Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/3230302e3138352e36342e302f31382d3234203d3e203136363835.roa
File:                     3230302e3138352e36342e302f31382d3234203d3e203136363835.roa (raw, json)
Hash identifier:          sBNMV1pa7dyz0Ih2frHep+1F6cgDeqZuMsZOY1jpIBo=
Subject key identifier:   DB:3F:D0:BF:4D:1E:26:C9:C9:B7:CC:CC:C9:44:B8:CA:15:8C:AF:F9
Certificate issuer:       /CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
Certificate serial:       61C78453C60D84D4759420630DA39E6A7D94C663
Authority key identifier: 6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/3230302e3138352e36342e302f31382d3234203d3e203136363835.roa
Signing time:             Wed 05 Mar 2025 23:18:47 +0000
ROA not before:           Wed 05 Mar 2025 23:13:47 +0000
ROA not after:            Wed 04 Mar 2026 23:18:47 +0000
asID:                     16685
IP address blocks:        200.185.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl
                          rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c7:84:53:c6:0d:84:d4:75:94:20:63:0d:a3:9e:6a:7d:94:c6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
        Validity
            Not Before: Mar  5 23:13:47 2025 GMT
            Not After : Mar  4 23:18:47 2026 GMT
        Subject: CN=DB3FD0BF4D1E26C9C9B7CCCCC944B8CA158CAFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:05:b3:3d:de:33:23:bb:e2:3a:e2:44:09:
                    4c:6b:31:be:38:00:46:a3:81:14:bb:93:7b:47:e8:
                    52:39:76:bc:93:13:ed:ac:b1:0b:e9:11:5c:79:4f:
                    55:dc:fa:e0:eb:7a:06:2b:44:52:fa:9a:04:20:55:
                    cb:a4:ec:5a:34:cd:6e:ab:7d:4e:09:9f:a7:66:48:
                    4c:98:e0:2f:19:74:7f:c8:27:34:08:68:98:3d:47:
                    07:5d:ac:3f:9d:ca:cb:9b:3b:3d:2e:fe:95:73:be:
                    9a:6e:b1:4d:5e:a3:45:a6:01:84:19:9d:80:26:ba:
                    fd:bf:b9:90:d8:47:0c:ea:80:ef:38:f3:18:33:7f:
                    b9:67:07:c9:72:1d:4b:57:c4:15:2f:62:c7:14:42:
                    20:da:ec:9e:e6:cd:1c:07:eb:d1:75:b1:d6:9f:3c:
                    ab:7d:05:40:07:d7:01:d9:55:a4:15:57:ae:97:f5:
                    d4:36:03:93:94:00:0b:53:b0:88:27:d6:22:9b:8b:
                    fb:92:fe:54:43:c6:fe:df:a1:a8:d0:40:86:3c:20:
                    02:8d:23:8e:6f:7c:35:45:9f:8c:25:1a:34:08:12:
                    e6:e8:52:c6:74:ae:42:69:45:5e:2f:d2:8f:29:17:
                    f1:0b:c5:91:53:fc:8d:80:8e:1b:e6:ee:de:3b:a8:
                    82:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3F:D0:BF:4D:1E:26:C9:C9:B7:CC:CC:C9:44:B8:CA:15:8C:AF:F9
            X509v3 Authority Key Identifier:
                keyid:6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/3230302e3138352e36342e302f31382d3234203d3e203136363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.185.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         40:fb:59:c6:5c:d2:98:45:50:32:df:5b:ab:d8:6d:31:a1:35:
         5d:4f:53:64:38:90:43:df:b4:d5:9f:c2:50:b1:a7:77:55:30:
         ab:d3:e5:a7:ab:96:28:05:45:5c:1d:8c:fd:07:01:d7:8c:5a:
         05:e7:b2:0a:f9:6a:a0:ae:97:37:10:86:7a:8a:4c:a7:6b:3b:
         99:ae:d7:cb:ed:4a:66:7c:d5:43:18:66:a8:ae:fa:37:f4:d4:
         fa:7a:35:92:6e:c2:c8:31:29:18:02:d5:8d:3a:2a:94:6d:f8:
         9f:bc:c7:0c:a7:aa:d0:ab:bf:ac:75:49:2f:f6:4b:0e:0c:0a:
         ec:db:98:a8:6a:76:1d:00:9a:c8:21:21:f4:d7:97:96:fa:ab:
         cd:2c:3a:69:db:96:03:18:52:6b:2c:84:d8:a1:cb:40:93:d0:
         4a:9d:bf:8c:60:e9:ea:85:f6:5c:18:da:9f:76:bf:3b:3b:e5:
         ba:d7:d9:2d:fd:ad:95:a9:ff:e5:52:eb:a8:8b:4a:02:e6:02:
         4b:2b:75:c2:fd:f6:b1:cf:bc:db:86:a2:b6:eb:c1:d9:63:d1:
         ac:10:bc:29:02:28:6c:68:ce:c8:93:f8:7c:42:3d:1c:d3:2a:
         b2:0d:9c:0e:95:f7:cc:ae:19:c6:91:4d:44:d3:59:8b:57:5e:
         29:82:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:50 2025 by rpki-client on console.sobornost.net