Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e392e302f32342d3234203d3e203533313536.roa
File:                     3138362e3231312e392e302f32342d3234203d3e203533313536.roa (raw, json)
Hash identifier:          X9aoXVOFEZ05HTP1e31DRSQqagv8uEBZiTMogsEcokY=
Subject key identifier:   44:44:7D:DF:F4:1B:82:0D:85:E8:FD:36:D5:DD:66:88:A6:3F:34:F5
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       1584BE3F8F14B9D4AA0B160C66DA6C4EDB81B371
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e392e302f32342d3234203d3e203533313536.roa
Signing time:             Fri 04 Apr 2025 11:45:24 +0000
ROA not before:           Fri 04 Apr 2025 11:40:24 +0000
ROA not after:            Fri 03 Apr 2026 11:45:24 +0000
asID:                     53156
IP address blocks:        186.211.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:84:be:3f:8f:14:b9:d4:aa:0b:16:0c:66:da:6c:4e:db:81:b3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  4 11:40:24 2025 GMT
            Not After : Apr  3 11:45:24 2026 GMT
        Subject: CN=44447DDFF41B820D85E8FD36D5DD6688A63F34F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:50:88:c7:16:02:67:c0:42:9e:6b:28:ec:
                    ff:73:a2:bf:6f:b7:8f:2d:72:8a:c4:d5:e8:9f:f4:
                    c9:5f:a2:1b:a8:7d:49:36:28:de:7e:d0:0a:f1:46:
                    c7:0c:d7:8f:ec:94:d4:85:63:ce:87:14:47:f5:15:
                    dc:23:0d:de:c8:cb:50:d9:24:f8:c0:8d:76:d8:4d:
                    01:38:2f:c9:30:3e:d1:62:d6:d9:25:fa:49:dd:15:
                    f3:7a:4f:a2:8f:49:41:3a:1c:fb:97:a6:d8:cb:05:
                    b8:48:e9:56:cf:7b:46:4b:6e:a2:1e:ec:49:d8:ce:
                    5b:07:f1:0b:b9:57:c6:6f:56:81:fe:de:8d:bc:d3:
                    a0:a0:93:32:19:4c:20:bf:90:34:4b:79:43:8a:a5:
                    f7:48:47:c1:19:e4:98:64:7a:d4:08:57:c8:90:00:
                    6d:e6:5f:2b:ff:cf:94:29:09:f4:98:10:58:88:cc:
                    8c:da:8c:5f:0f:16:45:be:9a:5b:ca:df:5c:d7:22:
                    2f:dc:6d:c8:55:47:a5:41:27:39:fb:dc:ac:65:af:
                    3b:a9:37:e3:2f:ea:42:b3:b3:2e:d1:1b:da:78:89:
                    13:62:29:dd:8e:c3:ca:f9:e7:f9:ed:7a:69:44:d7:
                    ac:59:a7:b7:c8:92:8e:7e:08:20:58:9a:10:32:79:
                    91:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:44:7D:DF:F4:1B:82:0D:85:E8:FD:36:D5:DD:66:88:A6:3F:34:F5
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e392e302f32342d3234203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:9b:67:4e:99:dc:07:b6:3a:11:8d:fe:99:49:98:9f:c7:12:
         3d:f8:3f:6b:a4:77:a7:01:bc:87:e7:15:23:87:50:7a:0d:65:
         7d:f3:e3:e8:c8:5b:23:f8:0f:76:ac:ef:dd:e9:19:03:5e:0c:
         04:64:4b:63:a0:0c:fc:88:4b:e7:16:42:36:0e:16:e4:0c:e6:
         60:9a:66:b0:69:67:8a:83:36:cd:69:67:08:29:5c:55:c4:8c:
         09:31:8a:48:42:8b:ef:9f:44:62:67:3e:2a:44:b6:44:b0:af:
         b8:00:c7:0a:2c:9b:75:37:49:20:dc:06:2d:17:88:2a:01:b9:
         60:d7:f2:94:f5:ed:f3:a4:e7:11:aa:3b:94:f3:85:b3:80:13:
         4a:43:05:c7:ab:08:9b:42:71:1b:27:37:74:57:4a:7c:50:ce:
         75:bf:65:b2:8f:8d:03:93:c8:fc:dc:12:54:a5:8f:ff:97:38:
         bf:d8:b2:a7:d7:3b:83:b8:83:e4:3f:8e:22:c5:89:3b:9b:8c:
         5c:10:98:33:34:bf:91:9a:57:d5:43:70:5e:33:30:42:17:14:
         1d:50:26:50:95:4e:5f:32:13:9c:f2:28:c1:d1:d7:53:eb:ab:
         5f:e8:e9:b8:d8:93:4e:be:d6:10:ab:ab:a5:ed:67:71:5b:1d:
         77:c2:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:16 2025 by rpki-client on console.sobornost.net