Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3230302e302f32312d3234203d3e20323635393131.roa
File:                     3138362e3235302e3230302e302f32312d3234203d3e20323635393131.roa (raw, json)
Hash identifier:          DRzLdHNzTHFIffvmUrSLkj3Ab/JAj2xAGeRb/7QJwvY=
Subject key identifier:   29:AF:5D:E7:5D:FE:86:80:88:40:65:22:B9:A8:29:07:4D:FB:67:8A
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       10972018926FD9EA1A2F771C0FDDE9EE576F1A83
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3230302e302f32312d3234203d3e20323635393131.roa
Signing time:             Mon 17 Feb 2025 16:03:01 +0000
ROA not before:           Mon 17 Feb 2025 15:58:01 +0000
ROA not after:            Mon 16 Feb 2026 16:03:01 +0000
asID:                     265911
IP address blocks:        186.250.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:97:20:18:92:6f:d9:ea:1a:2f:77:1c:0f:dd:e9:ee:57:6f:1a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Feb 17 15:58:01 2025 GMT
            Not After : Feb 16 16:03:01 2026 GMT
        Subject: CN=29AF5DE75DFE868088406522B9A829074DFB678A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:6f:a2:81:f6:d2:10:6f:3d:d2:75:aa:1c:
                    45:0d:32:df:ba:ae:5d:f8:a4:ab:42:79:d2:79:0b:
                    3f:ab:a5:f3:33:ce:1e:96:e8:d2:77:3d:5f:86:b9:
                    0e:a4:c0:c2:39:81:21:05:78:37:c5:50:fe:c4:96:
                    0e:c9:75:22:cb:e9:e3:6f:d2:b9:e8:f8:97:ec:4c:
                    85:45:72:d7:18:67:db:09:5b:7c:5f:69:9e:13:3f:
                    d4:cf:de:80:37:db:47:85:fb:a8:df:2a:98:56:1d:
                    df:84:d9:d9:cf:b1:3b:26:72:a7:13:56:cb:b2:19:
                    46:68:9e:9d:fc:92:c6:de:96:ea:90:a3:0c:43:38:
                    ff:2a:61:61:aa:b9:5e:da:a7:e5:98:1a:dc:1a:61:
                    7e:85:8e:59:32:16:1c:e8:23:3b:c7:4d:49:40:f4:
                    51:95:41:67:23:7c:ed:04:ba:b7:89:93:d6:9f:10:
                    55:3b:bb:3d:38:53:61:04:2c:e3:6d:c1:34:38:31:
                    b5:8d:24:5a:90:70:40:77:2a:b8:3e:3a:b3:c7:58:
                    d2:11:9e:a2:43:1d:37:e3:fb:1b:79:ef:59:f4:3b:
                    06:13:8e:99:2f:ab:b7:76:0a:66:2c:ac:8f:c0:71:
                    21:ee:91:cc:84:91:05:d2:bf:6c:33:89:6e:42:07:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AF:5D:E7:5D:FE:86:80:88:40:65:22:B9:A8:29:07:4D:FB:67:8A
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3230302e302f32312d3234203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:28:7f:fa:dd:4b:d2:0a:22:24:85:7f:90:13:ee:96:7a:f2:
         c0:87:2c:f8:de:32:aa:20:1f:5d:3b:fb:1d:7a:d8:c8:1a:75:
         01:f4:29:1b:dc:1f:9e:c7:26:04:0f:ad:bd:09:dc:8a:ea:96:
         98:fc:c6:6b:29:fc:7e:cc:11:e3:61:79:ab:f3:9a:2f:dd:1d:
         7d:23:29:8f:4b:70:15:7b:70:25:d7:72:3d:32:a7:9e:19:39:
         14:4e:89:ab:32:05:bc:0e:e1:5b:9f:5e:f0:8e:97:7c:a3:69:
         c1:e5:d5:bb:ef:c5:01:3c:d0:fb:29:e7:c1:23:26:c0:59:ad:
         1b:fa:58:aa:b8:0b:f1:7e:b1:1f:01:d3:d2:68:1c:81:4a:ce:
         f1:0b:b6:5b:8e:5d:db:cb:db:d6:7e:e5:f9:47:09:61:ad:17:
         26:f0:56:37:c0:21:14:e3:9e:f0:8f:98:59:6d:9d:73:93:fb:
         c1:33:7c:6b:db:03:52:2c:b2:70:7e:dc:90:47:4c:62:28:f9:
         51:4d:98:10:0d:01:9e:96:99:32:9c:e9:1a:f7:f0:48:a8:8e:
         78:a9:4a:c5:ef:b1:d9:15:3f:2e:9c:4c:b0:e9:58:7f:de:23:
         62:07:3c:5f:e2:06:64:7a:f1:d3:c0:51:f0:6c:f8:6a:b9:c4:
         f1:a8:5a:ac
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEJcgGJJv2eoaL3ccD93p7ldvGoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3
RTNDQ0UwNTAeFw0yNTAyMTcxNTU4MDFaFw0yNjAyMTYxNjAzMDFaMDMxMTAvBgNV
BAMTKDI5QUY1REU3NURGRTg2ODA4ODQwNjUyMkI5QTgyOTA3NERGQjY3OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxE2+igfbSEG890nWqHEUNMt+6
rl34pKtCedJ5Cz+rpfMzzh6W6NJ3PV+GuQ6kwMI5gSEFeDfFUP7Elg7JdSLL6eNv
0rno+JfsTIVFctcYZ9sJW3xfaZ4TP9TP3oA320eF+6jfKphWHd+E2dnPsTsmcqcT
VsuyGUZonp38ksbeluqQowxDOP8qYWGquV7ap+WYGtwaYX6FjlkyFhzoIzvHTUlA
9FGVQWcjfO0EureJk9afEFU7uz04U2EELONtwTQ4MbWNJFqQcEB3Krg+OrPHWNIR
nqJDHTfj+xt571n0OwYTjpkvq7d2CmYsrI/AcSHukcyEkQXSv2wziW5CB9FPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUKa9d513+hoCIQGUiuagpB037Z4owHwYDVR0j
BBgwFoAU5hFcSw3fNWbYfzeD3YcwSX48zgUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlh
LzEvRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3RTNDQ0UwNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjExNUM0QjBEREYzNTY2RDg3
RjM3ODNERDg3MzA0OTdFM0NDRTA1LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlhLzEvMzEz
ODM2MmUzMjM1MzAyZTMyMzAzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzYz
NTM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEA7r6yDANBgkqhkiG9w0BAQsFAAOCAQEAlSh/+t1L
0goiJIV/kBPulnrywIcs+N4yqiAfXTv7HXrYyBp1AfQpG9wfnscmBA+tvQnciuqW
mPzGayn8fswR42F5q/OaL90dfSMpj0twFXtwJddyPTKnnhk5FE6JqzIFvA7hW59e
8I6XfKNpweXVu+/FATzQ+ynnwSMmwFmtG/pYqrgL8X6xHwHT0mgcgUrO8Qu2W45d
28vb1n7l+UcJYa0XJvBWN8AhFOOe8I+YWW2dc5P7wTN8a9sDUiyycH7ckEdMYij5
UU2YEA0BnpaZMpzpGvfwSKiOeKlKxe+x2RU/LpxMsOlYf94jYgc8X+IGZHrx08BR
8Gz4arnE8aharA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:33 2025 by rpki-client on console.sobornost.net