Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131372e302f32342d3234203d3e20323730353631.roa
File:                     3138392e38352e3131372e302f32342d3234203d3e20323730353631.roa (raw, json)
Hash identifier:          jlaCwVhvZl1bYcFhb1Lsdm6IOXhUSxAUUp8TF5LWhoQ=
Subject key identifier:   6E:5B:61:CD:11:63:32:32:87:E7:EE:AF:3E:0D:B3:42:88:CF:FD:28
Certificate issuer:       /CN=D76AC9525C9299F8D9F26853A5246419EB9913D9
Certificate serial:       2D0DA60622673D768C3AE28D888F3FAF8EFED879
Authority key identifier: D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131372e302f32342d3234203d3e20323730353631.roa
Signing time:             Thu 12 Dec 2024 01:44:22 +0000
ROA not before:           Thu 12 Dec 2024 01:39:22 +0000
ROA not after:            Thu 11 Dec 2025 01:44:22 +0000
asID:                     270561
IP address blocks:        189.85.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl
                          rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0d:a6:06:22:67:3d:76:8c:3a:e2:8d:88:8f:3f:af:8e:fe:d8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D76AC9525C9299F8D9F26853A5246419EB9913D9
        Validity
            Not Before: Dec 12 01:39:22 2024 GMT
            Not After : Dec 11 01:44:22 2025 GMT
        Subject: CN=6E5B61CD1163323287E7EEAF3E0DB34288CFFD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:aa:57:f7:5b:da:12:f9:e4:9f:1f:1c:a3:
                    a5:19:02:19:eb:77:9e:2e:9f:55:bb:45:9f:70:71:
                    6e:de:ad:39:c8:96:29:ff:08:ef:8d:5d:1d:bb:e5:
                    69:bb:28:cd:e0:ba:a9:25:0b:93:f3:c7:a6:ce:2b:
                    e9:e4:c9:2e:8c:78:a8:36:5d:4c:18:7d:7f:e0:42:
                    45:b0:6f:04:e9:b8:98:a7:96:32:70:5d:bf:65:02:
                    85:20:2a:58:75:ab:9e:ca:ab:c3:0a:a7:2d:b0:c0:
                    11:a8:e4:98:be:7e:dd:89:0e:bf:14:01:12:89:fe:
                    2e:db:ab:a3:30:fc:f9:b7:e7:2b:93:66:61:25:b4:
                    cc:2d:43:d1:7e:2f:ad:dd:8e:2c:cb:dd:30:cd:49:
                    82:2c:5c:8c:d4:d5:dc:ba:34:ce:2c:24:21:77:7f:
                    1e:0d:87:5f:27:9a:17:8b:fe:27:61:7e:a2:d9:6d:
                    72:63:62:25:d9:45:95:cd:9b:96:90:99:0e:e9:58:
                    51:93:c8:b2:c4:89:f1:96:35:72:64:52:f6:73:83:
                    a4:4b:0b:38:1a:11:d4:7a:4f:4c:2c:4d:98:4a:18:
                    14:78:92:a1:f3:7d:bb:a5:33:11:5b:36:79:54:16:
                    51:3e:6a:3b:ae:2b:8c:e5:50:4f:e2:73:a1:bb:37:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5B:61:CD:11:63:32:32:87:E7:EE:AF:3E:0D:B3:42:88:CF:FD:28
            X509v3 Authority Key Identifier:
                keyid:D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131372e302f32342d3234203d3e20323730353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:6f:f5:f8:c3:c8:05:3f:6e:5e:a0:67:06:67:ad:86:8d:59:
