Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3132382e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3132382e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          A5FQmnfziNWAIItJJ90ekKKSj3dFA16Gg4pd0/azuxU=
Subject key identifier:   18:DF:28:57:24:3D:28:49:F8:2B:4C:53:3A:8F:87:CF:C4:D8:FD:28
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       5A0113F3F9C4061F2EFAB13CD92339588B7F8CA4
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3132382e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 16 Apr 2025 14:25:42 +0000
ROA not before:           Wed 16 Apr 2025 14:20:42 +0000
ROA not after:            Wed 15 Apr 2026 14:25:42 +0000
asID:                     262424
IP address blocks:        177.44.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:01:13:f3:f9:c4:06:1f:2e:fa:b1:3c:d9:23:39:58:8b:7f:8c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: Apr 16 14:20:42 2025 GMT
            Not After : Apr 15 14:25:42 2026 GMT
        Subject: CN=18DF2857243D2849F82B4C533A8F87CFC4D8FD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:fe:eb:66:8f:4e:20:b5:e4:4c:05:40:a6:
                    ef:00:2c:25:a2:6a:d3:7b:d4:0d:03:1f:ab:ec:04:
                    ce:bd:d4:da:46:7c:89:bc:26:26:d7:51:c1:ed:37:
                    2c:20:cd:43:fa:10:0e:d8:1e:5a:8c:56:7e:37:eb:
                    41:bd:14:ea:3a:ef:17:83:5b:50:c5:a3:12:de:f9:
                    4d:88:69:f1:bb:a2:c8:a8:66:3f:15:38:e1:8e:ee:
                    5a:8e:c7:3b:22:b0:1b:c1:35:8a:e8:50:c6:21:ce:
                    74:1c:0d:e9:04:6d:c3:8e:bb:49:5d:3c:a4:18:91:
                    37:6b:9b:df:66:d7:dd:7d:91:7e:e1:08:54:dd:e2:
                    5b:d2:96:0c:d9:bc:a6:aa:ba:4d:eb:a2:57:72:f2:
                    f7:c9:38:8e:dc:19:90:73:24:01:e6:03:c6:4c:61:
                    63:f6:4c:ce:b5:c5:72:30:09:a0:ec:54:cd:48:de:
                    be:a2:9d:81:d3:c6:a6:61:41:b5:5b:46:f6:e7:ea:
                    af:f3:c2:cf:79:27:66:8f:6a:0e:95:39:65:7b:f5:
                    89:9c:2a:50:14:83:8b:d6:3b:cd:1c:15:41:12:a5:
                    00:0a:8a:a9:37:b0:c9:fd:84:58:d6:da:42:7f:fd:
                    9f:a4:1f:55:13:5f:a3:8d:4a:ec:08:81:8a:ba:63:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DF:28:57:24:3D:28:49:F8:2B:4C:53:3A:8F:87:CF:C4:D8:FD:28
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3132382e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:71:b9:87:ba:22:48:ec:7f:db:b9:7b:ce:07:ff:45:91:2c:
         60:f5:e6:12:b0:8a:23:35:7e:58:46:b2:3c:ca:a7:f7:94:d7:
         af:a5:76:1e:02:8e:4e:55:75:5c:2e:99:e6:8f:37:bd:79:8f:
         10:fc:16:25:79:e0:54:a9:b4:5f:c0:ce:f4:19:d0:80:b1:f1:
         d9:90:34:40:d7:48:ad:80:ac:72:c1:f5:3d:39:8d:3c:06:16:
         1e:b4:6b:cb:01:54:ca:53:db:5f:90:81:47:7b:8c:d5:04:4b:
         e5:67:4c:8f:5b:2c:6c:38:8f:83:fa:a3:57:f2:d6:2c:65:d4:
         c3:37:7f:44:10:95:5d:31:e8:c4:c6:43:95:7e:4c:18:8c:f4:
         81:6f:7f:6c:57:38:6f:56:38:ea:65:ea:7e:10:37:16:b9:60:
         2c:5b:05:5a:bd:e5:80:a3:08:82:0f:4a:37:eb:a5:2f:de:c6:
         27:14:9e:cb:2b:be:0d:7e:f4:b3:57:d7:49:81:39:3b:53:84:
         71:c1:c2:63:c2:0f:63:2c:e0:c2:86:91:42:d1:5c:e2:5b:4f:
         e7:d2:f9:76:2a:c2:db:6e:79:d3:55:28:eb:1b:4a:76:9f:5b:
         1c:7c:98:35:2f:a8:dc:ab:fd:52:93:f8:8c:d1:11:df:71:4e:
         1e:df:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:56 2025 by rpki-client on console.sobornost.net