Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/3137392e36332e3135382e302f32342d3234203d3e20323731363032.roa
File:                     3137392e36332e3135382e302f32342d3234203d3e20323731363032.roa (raw, json)
Hash identifier:          WRNnja0HigoK+bnRugn6BDQySSrVTb47hKwfzv0MzeQ=
Subject key identifier:   40:D3:38:41:B2:E5:C3:BF:73:5E:3F:45:C4:D6:38:66:70:E4:66:66
Certificate issuer:       /CN=7ADC4A0F30F84A13F06E94A86F034E04BF92B875
Certificate serial:       4F3EF11F713C212D8822A03F2F0A076667B69D8A
Authority key identifier: 7A:DC:4A:0F:30:F8:4A:13:F0:6E:94:A8:6F:03:4E:04:BF:92:B8:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/3137392e36332e3135382e302f32342d3234203d3e20323731363032.roa
Signing time:             Mon 31 Mar 2025 20:37:22 +0000
ROA not before:           Mon 31 Mar 2025 20:32:22 +0000
ROA not after:            Mon 30 Mar 2026 20:37:22 +0000
asID:                     271602
IP address blocks:        179.63.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl
                          rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3e:f1:1f:71:3c:21:2d:88:22:a0:3f:2f:0a:07:66:67:b6:9d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ADC4A0F30F84A13F06E94A86F034E04BF92B875
        Validity
            Not Before: Mar 31 20:32:22 2025 GMT
            Not After : Mar 30 20:37:22 2026 GMT
        Subject: CN=40D33841B2E5C3BF735E3F45C4D6386670E46666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:45:eb:38:53:02:49:82:8a:d7:c2:2a:61:
                    08:30:49:ef:ea:4e:a3:ce:ce:70:3a:f0:1b:cf:75:
                    36:9e:54:c2:b1:53:a1:92:0d:87:53:b2:31:fc:ab:
                    e2:cb:05:72:b1:f7:08:4c:21:0d:b0:2e:1f:d7:61:
                    fe:61:d7:1c:9a:4d:94:1f:fa:4c:57:d4:77:00:45:
                    3b:90:55:c1:48:54:07:18:81:83:ce:db:1d:46:fa:
                    15:ea:55:35:e3:86:71:19:bd:63:12:a5:aa:8b:84:
                    f2:4e:1d:53:fe:a3:b3:1e:a7:b0:98:4c:38:ba:62:
                    ae:59:83:95:8b:c5:94:4b:33:6a:ec:1b:21:e3:0f:
                    0b:64:8f:29:3e:45:3f:77:18:71:dc:2a:94:c8:f5:
                    6d:67:70:32:bc:7e:14:7d:5e:16:d6:2d:42:c4:ec:
                    28:a0:61:14:37:5b:6e:7f:d0:63:e9:29:3c:36:d9:
                    3c:12:8d:86:50:9d:ba:14:c3:8b:1e:f1:99:5d:6f:
                    3d:13:7b:2f:61:8c:29:5e:92:6a:1a:2d:6e:b1:c5:
                    46:56:3e:c7:c9:43:c2:3d:5d:c7:2e:84:c5:60:55:
                    67:27:87:32:58:68:a5:3a:14:40:56:24:24:b1:20:
                    7b:e8:03:b7:24:36:c6:a6:ad:0e:71:99:44:b4:bb:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D3:38:41:B2:E5:C3:BF:73:5E:3F:45:C4:D6:38:66:70:E4:66:66
            X509v3 Authority Key Identifier:
                keyid:7A:DC:4A:0F:30:F8:4A:13:F0:6E:94:A8:6F:03:4E:04:BF:92:B8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/3137392e36332e3135382e302f32342d3234203d3e20323731363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:65:b6:e5:36:bf:5d:ff:0e:fb:12:8b:76:c9:25:a1:d8:c1:
         ce:d7:31:e9:bb:2b:44:df:8c:97:9a:e2:18:89:7a:a6:02:13:
         f4:2c:a2:63:c8:03:b9:d9:d7:aa:87:c0:80:52:27:d6:b5:d7:
         fc:1b:08:73:a9:75:d0:2e:ea:e8:cf:bc:48:4d:86:4f:7b:54:
         97:cf:9f:c5:fa:ad:12:99:f8:4b:bf:c8:1c:c5:56:63:b1:52:
         c0:77:d2:c9:52:4a:b8:18:d6:43:39:d5:b6:f1:2d:e8:30:f2:
         1f:ce:b2:d5:86:45:6a:f1:b8:20:e4:38:e7:de:55:18:d3:f9:
         00:5d:c3:b8:a2:55:66:3c:d6:46:87:9b:77:f7:46:35:36:95:
         41:5e:6a:f7:fe:2d:c9:ee:b4:e7:b4:c6:8c:52:15:cc:69:f5:
         e5:14:e3:be:69:7a:f5:d5:e6:a9:be:57:1b:75:d2:85:67:7a:
         5a:fb:2d:4c:6f:f7:fb:e5:e0:4b:34:29:da:14:4a:86:b7:a8:
         b3:ab:25:3b:1a:f3:00:7b:74:86:1c:05:f2:b1:db:e7:ef:f5:
         a2:f7:2c:1c:46:03:12:ed:bd:66:36:df:57:9e:b5:06:f3:36:
         c8:4b:6f:c8:5a:6e:e1:3f:4c:de:63:0b:f2:ce:fe:37:53:45:
         1a:d4:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:29 2025 by rpki-client on console.sobornost.net