:45:1f:a5:56:e6:
         0d:56:b7:0b:09:1a:ba:96:50:93:f9:49:50:8e:28:38:fd:33:
         24:d4:23:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:05 2025 by rpki-client on console.sobornost.net