Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e352e302f32342d3234203d3e203533313536.roa
File:                     3138362e3231312e352e302f32342d3234203d3e203533313536.roa (raw, json)
Hash identifier:          Br3QeMD0aW0GfsTguRdK8YBAdfCmnKEgFIiPVwGoUAg=
Subject key identifier:   EE:91:95:FB:67:E5:2D:CA:6F:BA:0A:19:DF:97:6A:15:D8:95:31:82
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       54B8AC3A234C0E55BC7C8512B111E60E1516DB5E
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e352e302f32342d3234203d3e203533313536.roa
Signing time:             Fri 04 Apr 2025 11:44:30 +0000
ROA not before:           Fri 04 Apr 2025 11:39:30 +0000
ROA not after:            Fri 03 Apr 2026 11:44:30 +0000
asID:                     53156
IP address blocks:        186.211.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b8:ac:3a:23:4c:0e:55:bc:7c:85:12:b1:11:e6:0e:15:16:db:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  4 11:39:30 2025 GMT
            Not After : Apr  3 11:44:30 2026 GMT
        Subject: CN=EE9195FB67E52DCA6FBA0A19DF976A15D8953182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:41:b7:e6:64:15:bc:d0:ff:5b:ba:0d:b5:
                    77:95:ac:30:3b:82:6d:b6:bd:f5:76:b5:80:5c:58:
                    b6:26:70:39:46:f2:aa:6c:34:b0:28:32:ed:9d:04:
                    0a:92:18:c8:82:7c:6e:72:f6:80:f8:31:d3:82:f2:
                    d0:5e:ee:78:4f:9c:bc:f8:50:fc:ae:5d:a7:57:0c:
                    3b:a4:27:9c:21:68:15:e6:d6:3f:cf:ce:c1:30:01:
                    13:e4:d6:a5:3c:88:30:3d:58:7c:78:40:2f:c9:82:
                    f8:b9:3c:47:b2:22:85:d4:6e:e4:dc:e9:97:41:45:
                    32:7a:cd:41:2e:42:97:9f:3e:29:3a:8f:a0:14:72:
                    fc:db:a8:36:65:a5:bc:b3:2c:4e:20:42:05:66:32:
                    63:9a:25:40:ee:cc:2a:e9:1c:c2:82:c1:48:81:aa:
                    ec:5a:0e:76:23:9a:c5:c2:3b:6a:cf:d7:84:b5:1a:
                    2a:d0:61:69:d7:57:91:55:78:87:70:0f:ce:3a:e0:
                    8b:23:49:49:3a:02:58:aa:8a:00:7e:79:9e:6a:9c:
                    09:c3:74:78:ad:e6:da:5a:ca:70:36:32:26:06:5a:
                    ee:b2:3a:7b:f4:e9:60:00:6d:b0:74:2a:07:99:cf:
                    c6:01:72:ce:41:73:6b:4a:9d:d8:3d:11:34:8e:57:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:91:95:FB:67:E5:2D:CA:6F:BA:0A:19:DF:97:6A:15:D8:95:31:82
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e352e302f32342d3234203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:6e:1d:e7:7d:ac:b4:75:da:f2:66:07:81:34:02:e6:96:dd:
         2c:2b:e0:45:18:25:c3:68:e5:3a:42:81:36:b4:21:f7:6e:5f:
         e5:3b:87:80:74:52:d8:67:3e:71:f3:2e:ff:06:16:21:cf:cf:
         5e:d2:4a:01:9b:58:c7:a0:f0:dc:6b:7a:f8:fa:4f:af:22:1e:
         85:1d:ef:de:36:7f:3b:e0:4f:23:69:a8:73:fa:19:a2:ff:de:
         10:cf:22:02:5a:93:71:c2:93:7d:0a:ce:4a:6a:1c:0f:bd:82:
         42:cb:89:c1:78:79:de:fb:9d:14:53:6e:f4:e6:e5:95:a2:6f:
         78:33:01:1a:f1:f1:cc:25:3e:01:cc:42:75:60:fe:2c:ee:bc:
         4e:9f:bc:3b:4f:79:a6:a9:b8:b2:3b:c6:44:5b:c5:15:7a:39:
         a9:22:0c:4f:73:50:a3:5b:70:1e:a1:89:94:09:c5:eb:64:55:
         af:b4:fb:24:58:a7:c9:8d:55:c1:70:91:6c:9c:1e:0e:96:bf:
         ba:06:c5:eb:c3:6d:ba:b0:27:2d:66:6c:d7:c8:ea:06:0e:ab:
         26:19:55:e2:ea:0f:53:3a:8a:94:ee:b6:eb:4c:46:86:e3:aa:
         5b:76:b8:02:89:fa:65:8d:ff:33:07:98:f7:78:da:f9:0f:46:
         79:28:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:16 2025 by rpki-client on console.sobornost.net