Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e33392e3136302e302f32312d3234203d3e203238353834.roa
File:                     3137372e33392e3136302e302f32312d3234203d3e203238353834.roa (raw, json)
Hash identifier:          w6OQo6nI2dUuOG9pFmBGTXYB6HQYNS9Nt183b3xjV28=
Subject key identifier:   8D:AF:5C:14:6C:28:EE:2A:07:0C:80:E8:C8:6E:FD:03:6F:4E:3F:C3
Certificate issuer:       /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial:       2993BF348D28F26123C6DD26A4D8B08FB24287D1
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e33392e3136302e302f32312d3234203d3e203238353834.roa
Signing time:             Tue 08 Apr 2025 19:20:09 +0000
ROA not before:           Tue 08 Apr 2025 19:15:09 +0000
ROA not after:            Tue 07 Apr 2026 19:20:09 +0000
asID:                     28584
IP address blocks:        177.39.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:93:bf:34:8d:28:f2:61:23:c6:dd:26:a4:d8:b0:8f:b2:42:87:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
        Validity
            Not Before: Apr  8 19:15:09 2025 GMT
            Not After : Apr  7 19:20:09 2026 GMT
        Subject: CN=8DAF5C146C28EE2A070C80E8C86EFD036F4E3FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:2a:f5:cd:0e:a7:45:1d:05:4b:eb:ba:79:
                    a3:28:64:b3:71:48:a9:7e:89:18:e3:9d:98:89:d7:
                    05:a1:96:9b:11:b4:c0:5f:4d:55:65:0e:08:ed:95:
                    51:65:21:61:2d:26:a4:80:95:93:e2:8a:a6:66:48:
                    47:2e:d4:a2:3a:8a:fd:6f:50:6c:13:7b:20:83:2b:
                    60:56:a1:e0:65:60:e9:a9:ca:5d:a9:a1:15:44:46:
                    4c:c5:1a:68:31:7c:7b:41:a8:68:a4:73:ae:e3:bd:
                    7f:fe:a3:be:2e:ab:e3:dd:27:67:0c:95:f7:77:54:
                    bb:9d:e9:c7:23:94:13:19:67:4f:51:7e:d8:4b:d0:
                    20:87:31:ab:64:76:7c:37:53:81:eb:31:4c:4a:8a:
                    cf:b9:a6:bf:69:3b:7f:ee:fe:8b:ef:bf:fb:52:8b:
                    3f:f9:42:b3:3f:1f:44:5c:96:52:de:1e:5b:7b:2b:
                    60:54:1a:79:30:d5:68:9c:39:d8:cc:d7:c7:7d:5b:
                    98:f3:7c:fc:c6:14:a1:73:56:b3:40:17:07:56:38:
                    67:7b:ff:87:1b:6a:c9:33:c2:44:3d:79:a2:1f:b6:
                    92:95:c3:d9:66:ca:4d:ab:9e:3d:7f:37:7c:f4:ba:
                    9a:00:3f:d6:36:be:4b:c3:74:94:5b:f6:b1:a0:94:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AF:5C:14:6C:28:EE:2A:07:0C:80:E8:C8:6E:FD:03:6F:4E:3F:C3
            X509v3 Authority Key Identifier:
                keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e33392e3136302e302f32312d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:f1:e1:8f:95:51:2e:06:05:8d:55:78:df:25:d4:c3:22:e1:
         f5:a9:e6:de:f9:ea:0d:d3:db:49:24:38:cd:d3:30:cb:36:3c:
         13:e1:2c:50:ab:8d:d9:0d:ec:9b:6b:cc:e6:3c:48:c3:b1:da:
         55:4a:82:fa:bd:2b:bd:74:49:ec:f8:df:1d:d0:53:96:1c:66:
         61:a7:64:d2:00:a3:7c:cc:dc:0f:8a:d6:29:40:eb:77:ba:4f:
         20:37:cc:21:0a:d8:44:35:b8:89:17:1b:e1:b3:7f:e7:02:8f:
         10:f5:14:4c:36:f2:ae:d9:4c:56:79:08:0d:fc:7e:88:73:26:
         f7:56:f1:0d:ef:5e:c3:77:3f:c8:85:15:f0:04:af:5b:df:6c:
         7b:8b:72:d0:f3:54:1f:b1:38:c7:c4:d2:12:15:64:06:ee:a3:
         3e:09:f5:ad:51:c6:17:5e:68:bc:68:ba:3c:8e:ec:76:da:67:
         03:2c:e5:ce:a4:d6:a9:67:e5:c4:59:b8:c1:89:d3:c1:35:4d:
         df:e8:03:de:a4:fe:d2:39:7f:f8:b4:d5:2a:65:6b:b6:5a:5f:
         40:0d:3a:71:a4:7f:60:5e:27:ab:4a:89:dc:14:9a:40:8a:1c:
         8f:af:39:ea:79:f6:c4:3f:f8:5f:40:67:65:0c:fc:fb:f3:1c:
         85:b4:89:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:53 2025 by rpki-client on console.sobornost.net