Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37332e302f32342d3234203d3e203532373636.roa
File:                     3137372e3132352e37332e302f32342d3234203d3e203532373636.roa (raw, json)
Hash identifier:          yHmJCMANwgyJZi7RpIORKezVofQsOnGYoQYEeBdFCP0=
Subject key identifier:   18:50:76:61:EB:E5:AF:F1:9A:CB:88:01:12:11:DC:4F:A7:DF:E5:FF
Certificate issuer:       /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE
Certificate serial:       62A8CD612A70FD9766749D3F1E49DB519B53F5EC
Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37332e302f32342d3234203d3e203532373636.roa
Signing time:             Fri 11 Apr 2025 14:03:21 +0000
ROA not before:           Fri 11 Apr 2025 13:58:21 +0000
ROA not after:            Fri 10 Apr 2026 14:03:21 +0000
asID:                     52766
IP address blocks:        177.125.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl
                          rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a8:cd:61:2a:70:fd:97:66:74:9d:3f:1e:49:db:51:9b:53:f5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE
        Validity
            Not Before: Apr 11 13:58:21 2025 GMT
            Not After : Apr 10 14:03:21 2026 GMT
        Subject: CN=18507661EBE5AFF19ACB88011211DC4FA7DFE5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:61:a2:cb:4a:4a:4e:97:89:37:0a:af:6d:
                    37:17:1d:ef:ec:d1:57:e5:e5:d6:59:bb:7d:f6:6d:
                    bf:b1:42:3b:2e:2a:af:54:20:4e:8f:d3:97:f8:ce:
                    6e:6e:e9:b8:8e:44:2f:ba:e5:40:ab:25:79:dd:92:
                    e3:32:0d:da:fa:ed:b1:b5:89:cc:ec:4f:e4:69:23:
                    24:ed:11:d6:2f:81:6a:e1:3a:5e:ec:3d:68:57:2f:
                    7f:a7:55:df:e2:a7:ab:a1:6a:e4:f7:b0:c8:a3:85:
                    9f:a3:cb:5d:59:30:f2:8e:ae:93:ff:14:ad:bb:aa:
                    46:60:ca:a9:ae:a4:25:21:e8:e2:0a:1b:a7:6c:e6:
                    0c:5a:91:08:56:b6:e8:e2:d8:d8:f3:83:0a:1d:c9:
                    f2:87:2d:0e:b7:0e:be:9a:ba:8b:9a:54:62:8b:c3:
                    48:08:72:8f:2f:a6:5c:1c:c1:27:1b:55:3e:97:71:
                    c3:3c:71:ae:ba:25:49:4b:22:7f:15:f1:56:3c:a3:
                    03:3e:d0:c5:da:51:64:b7:f9:f8:69:af:cd:d4:5e:
                    05:d2:8e:a1:c4:b1:47:a8:94:eb:31:9d:24:8c:13:
                    7d:be:62:cf:6c:9e:bf:df:1e:01:3a:fe:aa:54:dd:
                    3f:02:ad:7d:b4:11:e4:24:6c:a0:2b:9d:80:97:d0:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:50:76:61:EB:E5:AF:F1:9A:CB:88:01:12:11:DC:4F:A7:DF:E5:FF
            X509v3 Authority Key Identifier:
                keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37332e302f32342d3234203d3e203532373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:5b:89:32:d6:ac:5b:b2:54:26:ea:67:b0:16:d6:4c:0f:6c:
         9e:de:26:09:b3:22:7c:d3:3f:f0:98:86:4b:d7:1c:a4:29:85:
         7f:1f:57:6f:2a:e0:6c:66:9a:42:a6:19:0a:48:39:03:6e:d1:
         cd:89:c0:50:d2:27:70:51:7a:99:26:46:dd:56:85:2f:53:15:
         a7:8f:d9:31:28:68:31:69:2e:90:f5:ea:2d:54:f1:6e:5e:78:
         73:aa:a1:99:1e:5a:62:2c:ef:9a:47:28:0c:15:63:0b:c3:52:
         70:68:70:39:87:ce:dc:7a:5e:5d:b4:9f:cb:05:83:c0:6f:d0:
         dd:b7:f0:e5:fb:ff:1a:47:da:69:da:b9:a4:88:b0:97:28:1d:
         36:6f:bc:7b:e8:a0:f3:3d:da:4b:ab:4f:6a:e5:af:0a:d8:75:
         5d:71:0b:63:6d:32:5c:a6:27:bd:2c:23:07:82:17:00:98:f1:
         df:f1:be:46:63:aa:4f:0c:96:b2:0c:9f:97:84:e4:ad:1b:38:
         94:bf:c3:c5:7f:e2:85:ba:4f:a6:a7:ac:fb:3e:f3:3d:2e:7a:
         07:d1:b7:a1:d2:07:49:c0:3b:29:55:54:80:05:6f:8b:73:ef:
         5d:e1:07:dc:25:ba:b9:c2:b9:fb:47:18:3a:6f:22:69:9e:35:
         6d:73:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:53 2025 by rpki-client on console.sobornost.net