Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/3138362e3139332e302e302f32302d3234203d3e203533313334.roa
File:                     3138362e3139332e302e302f32302d3234203d3e203533313334.roa (raw, json)
Hash identifier:          /70Xr3zykjbquC5V98sp30trWq/8fdvVv+jPi4H5f5s=
Subject key identifier:   88:8C:F2:80:08:44:39:9A:9F:45:8C:7C:B6:9C:37:96:72:03:D4:51
Certificate issuer:       /CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Certificate serial:       66FAA38F7D651B246A5CF2BA34EE7DF4C070973B
Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/3138362e3139332e302e302f32302d3234203d3e203533313334.roa
Signing time:             Thu 06 Mar 2025 04:45:40 +0000
ROA not before:           Thu 06 Mar 2025 04:40:40 +0000
ROA not after:            Thu 05 Mar 2026 04:45:40 +0000
asID:                     53134
IP address blocks:        186.193.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
                          rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 18:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fa:a3:8f:7d:65:1b:24:6a:5c:f2:ba:34:ee:7d:f4:c0:70:97:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51
        Validity
            Not Before: Mar  6 04:40:40 2025 GMT
            Not After : Mar  5 04:45:40 2026 GMT
        Subject: CN=888CF2800844399A9F458C7CB69C37967203D451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:d1:a5:6d:e6:81:d2:f8:6d:bd:62:ce:e5:
                    9a:e8:b9:fd:0d:74:0c:9f:93:5c:87:3d:2d:73:bc:
                    f6:cd:e7:26:38:9c:9d:1b:38:f8:be:e3:5d:a8:d7:
                    97:30:ae:ed:87:77:2c:3b:2f:fa:5a:27:87:31:b9:
                    68:84:6c:dc:ac:98:eb:60:e4:56:1b:79:f4:56:da:
                    59:8e:45:7b:a9:8b:0f:72:b2:d0:de:82:73:04:c5:
                    3e:bc:be:10:29:2e:f2:e7:71:56:a5:64:80:cb:82:
                    10:77:50:6e:16:25:19:d5:6c:51:ce:d7:cb:e6:68:
                    5c:87:e6:2b:19:22:2d:6a:a0:50:77:91:a0:41:6f:
                    66:56:40:91:8a:14:4f:46:50:42:86:29:62:91:50:
                    30:e8:8a:5e:c7:53:98:1b:17:67:5a:21:f0:09:d4:
                    8f:37:64:57:06:a0:ae:55:71:eb:c1:72:87:15:61:
                    4b:d9:6b:27:0a:71:5f:b6:4a:df:6e:10:76:00:19:
                    df:73:56:40:79:43:ca:1f:d0:78:96:5c:c9:2b:74:
                    45:6f:cc:c7:54:d0:53:c5:6b:be:e8:17:ff:31:61:
                    03:5e:ce:d3:58:13:f6:d3:3b:73:ec:60:90:f4:81:
                    a2:84:09:8b:b5:18:bf:1f:2b:80:5b:e5:2f:76:ce:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8C:F2:80:08:44:39:9A:9F:45:8C:7C:B6:9C:37:96:72:03:D4:51
            X509v3 Authority Key Identifier:
                keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/3138362e3139332e302e302f32302d3234203d3e203533313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:4c:35:62:78:f4:6f:d0:c8:f1:4b:3e:f0:3c:99:4a:a4:a3:
         cd:a9:3d:9f:5d:2e:9b:62:97:66:c4:c4:a2:2b:35:be:d2:5e:
         e1:90:89:c5:e0:c4:37:fe:d2:f0:d2:73:e3:2a:30:4b:af:fc:
         06:ca:15:97:37:27:0b:e9:38:99:5a:c2:8b:97:bb:1d:f3:53:
         c9:61:71:6e:8b:10:fd:1e:52:39:6a:25:a8:ac:49:47:b5:63:
         e9:80:6f:53:e7:4b:6b:65:65:70:69:17:93:b6:47:c2:e3:d7:
         89:d6:01:84:03:5d:e4:2c:f9:a1:99:5c:5b:a9:67:2a:47:ec:
         b5:c2:ab:39:8d:9a:33:1c:a1:e0:be:b8:99:5a:a8:27:f1:fd:
         c0:8f:b8:76:83:36:34:59:ec:bf:97:f9:75:7d:7b:f0:4a:c7:
         c0:9f:c9:18:b1:f9:fa:65:c3:7d:64:04:90:60:b5:c9:69:ca:
         ff:e0:69:ae:48:49:0f:ff:1b:6d:2a:ae:e3:8c:6d:da:db:81:
         85:3a:db:c9:91:79:40:75:ea:8b:cb:98:05:f8:d7:84:0d:e3:
         c5:35:c6:ce:97:92:2b:aa:57:e6:ca:c1:fd:64:b7:27:cd:26:
         97:0a:ae:d7:18:b5:3d:84:b7:23:21:2d:94:60:aa:2b:f0:94:
         20:43:76:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:55 2025 by rpki-client on console.sobornost.net