Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e372e302f32342d3234203d3e203533313536.roa
File:                     3138362e3231312e372e302f32342d3234203d3e203533313536.roa (raw, json)
Hash identifier:          t3ZQmI9jLPZxqyktt7I26ZmEf7Nb9aCY9m8AcLLZYZg=
Subject key identifier:   DB:C8:BB:4B:9F:93:A2:BC:D2:65:43:3B:E6:80:F3:8B:4A:06:78:2E
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       5C87DBEEBEF717A08FEADE1178C4243A049F3843
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e372e302f32342d3234203d3e203533313536.roa
Signing time:             Fri 04 Apr 2025 11:44:52 +0000
ROA not before:           Fri 04 Apr 2025 11:39:52 +0000
ROA not after:            Fri 03 Apr 2026 11:44:52 +0000
asID:                     53156
IP address blocks:        186.211.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:87:db:ee:be:f7:17:a0:8f:ea:de:11:78:c4:24:3a:04:9f:38:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  4 11:39:52 2025 GMT
            Not After : Apr  3 11:44:52 2026 GMT
        Subject: CN=DBC8BB4B9F93A2BCD265433BE680F38B4A06782E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:81:b4:34:5d:11:d4:1f:66:97:7f:a3:63:18:
                    94:82:5a:88:d7:73:65:bf:cb:bc:87:a8:da:fe:20:
                    20:a2:5b:f0:e2:06:c3:c1:8f:2f:f3:b4:b5:41:67:
                    0c:57:a5:e9:67:99:a1:b7:e6:ac:73:67:69:cb:0c:
                    16:2c:4e:e1:23:62:90:bd:1d:2f:c7:ee:da:0d:69:
                    ae:eb:b7:06:1d:4a:c5:1d:65:f8:ca:9b:a6:3d:0f:
                    5c:a0:ca:5c:a0:53:ef:70:31:f8:e2:80:b6:e4:24:
                    79:c2:3e:5d:94:f2:9f:2a:26:1e:79:c1:9c:a5:82:
                    b9:e7:c4:39:05:d8:7b:17:19:ed:a3:46:e3:fe:0d:
                    a6:6c:e5:53:11:aa:82:69:22:71:c7:ce:a5:c2:95:
                    ae:74:5e:31:4a:c6:69:29:9a:e9:0e:8e:53:0d:7e:
                    e4:23:7a:c8:42:2b:ee:b4:04:f3:3c:4f:e7:11:71:
                    22:fa:70:8e:40:b0:3e:29:be:af:d1:d5:22:bf:d5:
                    4a:cf:68:83:7b:1a:87:be:92:e0:2d:92:fa:95:d1:
                    db:af:2f:ce:d8:19:83:c3:5e:90:6d:99:d6:eb:db:
                    dd:a9:af:04:cf:83:f4:96:24:61:d5:6a:6b:ba:eb:
                    9d:57:14:c0:41:10:a7:40:83:44:9a:d9:46:2f:0f:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C8:BB:4B:9F:93:A2:BC:D2:65:43:3B:E6:80:F3:8B:4A:06:78:2E
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e372e302f32342d3234203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:6e:0a:08:e1:cc:1f:91:37:c9:51:3e:9e:e1:17:88:38:
         c8:f2:06:24:93:d4:ab:89:16:e9:70:ca:ac:23:3b:f7:e3:2c:
         ea:73:be:09:ab:79:fd:21:3e:93:be:ef:92:88:09:1e:13:9f:
         92:88:79:b6:2d:77:36:02:de:29:5b:65:4b:b9:9c:32:68:15:
         63:12:ec:d3:b3:28:4d:68:52:aa:af:6e:ae:62:15:2f:33:cb:
         4b:1a:9d:e8:b7:a4:9e:5e:65:ae:7d:be:0f:76:86:0e:0f:dc:
         ee:9b:10:01:55:4c:31:ec:54:26:5d:07:3a:de:a1:83:49:79:
         10:62:8f:cb:7e:77:a7:f0:9d:75:19:c7:2f:fd:25:05:fd:8b:
         cf:7f:48:0e:55:28:6b:98:f5:f0:33:99:24:a7:e5:be:37:c1:
         79:f4:78:80:e0:46:82:91:c1:60:c7:c7:21:34:83:a9:05:c5:
         9e:94:c1:d1:8a:33:0a:e9:97:6f:b7:76:1b:65:87:1f:27:a6:
         3f:b2:eb:04:41:16:c0:cc:a9:05:33:20:b8:03:23:1c:cf:a4:
         1b:66:75:24:26:96:77:71:93:78:7e:95:49:97:2b:5a:54:4e:
         86:ae:ed:db:d5:f6:c8:cd:fd:2b:8f:a1:dc:98:01:a1:da:99:
         92:b2:5c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:16 2025 by rpki-client on console.sobornost.net