Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e362e302f32342d3234203d3e203533313536.roa
File:                     3138362e3231312e362e302f32342d3234203d3e203533313536.roa (raw, json)
Hash identifier:          mxnsWnimc2C9pMKnzVg60ehzmE4Yrzi+XWdtCDGBx9o=
Subject key identifier:   B0:D5:04:DA:03:9C:38:D8:20:B4:1C:97:10:0F:D8:32:5A:4B:0B:FD
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       20388A654A0D5B19176ECB6FED9048BEE02455F2
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e362e302f32342d3234203d3e203533313536.roa
Signing time:             Fri 04 Apr 2025 11:44:41 +0000
ROA not before:           Fri 04 Apr 2025 11:39:41 +0000
ROA not after:            Fri 03 Apr 2026 11:44:41 +0000
asID:                     53156
IP address blocks:        186.211.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:38:8a:65:4a:0d:5b:19:17:6e:cb:6f:ed:90:48:be:e0:24:55:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  4 11:39:41 2025 GMT
            Not After : Apr  3 11:44:41 2026 GMT
        Subject: CN=B0D504DA039C38D820B41C97100FD8325A4B0BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:03:46:43:e7:06:20:d5:77:22:8e:5d:af:
                    8f:c4:c2:1b:c3:e7:da:f4:44:49:3c:a3:4a:55:83:
                    3f:f6:e1:c1:74:d7:94:a9:2d:1a:9b:de:bd:5b:cf:
                    bd:17:95:b1:0c:21:9f:db:26:85:80:36:2e:ed:36:
                    34:ce:aa:50:88:a9:72:23:2a:f0:e7:63:ab:3f:1c:
                    68:ad:70:06:fd:00:cf:54:cd:45:1c:b5:8b:09:ce:
                    c5:6a:f4:b4:fb:ff:97:3a:1c:7a:90:80:62:84:a0:
                    a7:d3:36:5f:06:9b:96:0c:98:02:3f:67:b8:22:11:
                    e3:13:c7:04:01:2b:aa:92:1e:d9:27:ae:de:d7:95:
                    0b:8c:ec:7f:a4:e4:a6:7e:c9:fe:17:be:ee:79:30:
                    31:fd:f0:82:d4:ec:b0:23:60:21:1f:d4:0c:b0:c7:
                    76:0a:f0:b4:21:cd:c4:53:fe:89:08:8c:85:02:09:
                    62:98:02:a4:dc:db:75:ef:cd:ea:d7:ae:17:8b:79:
                    8b:bc:19:55:cb:f9:7d:78:f8:ff:42:8f:6d:a0:f8:
                    4d:8f:49:fd:13:35:3f:16:b2:e6:92:af:56:87:36:
                    2a:a9:75:6e:e1:09:ca:a9:74:ad:44:df:30:9f:da:
                    a4:3d:fd:86:23:b3:5e:e6:61:64:86:13:fc:82:88:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D5:04:DA:03:9C:38:D8:20:B4:1C:97:10:0F:D8:32:5A:4B:0B:FD
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e362e302f32342d3234203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:d8:9b:d8:f1:19:09:95:4b:5d:3d:f3:09:71:fc:3d:d5:6f:
         03:d5:e9:46:6c:35:d5:2d:82:7f:4f:d2:29:a8:e2:dd:33:33:
         77:26:18:ef:07:22:0f:74:9f:37:93:8a:2d:9b:0d:fe:02:7f:
         14:8e:8c:7d:79:e4:ad:35:a2:9d:90:0d:ed:a6:b4:ec:fb:8e:
         f5:17:38:39:bd:c8:5a:ae:27:69:c4:c1:24:1f:6e:15:8c:c9:
         31:33:e0:11:60:0a:52:60:b3:28:0c:ea:68:03:50:b3:ea:a2:
         a3:65:5f:d8:f0:64:09:9e:6c:ca:90:a1:94:3e:b1:d9:70:ae:
         92:bc:f9:62:d6:af:66:a1:e4:f6:5f:d9:ad:44:66:28:17:f0:
         cf:ef:56:8f:77:6b:1b:9f:c5:d1:e5:db:26:91:99:b1:38:a3:
         d0:f5:90:16:5d:04:67:38:8f:43:6b:9a:81:3d:dd:f0:2f:50:
         44:8f:e0:a2:e8:26:f9:b0:d5:c5:0d:24:41:5e:3a:32:4b:1a:
         73:d8:70:df:f5:dc:ec:72:5f:27:89:e7:77:30:10:9d:c0:ec:
         bd:47:7c:60:ae:70:a0:3e:7e:91:06:ab:e6:b2:2e:b1:64:e7:
         aa:60:4a:53:a1:fa:e7:40:83:11:53:d6:5a:f7:a5:14:59:b3:
         a7:5e:25:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:10 2025 by rpki-client on console.sobornost.net