Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133382e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133382e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          QhgkWc0d8n4+Dkqo6gYGDL8b4yapAkv+D2rLnrWTVbI=
Subject key identifier:   EB:89:D4:B3:95:30:60:22:3E:8B:91:28:50:43:21:96:2F:05:32:2D
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       75D992CC1A7AA64A7E959F5F10F33D3B1D2B32FB
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133382e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 16 Apr 2025 14:25:42 +0000
ROA not before:           Wed 16 Apr 2025 14:20:42 +0000
ROA not after:            Wed 15 Apr 2026 14:25:42 +0000
asID:                     262424
IP address blocks:        177.44.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d9:92:cc:1a:7a:a6:4a:7e:95:9f:5f:10:f3:3d:3b:1d:2b:32:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: Apr 16 14:20:42 2025 GMT
            Not After : Apr 15 14:25:42 2026 GMT
        Subject: CN=EB89D4B3953060223E8B9128504321962F05322D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:77:03:5f:c6:fd:19:cc:26:ee:50:e8:53:
                    b8:57:7d:48:a7:84:5a:5d:f5:34:56:ea:f3:28:40:
                    c7:52:c7:49:73:48:d3:58:88:ab:ca:1b:3b:ae:94:
                    fb:97:fc:e5:3f:21:0f:4e:17:28:09:ac:d0:5a:99:
                    c3:af:6a:69:f6:a5:eb:83:db:12:46:51:93:22:71:
                    54:95:98:36:e7:f7:4e:cc:1e:0c:b7:47:61:32:7d:
                    8b:b3:eb:90:f8:c8:3c:ce:24:67:ca:1b:02:f6:5a:
                    01:9e:03:5b:b2:40:df:34:48:e7:37:cc:6a:df:9e:
                    19:47:70:69:7f:42:6f:3e:af:6e:30:60:21:5f:09:
                    18:ec:66:28:f9:d8:bf:94:24:f9:73:2f:d4:8f:42:
                    f7:86:d7:85:1e:e5:7c:86:ee:9f:e2:e4:bd:84:45:
                    97:bd:e1:70:dc:47:d3:78:81:15:5c:d0:1e:68:87:
                    d6:61:63:36:e7:66:ce:30:79:45:c0:5f:5a:96:9e:
                    aa:7f:eb:90:09:f2:6c:c9:b9:68:a2:d1:b6:05:77:
                    31:a9:53:62:db:88:7b:1d:59:d1:ef:19:3f:9f:2a:
                    3f:a5:20:3b:7b:79:fd:cc:d5:41:a2:de:f7:98:63:
                    3b:80:a9:ca:6f:91:81:42:c3:aa:81:fb:cc:df:5c:
                    5f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:89:D4:B3:95:30:60:22:3E:8B:91:28:50:43:21:96:2F:05:32:2D
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133382e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:04:b8:6e:7c:73:d9:20:fb:7a:99:7a:2a:d2:b0:b2:de:8a:
         72:28:fc:52:00:72:79:33:4b:20:d4:3d:77:40:4b:9a:db:6c:
         8a:57:2d:a7:39:1c:6e:8b:0c:fe:98:13:5e:37:2b:82:b9:f3:
         d3:71:63:d0:8f:c5:75:5f:c2:2f:c9:e9:3d:45:11:cf:63:f7:
         60:0e:8d:41:90:0d:50:b7:c7:53:0d:31:4f:25:8e:28:ac:13:
         b4:39:d5:bd:a9:77:0f:b7:75:73:6b:df:55:89:c6:b5:7f:dd:
         e5:d4:2b:d5:ef:48:ed:9d:72:b3:01:4f:40:e6:ab:3f:06:8d:
         c0:5b:c4:de:2c:f3:d1:26:05:7b:a7:ea:52:3e:a8:31:40:da:
         cd:c2:00:d9:6a:f1:ad:e8:25:3c:e6:df:00:2e:31:aa:f2:16:
         78:97:76:b8:92:19:bc:1e:ae:f9:67:59:b5:97:ce:96:84:d8:
         99:a1:8e:76:a4:d9:7c:af:52:07:fa:a5:29:56:8a:19:2e:79:
         1b:4c:97:65:70:4e:98:8b:b2:44:00:fc:39:35:6d:e8:23:64:
         35:14:69:2b:17:63:e2:b0:bb:87:9e:88:c1:a2:5f:f6:d6:08:
         fe:6c:ee:86:98:54:e3:30:1f:e9:8f:f1:82:e4:eb:3b:b6:02:
         23:72:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:56 2025 by rpki-client on console.sobornost.net