Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e382e302f32342d3234203d3e203533313536.roa
File:                     3138362e3231312e382e302f32342d3234203d3e203533313536.roa (raw, json)
Hash identifier:          GgRL+bJ7+eDiPKzVZaNo7wUfvQPRVmB/u8X5+CBAbc0=
Subject key identifier:   F9:85:5F:9F:28:82:88:7B:EF:5F:31:15:C6:A9:AA:B5:D6:08:2B:1D
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       559E8A6857F54FC8E75B8857EE13A864544FB12C
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e382e302f32342d3234203d3e203533313536.roa
Signing time:             Fri 04 Apr 2025 11:45:07 +0000
ROA not before:           Fri 04 Apr 2025 11:40:07 +0000
ROA not after:            Fri 03 Apr 2026 11:45:07 +0000
asID:                     53156
IP address blocks:        186.211.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9e:8a:68:57:f5:4f:c8:e7:5b:88:57:ee:13:a8:64:54:4f:b1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  4 11:40:07 2025 GMT
            Not After : Apr  3 11:45:07 2026 GMT
        Subject: CN=F9855F9F2882887BEF5F3115C6A9AAB5D6082B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:16:11:8f:de:6a:8a:ec:d5:28:47:c7:5f:a2:
                    57:e0:e6:ca:b1:92:a8:3c:1e:0f:52:0b:c4:15:1c:
                    48:9e:6d:cc:d8:7c:01:d6:a2:0b:e3:22:c7:55:48:
                    60:97:7c:53:1d:ce:f6:44:63:10:38:c0:ad:80:cc:
                    40:a3:d1:b6:f5:3c:a8:dc:6a:cc:c2:ac:0b:34:64:
                    ba:4e:7c:08:82:67:da:75:92:ed:6c:60:d9:f2:5a:
                    6d:5c:3f:e3:af:d7:4e:95:62:95:97:a6:d5:09:94:
                    5e:ca:30:d7:e6:25:9c:00:01:1a:c3:75:54:a0:c7:
                    bd:b9:ec:0d:4b:98:17:13:29:45:d9:e8:3e:45:ec:
                    67:b5:d4:0b:0e:1d:82:8b:57:7d:0e:80:e5:b1:1b:
                    b0:14:50:bf:3d:c2:b4:b7:28:30:df:3e:28:be:09:
                    24:b1:ff:14:1f:13:61:92:b1:71:f5:e4:ea:a9:89:
                    c1:da:b4:da:48:bd:2b:f6:4d:7b:a4:a7:f0:82:24:
                    d9:3d:22:6d:94:96:cd:f2:54:29:47:cc:71:b1:91:
                    be:9f:7b:61:a0:6e:91:74:b7:a1:2e:66:8f:52:45:
                    a7:5d:ca:72:c1:d5:72:07:78:d1:44:76:3c:f7:d8:
                    70:91:93:e5:04:a7:88:66:5b:f0:74:2a:6e:8b:f4:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:85:5F:9F:28:82:88:7B:EF:5F:31:15:C6:A9:AA:B5:D6:08:2B:1D
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e382e302f32342d3234203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:61:94:6d:4a:60:c8:40:0f:07:dd:70:6f:6d:03:90:aa:
         15:12:e3:3b:26:83:6b:21:d8:73:c4:99:9f:19:ee:3e:04:8f:
         4e:5f:ac:84:f8:e4:6e:57:9a:3f:c9:fc:91:45:72:45:34:df:
         e6:c0:0f:63:fe:1d:15:a1:5a:c0:3d:7c:3f:92:f5:15:54:8a:
         95:f8:a3:95:90:3f:04:13:c3:c5:36:9d:fd:cc:48:5b:04:10:
         e2:4e:a9:b5:27:37:53:b5:ed:37:0a:03:01:d3:ee:e7:69:6a:
         73:37:ed:f1:9b:87:00:2b:e1:d5:0e:96:47:8c:41:b3:2d:69:
         98:f6:d0:95:91:89:44:dd:42:04:28:2e:28:ce:e7:51:0c:56:
         54:89:34:aa:1a:79:47:79:86:22:bc:2f:86:51:c3:43:3e:04:
         0e:b5:95:2f:78:f9:30:54:c3:98:88:39:15:ed:a4:aa:92:ff:
         75:34:7c:bd:bb:f3:5b:d2:8c:5c:23:dd:87:f3:07:7c:96:c3:
         c9:63:ea:b7:16:26:96:a2:c5:dd:80:69:87:32:2b:07:e3:f7:
         94:38:05:ee:d3:78:d7:58:11:6d:b5:27:ce:75:26:09:82:41:
         78:c0:d8:65:0d:29:27:67:92:0a:56:80:64:05:d4:22:df:19:
         ed:7c:c6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:11 2025 by rpki-client on console.sobornost.net