Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3230392e302f32342d3234203d3e203532383438.roa
File:                     3137372e38352e3230392e302f32342d3234203d3e203532383438.roa (raw, json)
Hash identifier:          +e4JE9WbQSTeKpKZM4B9htThLOM6QwAAvUGG04RlxEg=
Subject key identifier:   F6:E1:E9:C3:18:B4:D0:D7:5A:D8:D0:4B:71:92:FC:AF:1E:BF:2A:66
Certificate issuer:       /CN=99143CBAF11D170944D719FD796009BC38F9F201
Certificate serial:       4400BF77B178DC4256CF00023E90212FD23B0FB9
Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3230392e302f32342d3234203d3e203532383438.roa
Signing time:             Wed 23 Apr 2025 11:11:48 +0000
ROA not before:           Wed 23 Apr 2025 11:06:48 +0000
ROA not after:            Wed 22 Apr 2026 11:11:48 +0000
asID:                     52848
IP address blocks:        177.85.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl
                          rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:00:bf:77:b1:78:dc:42:56:cf:00:02:3e:90:21:2f:d2:3b:0f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201
        Validity
            Not Before: Apr 23 11:06:48 2025 GMT
            Not After : Apr 22 11:11:48 2026 GMT
        Subject: CN=F6E1E9C318B4D0D75AD8D04B7192FCAF1EBF2A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:d4:aa:f4:6e:aa:b0:d7:e2:ef:87:77:2b:
                    0e:a6:33:8f:f5:73:9d:67:53:2f:d0:34:ba:2d:c8:
                    1c:27:e2:77:33:1e:1c:27:2a:1e:7e:5f:70:a0:f6:
                    92:b3:6e:2d:27:4b:55:71:3d:ad:71:7e:de:56:c6:
                    ff:38:44:d6:c6:28:b0:a0:27:49:a2:37:14:d6:0f:
                    6a:f8:aa:c1:f5:78:34:e1:2a:0a:f2:cf:61:e5:a1:
                    e5:59:e5:ce:4d:03:4e:6a:10:72:85:7b:40:38:e7:
                    fa:d8:ee:0b:22:5e:26:6d:2e:f9:3a:8e:4c:f9:00:
                    2b:92:fd:d7:3c:9c:20:3e:4e:3c:7d:45:96:83:49:
                    e0:fd:11:46:3b:39:97:08:6d:b0:13:8c:e0:83:90:
                    42:bd:8d:24:d1:0d:e7:6c:32:21:73:d7:21:52:7b:
                    8a:19:23:ed:2a:36:4d:a8:0e:e3:39:fc:ca:f9:8b:
                    52:73:d3:00:05:1b:42:fe:8e:09:e1:e0:ab:a9:6f:
                    da:b2:2b:ff:9e:c2:7d:44:ec:d2:52:3b:38:2b:f4:
                    bd:16:aa:c6:6e:6e:58:00:42:e9:6a:7b:b0:78:42:
                    f0:89:05:25:e1:10:b7:c5:50:9d:a0:46:0c:8e:d2:
                    34:59:e5:9c:5c:72:f3:97:e7:1e:15:5e:c4:7f:25:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E1:E9:C3:18:B4:D0:D7:5A:D8:D0:4B:71:92:FC:AF:1E:BF:2A:66
            X509v3 Authority Key Identifier:
                keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3230392e302f32342d3234203d3e203532383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:72:e7:07:29:40:4f:a5:83:8b:49:c6:4c:f7:f7:e0:72:a3:
         74:e6:c4:1a:e3:ae:72:fc:30:79:68:68:65:02:a1:18:72:96:
         b2:28:95:a2:d4:c6:1c:00:08:d5:77:d9:b7:8e:ad:a7:91:92:
         30:94:b0:e5:4c:d1:75:1b:ca:e7:38:73:c4:d7:bd:8f:81:c7:
         17:74:c7:dc:1f:2d:99:7e:4f:e1:12:d1:c6:29:a6:7e:94:29:
         8a:53:33:5d:a6:44:9b:66:2a:ee:1d:97:ef:f8:bb:b8:63:f9:
         a6:27:69:bf:b7:ec:60:bb:5c:d6:67:26:e4:18:69:fa:df:71:
         b1:46:6f:58:21:f0:65:35:3f:92:7a:04:0e:0c:a6:04:bd:e4:
         b9:a7:43:77:22:33:91:a2:05:65:86:aa:44:6f:bd:c3:44:04:
         19:79:98:21:91:48:41:5f:1a:83:35:dc:55:c2:3f:d9:91:d4:
         56:3f:1a:5d:19:35:d8:c0:4b:53:bc:9f:56:9c:73:a6:82:44:
         c6:fc:62:7a:69:7e:26:52:04:2e:42:15:61:c7:d8:8d:ec:c3:
         e5:b8:51:7a:b6:57:0c:c3:88:db:f0:3e:dc:c1:1f:ac:82:62:
         cc:07:e7:33:cb:85:e8:2c:9e:8f:c6:d7:4e:7b:a3:fa:e7:84:
         a7:9f:a1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:53 2025 by rpki-client on console.sobornost.net