         cf:17:c4:d9:41:10:6a:0f:18:c9:0d:d7:00:64:63:27:3e:df:
         e7:7f:f1:52:69:ea:2c:27:38:03:8b:52:3c:94:fe:b9:e0:54:
         29:c4:f4:15:3c:40:9b:a3:94:ba:c2:8e:d9:92:85:b0:a2:49:
         3b:50:a1:5d:e7:b3:16:e7:e6:e1:40:40:a2:26:5e:17:50:05:
         70:ca:a6:2f:a3:1d:e0:58:38:83:c0:58:47:aa:68:aa:e6:5b:
         17:88:2d:f7:9a:c5:8b:8b:bf:de:38:15:62:5c:2c:c9:ac:4a:
         54:fa:c0:de:bb:cc:26:34:cd:6e:5b:86:8f:d5:33:6d:fb:78:
         bb:6f:b9:2c:3d:29:43:95:b2:92:24:63:d6:13:e0:7f:4f:10:
         85:f4:cf:17:6b:43:56:40:ac:da:ee:5d:da:5d:b5:1e:cd:2a:
         a0:ff:77:c7:d4:65:2e:e9:71:a8:ff:56:82:50:95:ff:f8:41:
         96:ba:0d:51:25:58:21:54:e6:26:01:08:dc:e2:59:ee:ff:d7:
         5d:81:46:0c:57:06:63:23:f5:ee:06:35:62:ed:01:07:6f:82:
         2d:5b:62:4b:80:3f:c2:21:18:f3:be:fe:0c:18:92:f8:5f:55:
         36:90:d2:de
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIULQ2mBiJnPXaMOuKNiI8/r47+2HkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlF
Qjk5MTNEOTAeFw0yNDEyMTIwMTM5MjJaFw0yNTEyMTEwMTQ0MjJaMDMxMTAvBgNV
BAMTKDZFNUI2MUNEMTE2MzMyMzI4N0U3RUVBRjNFMERCMzQyODhDRkZEMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBlqpX91vaEvnknx8co6UZAhnr
d54un1W7RZ9wcW7erTnIlin/CO+NXR275Wm7KM3guqklC5Pzx6bOK+nkyS6MeKg2
XUwYfX/gQkWwbwTpuJinljJwXb9lAoUgKlh1q57Kq8MKpy2wwBGo5Ji+ft2JDr8U
ARKJ/i7bq6Mw/Pm35yuTZmEltMwtQ9F+L63djizL3TDNSYIsXIzU1dy6NM4sJCF3
fx4Nh18nmheL/idhfqLZbXJjYiXZRZXNm5aQmQ7pWFGTyLLEifGWNXJkUvZzg6RL
CzgaEdR6T0wsTZhKGBR4kqHzfbulMxFbNnlUFlE+ajuuK4zlUE/ic6G7N9brAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUblthzRFjMjKH5+6vPg2zQojP/SgwHwYDVR0j
BBgwFoAU12rJUlySmfjZ8mhTpSRkGeuZE9kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SNUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtU
LzAvRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlFQjk5MTNEOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENzZBQzk1MjVDOTI5OUY4RDlG
MjY4NTNBNTI0NjQxOUVCOTkxM0Q5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
NUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtULzAvMzEz
ODM5MmUzODM1MmUzMTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAz
NTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC9VXUwDQYJKoZIhvcNAQELBQADggEBADRv9fjDyAU/
bl6gZwZnrYaNWc8XxNlBEGoPGMkN1wBkYyc+3+d/8VJp6iwnOAOLUjyU/rngVCnE
9BU8QJujlLrCjtmShbCiSTtQoV3nsxbn5uFAQKImXhdQBXDKpi+jHeBYOIPAWEeq
aKrmWxeILfeaxYuLv944FWJcLMmsSlT6wN67zCY0zW5bho/VM237eLtvuSw9KUOV
spIkY9YT4H9PEIX0zxdrQ1ZArNruXdpdtR7NKqD/d8fUZS7pcaj/VoJQlf/4QZa6
DVElWCFU5iYBCNziWe7/112BRgxXBmMj9e4GNWLtAQdvgi1bYkuAP8IhGPO+/gwY
kvhfVTaQ0t4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:32 2025 by rpki-client on console.sobornost.net