Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e362e302f32332d3234203d3e203631393030.roa
File:                     3137302e3234372e362e302f32332d3234203d3e203631393030.roa (raw, json)
Hash identifier:          kNBkg5g7RBRrML7PROOKpLBtHM1njEM/1AqkBXuv6xE=
Subject key identifier:   4D:AE:8A:72:FF:0B:CF:41:89:3F:E7:F7:39:66:44:FA:4C:86:15:72
Certificate issuer:       /CN=717D62DB604520975DE382D0D3273E1BDB591D67
Certificate serial:       1F4F729C56A7EA77FC1400F573F57F851CCC351A
Authority key identifier: 71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e362e302f32332d3234203d3e203631393030.roa
Signing time:             Wed 16 Apr 2025 18:34:49 +0000
ROA not before:           Wed 16 Apr 2025 18:29:49 +0000
ROA not after:            Wed 15 Apr 2026 18:34:49 +0000
asID:                     61900
IP address blocks:        170.247.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4f:72:9c:56:a7:ea:77:fc:14:00:f5:73:f5:7f:85:1c:cc:35:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717D62DB604520975DE382D0D3273E1BDB591D67
        Validity
            Not Before: Apr 16 18:29:49 2025 GMT
            Not After : Apr 15 18:34:49 2026 GMT
        Subject: CN=4DAE8A72FF0BCF41893FE7F7396644FA4C861572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:2c:b0:2f:c9:52:64:2d:3d:9c:d9:e3:78:
                    ab:fe:c3:33:8c:52:94:70:bd:e5:74:59:cb:b9:cd:
                    0f:b9:06:84:98:0a:2f:7e:c9:30:ed:f8:51:68:a9:
                    0e:35:93:94:27:9b:58:20:68:96:38:93:b0:4f:09:
                    42:02:bf:de:97:71:2e:6c:2e:31:e6:2b:c8:b8:44:
                    c3:9f:02:f5:53:2f:fc:ae:3a:0a:dc:0b:73:61:eb:
                    22:16:47:6b:b8:db:76:b1:d3:81:f0:97:9c:8e:76:
                    95:64:95:e3:b8:ef:ea:78:55:64:9b:b7:76:4c:90:
                    ce:33:79:5b:2b:da:e9:11:fa:54:c6:95:1f:3f:ae:
                    68:e8:cc:34:bc:01:51:50:63:c5:01:17:8e:6f:b5:
                    b5:15:70:85:c5:ed:98:f4:bc:d0:d3:bf:80:a6:3a:
                    e6:29:07:ef:b6:33:6c:a3:8b:17:32:3a:94:57:5f:
                    91:21:cf:57:c1:a0:c9:e6:5b:6a:f7:aa:b7:c3:10:
                    02:28:79:5f:86:98:86:64:69:03:b2:52:20:52:a0:
                    75:e0:06:d0:e8:76:0a:3d:f9:04:3e:73:95:1a:fa:
                    43:46:12:c2:0a:c9:37:8e:e7:f0:ef:e2:ce:f9:df:
                    0a:1f:5c:04:4a:5e:60:7f:14:71:5e:30:78:15:32:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AE:8A:72:FF:0B:CF:41:89:3F:E7:F7:39:66:44:FA:4C:86:15:72
            X509v3 Authority Key Identifier:
                keyid:71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e362e302f32332d3234203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:b1:a3:9b:88:32:93:2c:c8:28:14:4a:bc:23:3b:01:1a:a3:
         56:0f:90:19:b3:46:06:c4:b7:f9:f6:bd:a3:a9:f4:b0:e4:2f:
         8f:c0:59:f7:25:f8:16:5a:03:cd:bf:a6:22:9e:c3:d1:89:16:
         86:87:06:8e:e4:3a:ef:4d:68:cb:88:8c:79:fa:fc:80:5e:6b:
         cb:b4:50:10:20:72:a4:75:f4:38:ee:5a:ec:fb:f0:b8:d4:92:
         4a:3d:79:fd:69:bf:49:b9:c9:f7:53:09:1d:f4:e0:01:e8:e8:
         6e:77:b5:bb:a9:a1:7b:76:70:f7:ba:7b:3b:78:74:d5:33:c9:
         36:5b:5d:d9:65:e0:b5:48:0e:bd:4a:5f:bc:26:05:3c:8d:52:
         ad:e3:05:0a:a2:6f:04:e3:b7:5c:5d:2e:4d:ab:ef:96:42:87:
         39:1b:f4:10:b7:62:be:e7:c2:c1:d3:1b:8f:ce:83:b9:a7:65:
         45:af:26:fc:fe:6d:f3:06:15:cc:95:4e:7f:8c:5d:b5:f2:4f:
         5f:7f:e0:1b:c0:fe:6f:53:ff:af:c6:83:82:d4:36:35:f6:d7:
         39:db:a1:0b:27:5d:1d:a6:db:dd:d0:b7:a3:8b:8c:8f:dc:bc:
         af:e7:b2:fb:a2:ac:2b:ce:63:4b:82:bc:cc:6c:68:0a:84:1f:
         c8:7c:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:37 2025 by rpki-client on console.sobornost.net