Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
File:                     3138362e3231312e39362e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          ds83O6teMOj3qgCJcluO3zuh45nwwuETeIPhnqiwwvI=
Subject key identifier:   06:95:0A:50:A1:0D:CB:E8:A4:4A:43:36:6D:01:A5:C5:C7:6A:C1:88
Certificate issuer:       /CN=F8410D54252926C3AE5A91AFD3992AC828829031
Certificate serial:       7020D866C2B000F6EA012EE472B4AB140E1FCB8F
Authority key identifier: F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
Signing time:             Mon 07 Apr 2025 18:10:08 +0000
ROA not before:           Mon 07 Apr 2025 18:05:08 +0000
ROA not after:            Mon 06 Apr 2026 18:10:08 +0000
asID:                     53062
IP address blocks:        186.211.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 14:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:20:d8:66:c2:b0:00:f6:ea:01:2e:e4:72:b4:ab:14:0e:1f:cb:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8410D54252926C3AE5A91AFD3992AC828829031
        Validity
            Not Before: Apr  7 18:05:08 2025 GMT
            Not After : Apr  6 18:10:08 2026 GMT
        Subject: CN=06950A50A10DCBE8A44A43366D01A5C5C76AC188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:07:2d:7f:66:d2:ce:49:5a:40:44:22:1b:
                    9b:9d:d2:c7:f5:b8:ad:f8:9f:9f:25:1f:a6:03:63:
                    23:e7:60:00:6a:6b:fc:31:50:87:8c:c9:8e:a8:58:
                    33:71:8f:a6:c5:2a:70:d3:75:ef:4a:aa:cd:e4:2a:
                    66:08:93:e4:f8:39:5f:b0:24:32:32:f8:d9:7e:4f:
                    e5:22:c7:f8:0a:77:ba:27:36:fc:48:55:70:0e:bb:
                    a9:53:c3:86:21:e6:76:71:d1:f7:cd:90:f5:05:58:
                    4a:a9:4d:d0:8c:10:ce:8d:d0:aa:4c:90:a0:16:d0:
                    d1:74:b7:ae:d9:f7:c6:34:ec:c8:74:cf:13:89:ec:
                    59:9d:e3:e1:de:69:cf:07:2b:fc:33:5e:4e:6b:ed:
                    9e:4f:24:9d:ee:e4:45:f8:b3:a9:9f:5b:c0:a6:0d:
                    af:19:7f:9b:96:22:a8:dc:f5:9f:7e:4d:83:15:56:
                    f3:f3:ee:66:87:3d:93:c5:44:54:17:db:db:73:b7:
                    4c:93:78:49:d3:1b:3c:ad:b9:91:a4:6c:56:66:a9:
                    aa:00:50:04:89:0c:34:58:97:3e:87:db:25:5e:85:
                    f7:87:f9:a2:a7:b9:7c:70:9c:2a:04:f1:64:3b:83:
                    07:e9:e8:90:be:16:7c:03:1f:5c:2a:fe:c3:a1:f8:
                    2d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:95:0A:50:A1:0D:CB:E8:A4:4A:43:36:6D:01:A5:C5:C7:6A:C1:88
            X509v3 Authority Key Identifier:
                keyid:F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:f6:6f:e9:59:77:1d:83:be:1b:0e:d4:75:e7:b5:3c:63:0d:
         24:ad:5b:c5:a9:6e:c5:38:67:10:8b:e0:ef:da:6b:4d:d5:4d:
         7e:9c:7f:f7:b4:d9:b1:2f:57:6f:8b:d4:cb:25:8d:55:32:9e:
         d7:43:ec:60:35:3f:f8:ba:00:ae:86:01:d9:e8:d9:26:68:b6:
         97:e8:7a:5b:eb:28:69:cc:09:5c:20:d9:17:4d:98:e8:1a:9c:
         42:fa:b3:31:97:6d:d3:64:8d:1c:52:0b:20:e5:30:5e:14:b8:
         65:c5:9d:f5:68:99:e1:45:3b:6a:2e:cf:4b:d5:c3:c4:48:ad:
         9f:4f:0f:13:35:0c:68:63:ad:f8:d8:b2:5d:86:09:bc:de:14:
         b2:83:e3:ce:72:fb:9e:d7:de:78:58:34:e5:df:71:0a:e4:b5:
         a5:9b:66:4e:13:c2:54:64:7c:fd:dd:cd:30:c0:d2:5c:b9:1e:
         10:b5:32:fa:2c:2f:11:79:6e:c4:83:c1:23:df:88:4f:0b:65:
         11:23:e5:ff:5d:0c:86:7e:d0:85:5a:1f:c6:7e:12:3e:93:84:
         31:4b:cc:9e:19:b6:51:19:b9:8a:8a:ab:b6:a7:72:ba:13:0c:
         3d:d7:12:0c:84:af:1f:84:26:b1:bc:f0:8e:7f:70:23:bb:ba:
         6b:69:e5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:14 2025 by rpki-client on console.sobornost.net