Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa
File:                     3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa (raw, json)
Hash identifier:          Zl9uO/aY3sb99CwbMsVB4mavt/OPE2MOhFt5JMNFVV8=
Subject key identifier:   86:09:B9:86:04:F3:BC:2D:4C:2B:D0:C8:B8:DF:A1:A3:B4:B6:B8:C4
Certificate issuer:       /CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
Certificate serial:       30D4D6C010A3496B4FEEFF342B9DFFFCAEF72D24
Authority key identifier: CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa
Signing time:             Tue 15 Apr 2025 01:57:06 +0000
ROA not before:           Tue 15 Apr 2025 01:52:06 +0000
ROA not after:            Tue 14 Apr 2026 01:57:06 +0000
asID:                     263920
IP address blocks:        138.185.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d4:d6:c0:10:a3:49:6b:4f:ee:ff:34:2b:9d:ff:fc:ae:f7:2d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
        Validity
            Not Before: Apr 15 01:52:06 2025 GMT
            Not After : Apr 14 01:57:06 2026 GMT
        Subject: CN=8609B98604F3BC2D4C2BD0C8B8DFA1A3B4B6B8C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:cf:4d:c0:41:b2:af:b2:e6:ee:af:9a:2c:
                    71:7e:7d:11:41:fa:96:d4:6c:92:31:f2:43:84:1d:
                    13:13:a8:94:2b:88:1d:fd:94:07:71:1c:f0:a2:17:
                    d0:4a:b1:ad:69:a3:45:5c:21:1b:92:91:32:73:06:
                    86:aa:67:76:17:60:58:58:c3:53:f0:85:50:47:dc:
                    91:a1:d1:cb:dd:08:10:11:14:0e:91:da:c7:9e:2b:
                    7f:67:f8:7c:90:ae:f7:48:69:14:32:c1:3c:fa:94:
                    01:3e:f6:18:7d:0f:15:86:fe:16:09:41:8c:09:09:
                    7f:f0:ca:35:4d:f3:54:3e:50:9c:20:50:4f:1d:4e:
                    f0:3c:1d:b1:d0:4a:82:40:96:61:18:18:e8:9d:81:
                    51:04:47:14:cd:9b:cf:2f:0d:68:34:4c:a0:53:5e:
                    09:ab:f9:18:6a:ae:20:2d:93:a6:7e:df:b3:71:8e:
                    22:3e:98:c8:0e:ab:c6:ee:10:16:1c:cb:1b:18:f5:
                    15:71:d7:07:f8:91:1b:bc:2c:b3:9f:4b:3d:f5:f1:
                    fe:6a:9d:f3:be:f8:71:fd:96:17:96:b7:e6:e0:27:
                    c7:58:fd:0f:91:02:77:9d:6b:c0:25:fb:ba:cf:c6:
                    f2:dc:4b:9c:d8:1b:d2:7c:51:6d:8c:44:98:75:15:
                    b1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:09:B9:86:04:F3:BC:2D:4C:2B:D0:C8:B8:DF:A1:A3:B4:B6:B8:C4
            X509v3 Authority Key Identifier:
                keyid:CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:35:7c:0d:87:5a:b4:ed:aa:9e:33:2f:1a:2d:b2:c5:fa:ed:
         53:d6:66:fd:7d:24:f8:7b:70:83:aa:c2:6b:5a:ca:fa:3d:7b:
         f8:18:90:5f:2b:18:ef:b3:0b:96:79:4e:a5:97:f2:21:eb:f0:
         32:aa:99:e3:03:c0:1c:20:ad:d1:57:71:b1:6b:36:9d:1d:85:
         95:b9:ce:f1:8d:db:ad:fb:54:6a:b2:11:e9:9c:1d:e5:55:ff:
         ed:7c:10:cd:10:45:00:07:65:55:a1:d9:8a:e6:31:10:0d:5b:
         81:8a:1f:e9:d8:84:31:c3:35:91:00:7f:74:43:95:ff:bb:1f:
         76:31:3d:d5:94:a7:af:d1:18:e2:4b:ab:ca:53:1e:d1:c8:3a:
         59:9b:fc:75:55:89:de:de:ce:57:44:06:6a:4c:cf:27:cb:93:
         9a:c7:b8:18:ef:f2:e5:dc:f7:8e:98:b0:9a:d2:f8:84:a7:fa:
         19:f5:2b:34:a3:c3:76:5f:f6:de:f7:c5:1e:dc:e8:46:3a:35:
         e2:91:d1:2a:16:08:97:e7:a3:1f:3f:6b:dc:24:3e:0d:13:26:
         9f:9f:ca:dc:ae:a6:d9:f8:39:b9:62:ab:b0:a4:94:d5:5b:52:
         df:87:39:c3:ea:a1:0a:ef:75:a1:74:8e:8e:02:bb:bf:89:8e:
         8c:bc:01:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:16 2025 by rpki-client on console.sobornost.net