Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32342d3234203d3e203533313536.roa
File:                     3138362e3231312e302e302f32342d3234203d3e203533313536.roa (raw, json)
Hash identifier:          HGSntTzNxoGy3t2jMC5Jgv4S9DsSq3hulHay1NHZUhM=
Subject key identifier:   84:E4:66:F5:DE:2A:3E:50:01:01:9E:30:55:56:D7:6C:E6:3D:67:86
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       36E044DCDE121A1F3F9D0263FDE509D6BA7D9606
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32342d3234203d3e203533313536.roa
Signing time:             Fri 04 Apr 2025 11:43:12 +0000
ROA not before:           Fri 04 Apr 2025 11:38:12 +0000
ROA not after:            Fri 03 Apr 2026 11:43:12 +0000
asID:                     53156
IP address blocks:        186.211.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e0:44:dc:de:12:1a:1f:3f:9d:02:63:fd:e5:09:d6:ba:7d:96:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  4 11:38:12 2025 GMT
            Not After : Apr  3 11:43:12 2026 GMT
        Subject: CN=84E466F5DE2A3E5001019E305556D76CE63D6786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:c5:4f:c1:15:ca:3e:16:1d:7a:1c:9b:40:
                    90:9d:80:d7:01:1b:b2:24:d4:58:c5:0b:92:d4:71:
                    e0:3b:45:8e:23:84:1b:2f:c9:15:6f:86:8b:23:b6:
                    6d:e9:71:4c:dc:02:15:8d:34:9c:8f:2e:5a:97:90:
                    d0:5f:d2:54:30:92:18:77:f9:ce:e5:1d:f5:b7:65:
                    ef:89:cf:10:9c:1c:14:1d:08:18:ec:fd:1c:f6:ad:
                    26:cd:60:4a:d9:06:b5:eb:73:32:12:0e:c7:18:37:
                    82:f6:0d:7b:1f:40:31:cc:7f:23:42:dc:df:a2:a3:
                    52:e6:2d:fb:7a:d5:f0:38:06:48:10:fd:1b:47:af:
                    b5:dc:3b:d7:d8:63:92:bd:89:d7:74:64:a6:31:76:
                    04:b2:97:be:26:41:e6:6f:58:f4:1f:26:f4:29:9a:
                    bd:94:78:d7:19:90:c2:4f:57:9c:43:63:71:c3:46:
                    a9:10:c7:cf:6c:50:aa:e1:71:31:0a:bd:01:fb:c3:
                    b7:c6:e7:dc:8c:5e:7d:06:14:9a:48:02:f1:06:59:
                    4d:a7:56:77:4f:a1:4f:ea:d1:b9:8f:1d:2e:4d:6f:
                    b1:21:95:be:31:46:39:4b:a4:19:21:f0:28:ef:fc:
                    fc:ff:b6:c4:6b:3d:ad:79:84:03:29:de:07:eb:46:
                    17:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E4:66:F5:DE:2A:3E:50:01:01:9E:30:55:56:D7:6C:E6:3D:67:86
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32342d3234203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e7:4b:ce:3c:95:8a:ef:97:24:fc:7f:29:f9:e4:73:47:50:
         d1:db:a1:bd:0b:bb:03:59:1b:4a:c3:d2:00:00:72:64:e4:3f:
         8f:e6:32:82:e2:bc:b3:e1:9c:f0:d0:bc:af:7c:70:24:29:93:
         65:58:9a:c7:c2:3c:47:51:18:45:1c:91:00:7f:f8:dd:28:11:
         0f:eb:b5:40:33:3d:94:ea:7e:e8:58:af:a7:12:c5:0d:14:5c:
         e3:f7:94:2f:22:fa:52:bc:07:df:02:ec:6a:6d:7e:3b:52:e3:
         58:82:0d:f1:81:fc:9b:90:fd:e6:53:29:b7:e6:94:76:bd:56:
         7f:a0:c8:07:1d:16:83:e5:c6:83:7d:c2:a1:9f:86:d8:cb:28:
         55:ed:d4:97:12:4a:3f:a5:61:91:ed:50:89:3e:4b:27:5b:79:
         72:f6:2e:19:b9:95:91:85:5b:9a:da:0f:84:fa:af:d8:6a:f4:
         60:96:ae:cf:6e:a5:19:87:af:d5:17:a2:a9:18:6e:9d:a8:54:
         6e:f7:40:ac:52:b1:1a:0a:3f:43:21:c0:64:9b:43:c0:5c:2f:
         91:b0:9b:bb:a6:91:94:e6:be:46:89:e9:a3:8a:71:ee:56:ee:
         23:ac:4d:71:9d:50:4f:2d:65:e5:48:59:f2:0a:6c:2f:c0:4c:
         7d:11:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:10 2025 by rpki-client on console.sobornost.net