Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3137302e3135302e3137322e302f32322d3332203d3e203631373133.roa
File:                     3137302e3135302e3137322e302f32322d3332203d3e203631373133.roa (raw, json)
Hash identifier:          TBV1eaq54QBUGahFns1lxnwLF9P0aZebRKGXhu210sg=
Subject key identifier:   36:E0:D6:BA:B6:7F:6A:2E:27:D8:2E:83:E3:F3:7B:60:5F:C8:4F:63
Certificate issuer:       /CN=05820AE98D024F672790ED727F0660C773FF956B
Certificate serial:       73BD8DD277DCBFFC43B3EC44AD2C3AAD55424D0A
Authority key identifier: 05:82:0A:E9:8D:02:4F:67:27:90:ED:72:7F:06:60:C7:73:FF:95:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05820AE98D024F672790ED727F0660C773FF956B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3137302e3135302e3137322e302f32322d3332203d3e203631373133.roa
Signing time:             Thu 10 Apr 2025 20:43:43 +0000
ROA not before:           Thu 10 Apr 2025 20:38:43 +0000
ROA not after:            Thu 09 Apr 2026 20:43:43 +0000
asID:                     61713
IP address blocks:        170.150.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/05820AE98D024F672790ED727F0660C773FF956B.crl
                          rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/05820AE98D024F672790ED727F0660C773FF956B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05820AE98D024F672790ED727F0660C773FF956B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bd:8d:d2:77:dc:bf:fc:43:b3:ec:44:ad:2c:3a:ad:55:42:4d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820AE98D024F672790ED727F0660C773FF956B
        Validity
            Not Before: Apr 10 20:38:43 2025 GMT
            Not After : Apr  9 20:43:43 2026 GMT
        Subject: CN=36E0D6BAB67F6A2E27D82E83E3F37B605FC84F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:35:8a:23:e0:cd:44:58:b3:c7:80:d0:a5:
                    7c:70:48:a4:3f:f9:8c:86:c9:3d:76:01:a7:3d:f5:
                    9f:34:0c:5d:b2:71:9f:77:7d:ce:6c:a1:e5:b0:f3:
                    c5:cc:95:08:36:d6:5e:be:39:9f:08:76:c8:06:c0:
                    68:e6:be:a8:00:12:6f:a8:31:3d:ea:07:7f:b3:a3:
                    12:46:7a:1d:c4:c6:df:e9:6e:18:02:59:d8:3b:f6:
                    2a:2b:f4:97:1c:4c:48:14:78:5b:90:05:fb:60:e3:
                    39:bc:fe:f9:40:d3:f4:50:08:a1:87:7a:99:62:80:
                    b4:fa:4d:12:f5:dd:4f:f8:15:a6:26:12:48:bb:d8:
                    ec:12:fb:e4:d0:5f:4f:79:a4:4f:2d:53:e9:1d:3d:
                    f1:64:0b:85:f2:ca:82:c2:47:5b:2c:20:d4:a8:f6:
                    68:6e:58:58:0d:29:82:4a:e6:ab:15:13:bd:eb:74:
                    4e:ae:b6:b5:8f:e1:58:8b:64:ea:09:20:97:60:61:
                    d6:6c:25:b3:b2:28:15:2c:94:d5:03:4b:01:da:89:
                    95:e3:c0:77:b9:99:e4:b7:d7:57:f0:1c:c1:64:c7:
                    25:4d:6c:8d:50:52:b9:52:02:50:6a:0f:8f:5c:82:
                    77:93:cd:72:ad:61:8c:c6:e9:3a:17:cf:d2:6c:07:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E0:D6:BA:B6:7F:6A:2E:27:D8:2E:83:E3:F3:7B:60:5F:C8:4F:63
            X509v3 Authority Key Identifier:
                keyid:05:82:0A:E9:8D:02:4F:67:27:90:ED:72:7F:06:60:C7:73:FF:95:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/05820AE98D024F672790ED727F0660C773FF956B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05820AE98D024F672790ED727F0660C773FF956B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3137302e3135302e3137322e302f32322d3332203d3e203631373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:a3:3e:8a:33:87:b2:76:a0:11:c6:06:71:33:bd:e8:e8:f7:
         c6:0d:66:a0:38:05:9f:59:ac:b0:37:34:e6:8f:07:19:6f:f6:
         37:e1:cc:a6:c4:2b:3d:19:6b:41:10:b4:ab:53:1d:8f:c2:b5:
         53:a1:06:54:ea:5a:6a:75:f6:7f:f0:54:73:ed:60:ea:fd:a7:
         4b:07:a8:6c:ed:99:15:d9:92:4a:10:a7:14:5b:b5:04:70:86:
         7d:7e:91:54:74:a2:77:9a:11:ae:21:6c:a2:9b:a4:14:3c:fd:
         84:60:15:03:81:5b:42:e1:46:03:7d:8e:8c:f3:ea:9c:56:5c:
         fb:47:e9:a3:f8:ad:0b:4e:28:b6:39:6f:f0:d3:6e:80:3e:75:
         94:6d:8e:57:e3:88:1b:b8:c0:26:5f:91:c6:9f:c3:b5:76:79:
         66:e7:e5:18:c0:16:7f:71:b1:0c:b6:91:91:6d:0b:8b:07:ff:
         45:08:cb:85:95:32:4b:ef:6e:63:9e:58:8a:5e:d0:29:05:91:
         30:eb:62:4d:3c:16:a2:c8:5b:b8:c6:49:f7:04:5e:0a:24:65:
         7a:75:80:c1:cf:95:f5:75:e5:e1:58:f9:27:53:44:de:a3:53:
         a7:f5:70:67:20:c6:48:a6:e6:26:98:82:0b:e1:cd:d7:9c:06:
         3f:d1:89:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:05 2025 by rpki-client on console.sobornost.net