Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e322e302f32342d3234203d3e203533313536.roa
File:                     3138362e3231312e322e302f32342d3234203d3e203533313536.roa (raw, json)
Hash identifier:          3dB1v1KAYyq2UCfF3Scg64gyhNTuYKOeU/QYSJdKA+g=
Subject key identifier:   2E:76:7E:E9:CB:50:C5:67:06:C1:80:B3:DE:8B:4C:DC:39:84:6A:6D
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       08E9A56B0BD4264AE3DCC582C99DD93A25D9FFFC
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e322e302f32342d3234203d3e203533313536.roa
Signing time:             Fri 04 Apr 2025 11:43:44 +0000
ROA not before:           Fri 04 Apr 2025 11:38:44 +0000
ROA not after:            Fri 03 Apr 2026 11:43:44 +0000
asID:                     53156
IP address blocks:        186.211.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e9:a5:6b:0b:d4:26:4a:e3:dc:c5:82:c9:9d:d9:3a:25:d9:ff:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  4 11:38:44 2025 GMT
            Not After : Apr  3 11:43:44 2026 GMT
        Subject: CN=2E767EE9CB50C56706C180B3DE8B4CDC39846A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:b2:7d:e4:76:d9:46:00:bd:04:6f:e3:7d:
                    54:c7:0c:c9:4e:32:ea:e7:01:b8:15:3d:00:c0:0a:
                    87:29:ba:66:53:ed:37:67:47:97:0e:df:cf:01:6a:
                    85:7f:7f:b0:66:80:c1:ab:5f:11:f7:34:54:d8:33:
                    62:e2:d2:1a:8f:c8:04:db:69:57:cd:8e:92:6b:e8:
                    76:c2:52:50:15:d7:dd:44:59:d1:1a:a9:3f:3c:8c:
                    20:12:af:7f:84:d7:b8:6e:bb:cf:e2:6b:fe:94:23:
                    0b:ce:9a:f3:32:59:91:51:be:b4:0b:b1:c6:9c:14:
                    3a:a9:cb:ff:e1:2a:c8:66:ab:08:bd:24:f4:58:9d:
                    a6:40:92:9e:bc:c4:36:16:dd:0b:c1:24:f6:99:42:
                    01:a6:79:99:1b:96:97:1f:dc:e8:be:45:0c:cd:bc:
                    6c:5a:69:1a:54:0c:51:cb:00:f6:42:74:67:26:3b:
                    d3:4a:74:f0:47:11:d3:eb:5b:ae:5a:2e:7d:c5:fb:
                    6a:80:c1:ed:91:9c:41:76:2c:db:8d:cf:6f:38:c6:
                    40:2c:d2:e0:ec:7e:5f:ca:39:45:83:70:3d:06:57:
                    15:59:e4:72:70:cd:07:1b:50:c7:d4:01:2d:08:2d:
                    cc:b4:be:ea:c0:69:5c:98:85:f9:e8:87:be:f8:7d:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:76:7E:E9:CB:50:C5:67:06:C1:80:B3:DE:8B:4C:DC:39:84:6A:6D
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e322e302f32342d3234203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:80:d1:53:90:a5:31:e9:22:2c:a3:0d:60:90:03:69:35:49:
         32:a0:71:16:a1:7b:a4:e5:8d:02:30:bc:15:3c:ff:0f:03:c2:
         a7:17:67:99:8f:ba:17:8a:09:7b:cf:c5:a4:f8:38:b8:e0:e4:
         a8:1e:b5:dd:df:86:45:f6:3b:28:9b:2f:09:5e:1b:6e:90:f0:
         0a:47:f9:e2:84:09:01:f1:0e:5b:d7:36:db:f1:eb:38:87:4a:
         8a:68:bb:be:e2:84:0f:1c:68:33:53:b4:8d:bb:9b:f5:9a:dc:
         9b:02:4a:71:61:8d:1c:d1:83:95:04:49:0c:58:3b:51:a6:21:
         99:fd:03:fe:23:23:39:b0:16:07:3b:67:d7:9c:3a:6d:48:2d:
         5c:ad:43:3c:67:4a:e2:a8:e1:79:b0:0f:1b:98:23:28:24:74:
         fe:e9:ba:39:55:78:6f:ef:ae:40:35:3c:a5:43:8c:50:aa:75:
         9e:2b:ae:d2:c7:68:ab:c5:69:00:1b:7f:d3:13:40:90:40:97:
         ab:da:e8:a2:71:c5:6f:e3:91:de:f1:b5:76:43:02:38:b9:89:
         30:b0:60:3d:15:6d:4b:ed:6f:1e:e6:72:5f:a2:61:11:af:0f:
         fd:10:53:3e:70:f7:10:09:65:76:be:5a:e1:c4:f8:84:79:22:
         f8:d8:f3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:16 2025 by rpki-client on console.sobornost.net