Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e312e302f32342d3234203d3e203533313536.roa
File:                     3138362e3231312e312e302f32342d3234203d3e203533313536.roa (raw, json)
Hash identifier:          tGmDXzZBOk2Z4wPuV7ZdVoIS4K9uEzeopJWrBJHXDwA=
Subject key identifier:   19:C6:91:AB:4E:61:F1:B7:47:9B:16:ED:0D:B9:AF:B3:15:F5:C1:AC
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       29354095D4E63B7563B3384390550A0BE8584736
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e312e302f32342d3234203d3e203533313536.roa
Signing time:             Fri 04 Apr 2025 11:43:33 +0000
ROA not before:           Fri 04 Apr 2025 11:38:33 +0000
ROA not after:            Fri 03 Apr 2026 11:43:33 +0000
asID:                     53156
IP address blocks:        186.211.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:35:40:95:d4:e6:3b:75:63:b3:38:43:90:55:0a:0b:e8:58:47:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  4 11:38:33 2025 GMT
            Not After : Apr  3 11:43:33 2026 GMT
        Subject: CN=19C691AB4E61F1B7479B16ED0DB9AFB315F5C1AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:92:97:98:86:60:44:d6:0c:85:be:94:d7:
                    03:02:13:25:50:84:4e:f0:1c:1d:2e:a8:21:67:d2:
                    13:da:37:65:4f:c6:30:01:57:ef:1f:e3:ed:35:5a:
                    5a:01:a9:e1:27:1b:92:7c:36:4a:e5:12:8e:19:07:
                    72:62:f3:4a:67:ab:40:46:53:9f:cd:ef:02:b0:9b:
                    4a:a4:61:12:6a:c5:2c:dd:90:1a:12:65:81:d0:f0:
                    58:fe:92:36:60:94:b6:b7:e1:78:00:5d:f3:60:b6:
                    42:50:46:9f:4a:cc:14:34:8c:66:b9:7b:e8:b5:be:
                    e3:1a:ce:00:d7:d0:ed:16:e3:9d:07:f2:00:e2:62:
                    cc:f1:bb:c9:21:8d:a0:40:fe:68:5d:63:33:87:da:
                    79:17:dc:8c:37:b2:bc:57:1a:ad:56:ee:06:19:a1:
                    e6:74:54:a6:e4:df:3a:a6:86:5d:e5:37:89:25:ce:
                    c5:aa:37:77:68:93:1a:30:7a:7b:89:07:4f:a3:3f:
                    84:68:e4:5e:5b:19:aa:b3:16:41:24:a4:17:4a:78:
                    18:e4:b0:34:b5:d5:31:32:d9:db:36:32:fa:f6:da:
                    f3:4c:0c:de:36:65:a3:39:1e:4c:b5:5a:69:eb:87:
                    6f:26:57:47:9f:49:3a:62:a0:b2:b7:ad:45:b9:af:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C6:91:AB:4E:61:F1:B7:47:9B:16:ED:0D:B9:AF:B3:15:F5:C1:AC
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e312e302f32342d3234203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:dc:8c:ac:41:4f:fb:43:80:a9:8b:48:c6:55:00:e5:4e:d2:
         45:6c:cf:22:cd:4d:bc:56:54:40:da:9a:c1:13:c5:fe:f0:e2:
         c5:6f:0b:75:98:75:db:c9:2a:15:47:ae:ad:e1:e2:a5:13:70:
         28:f2:9c:24:7c:10:a3:87:13:ac:63:fb:b8:22:a8:68:74:37:
         47:4d:fb:0a:ad:e3:20:b9:ba:41:00:28:c5:ca:63:b8:d3:4e:
         5d:1a:9e:bb:a2:c6:6b:55:40:66:e8:cb:35:b9:97:7d:06:c5:
         91:10:16:08:e2:52:fd:3b:6c:91:fb:51:86:f7:04:36:7d:33:
         34:93:14:9b:dd:d6:1b:da:45:d5:d9:60:10:58:b0:67:f3:cc:
         72:ec:a8:ee:f8:7b:ab:78:fa:76:00:5b:95:0a:fa:e4:70:a9:
         8d:aa:18:e6:7a:e5:60:54:44:d8:77:e4:1b:ef:04:ea:35:82:
         ff:cb:60:4c:e2:b0:3c:ba:89:c0:f8:1f:d6:e6:91:cf:97:b4:
         5d:88:19:0d:e2:6e:3f:9c:17:95:e3:3f:78:de:52:ae:f7:4c:
         a3:76:6f:9a:40:39:48:19:de:df:b3:a1:ad:c4:83:1a:41:a7:
         6b:11:a4:ec:17:65:93:dd:3d:e1:83:02:03:4c:0c:0f:b8:d3:
         cc:d6:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:16 2025 by rpki-client on console.sobornost.net