Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa
File:                     3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa (raw, json)
Hash identifier:          vl0Y97TTdeK1pQYKEh+4FD0IDsmoiD0nk7GQF/Uq9UM=
Subject key identifier:   CC:C1:01:BE:6F:4F:AD:EC:0D:69:E4:2B:66:F0:CE:73:3A:76:74:68
Certificate issuer:       /CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
Certificate serial:       5F800BF155370C5906C3A8CB781847B7432B1317
Authority key identifier: 05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa
Signing time:             Thu 10 Apr 2025 14:05:15 +0000
ROA not before:           Thu 10 Apr 2025 14:00:15 +0000
ROA not after:            Thu 09 Apr 2026 14:05:15 +0000
asID:                     53196
IP address blocks:        186.232.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl
                          rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 10:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:80:0b:f1:55:37:0c:59:06:c3:a8:cb:78:18:47:b7:43:2b:13:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
        Validity
            Not Before: Apr 10 14:00:15 2025 GMT
            Not After : Apr  9 14:05:15 2026 GMT
        Subject: CN=CCC101BE6F4FADEC0D69E42B66F0CE733A767468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:c4:5f:7b:8b:fb:ae:5e:d9:79:b3:11:d7:
                    09:03:aa:b5:02:8b:3a:f0:30:e8:65:95:d2:5c:49:
                    c6:39:75:61:54:be:bc:c8:94:38:f2:a4:67:0a:3d:
                    7d:1a:0d:2a:87:99:13:2e:81:d5:0e:15:7a:57:f7:
                    59:74:3b:6d:18:22:57:0e:53:25:7a:c2:cb:e1:3c:
                    47:14:02:63:fe:78:c4:83:f7:53:68:eb:73:84:86:
                    fa:1f:ce:7e:cc:ff:10:cd:a9:5b:4e:52:4c:e4:be:
                    29:05:00:a6:7f:2b:f5:a0:64:b4:7a:7a:e5:d6:e4:
                    43:6f:8a:5e:0c:94:0c:ba:ef:48:01:34:3a:ed:79:
                    c5:55:07:cf:d6:68:cd:51:d3:50:92:1b:42:35:1f:
                    65:85:2a:a7:8d:36:38:28:31:e8:3b:b6:6e:0e:69:
                    06:7c:21:6d:d6:57:5d:78:0d:88:c2:6b:96:f0:e0:
                    1e:76:44:da:48:da:15:46:b3:30:fd:1c:38:19:07:
                    82:3f:fe:65:68:04:eb:7f:cd:a2:4e:55:4f:9e:73:
                    90:68:7d:a4:97:04:32:d0:4d:ef:0b:ad:e6:04:2e:
                    89:27:95:1b:bd:0f:b3:82:e9:22:f6:28:bb:68:8c:
                    96:03:df:9c:fd:f9:ba:8e:0b:c5:bd:45:8f:11:a0:
                    ff:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C1:01:BE:6F:4F:AD:EC:0D:69:E4:2B:66:F0:CE:73:3A:76:74:68
            X509v3 Authority Key Identifier:
                keyid:05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:f0:39:36:8a:2e:f2:8d:e1:46:60:69:ff:13:0d:77:4f:53:
         0a:6f:e2:37:a9:37:ac:2a:44:fd:af:89:e1:80:50:52:0f:04:
         8c:83:d6:d2:2e:e8:c5:53:c1:6f:0a:95:cf:78:a3:a6:ad:c1:
         6b:48:9d:9b:de:05:9e:b2:bb:f8:85:25:b5:35:6e:37:cd:c6:
         ab:07:2f:8a:20:5d:52:c8:df:54:ef:8d:84:18:ee:57:7c:19:
         df:44:86:7d:a8:f0:51:8a:83:fc:1f:62:69:bc:71:2a:69:ae:
         c5:7d:8c:aa:37:fa:ed:27:e2:54:dd:94:17:69:40:fa:cf:fb:
         33:72:0a:51:51:43:49:56:f0:1b:05:23:0c:d7:f1:c0:a9:b8:
         5a:b9:8d:72:f7:69:15:36:7c:57:fd:5c:f9:b9:00:5f:a5:59:
         aa:4a:d1:ca:4e:8c:b0:bc:92:3f:26:b2:b1:84:a2:24:71:6c:
         f5:d9:cb:b2:c1:9c:ef:56:d0:96:70:3d:e7:39:10:a5:8d:a8:
         7d:94:4b:fb:22:04:88:b9:73:8b:69:e6:a2:c0:39:cd:1a:37:
         d5:40:91:8e:f8:69:34:1d:76:9c:64:42:71:71:d4:77:89:0c:
         a7:52:70:b1:9f:2d:f2:8b:96:f3:37:fb:9c:95:7b:df:22:4d:
         fd:75:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:09 2025 by rpki-client on console.sobornost.net