Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/3137392e36332e3135362e302f32322d3232203d3e20323731363032.roa
File:                     3137392e36332e3135362e302f32322d3232203d3e20323731363032.roa (raw, json)
Hash identifier:          exVVYc4sqAjFJMb7ce0Puw8rvY1tSXqK1uOEGxzbmNY=
Subject key identifier:   51:90:4C:C0:75:A6:91:CD:BD:0E:0A:9A:7C:CC:FA:EF:D9:D2:5D:D6
Certificate issuer:       /CN=7ADC4A0F30F84A13F06E94A86F034E04BF92B875
Certificate serial:       7C56FAC8C912F5BE0CE2286589C32AD5C8A5D79E
Authority key identifier: 7A:DC:4A:0F:30:F8:4A:13:F0:6E:94:A8:6F:03:4E:04:BF:92:B8:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/3137392e36332e3135362e302f32322d3232203d3e20323731363032.roa
Signing time:             Mon 31 Mar 2025 20:37:22 +0000
ROA not before:           Mon 31 Mar 2025 20:32:22 +0000
ROA not after:            Mon 30 Mar 2026 20:37:22 +0000
asID:                     271602
IP address blocks:        179.63.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl
                          rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:56:fa:c8:c9:12:f5:be:0c:e2:28:65:89:c3:2a:d5:c8:a5:d7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ADC4A0F30F84A13F06E94A86F034E04BF92B875
        Validity
            Not Before: Mar 31 20:32:22 2025 GMT
            Not After : Mar 30 20:37:22 2026 GMT
        Subject: CN=51904CC075A691CDBD0E0A9A7CCCFAEFD9D25DD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:b9:d1:5d:8a:cd:91:0f:35:5c:c6:ab:15:
                    26:42:09:cb:ca:7f:03:30:7f:28:cd:d9:b0:09:6a:
                    2e:60:09:54:a3:c3:9a:c6:66:3e:14:38:c9:5e:fc:
                    c6:f0:97:d0:9c:86:8f:d2:8b:1e:73:28:f6:5a:48:
                    35:c5:0d:e9:ab:3c:68:35:d8:b7:91:a2:60:c7:c0:
                    3e:59:f4:77:b8:f2:bd:f7:22:29:b6:10:96:dd:20:
                    be:7f:84:f7:a8:eb:8f:7c:60:b7:c8:17:cb:43:01:
                    3e:50:6a:c1:d9:11:e8:b4:b6:51:bc:b5:1e:10:64:
                    1d:8d:3a:4f:72:ad:89:70:23:e1:9c:4b:eb:34:04:
                    ad:87:82:eb:e0:19:0f:9a:45:6f:12:ca:70:98:5f:
                    07:3f:02:2b:e4:d0:2c:db:01:b6:3f:e6:ce:e8:c0:
                    a0:29:38:1b:67:7b:55:69:c2:2d:a5:41:56:df:f3:
                    ab:63:1c:36:24:e7:e5:01:ee:f9:c5:c6:3f:98:c3:
                    37:9a:8e:b1:26:28:b7:f8:51:97:31:c5:ae:87:c4:
                    cc:27:38:0b:93:e4:a5:97:1e:e6:b7:a6:8c:e2:84:
                    6e:6d:d0:97:65:71:07:cc:fd:3d:bb:ed:4e:a3:1d:
                    cd:be:9a:57:d8:c5:03:68:03:ac:09:24:5e:9d:b4:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:90:4C:C0:75:A6:91:CD:BD:0E:0A:9A:7C:CC:FA:EF:D9:D2:5D:D6
            X509v3 Authority Key Identifier:
                keyid:7A:DC:4A:0F:30:F8:4A:13:F0:6E:94:A8:6F:03:4E:04:BF:92:B8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/3137392e36332e3135362e302f32322d3232203d3e20323731363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:aa:50:75:24:62:6a:35:c0:ba:b7:b1:d7:50:d2:36:61:ad:
         27:c8:5e:4d:ac:7a:5d:7d:fb:5b:8e:56:97:f7:de:7f:68:79:
         d1:39:58:84:82:5a:cf:78:70:24:9a:03:1b:86:91:b5:cc:2a:
         e7:36:d4:7c:f8:cc:dd:65:b6:6d:73:5f:35:dc:63:fb:a6:6d:
         3e:9d:94:fc:cc:f9:08:51:9d:73:23:4b:7c:99:35:b5:70:09:
         18:8f:34:ad:84:80:ca:16:f1:5a:99:28:97:aa:26:2f:45:c8:
         46:42:fc:84:9b:91:c1:99:c5:4e:05:e5:bd:0c:cf:96:b2:7b:
         78:84:ce:57:0b:ff:6f:cc:77:fb:5f:d5:78:01:10:50:aa:1c:
         04:fc:f7:e1:a4:b1:b8:56:bc:3f:10:9b:ff:2a:a3:cb:78:8c:
         41:f1:71:e3:ef:f8:92:8e:3d:2a:69:6a:69:84:99:2b:56:b5:
         aa:fb:a1:70:02:fb:69:95:08:a7:e3:67:da:0b:53:ae:ca:5a:
         79:ec:43:c2:5a:60:50:66:c6:c6:72:1f:47:27:e9:3c:31:5e:
         d9:95:cc:38:a4:76:41:28:15:84:8b:16:f7:65:0e:b9:2e:cf:
         19:80:35:da:8f:1f:8c:a4:be:76:1e:92:ee:2f:6d:aa:75:94:
         e4:f0:1e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:29 2025 by rpki-client on console.sobornost.net