Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134302e302f32332d3233203d3e20323632343234.roa
File:                     3137372e34342e3134302e302f32332d3233203d3e20323632343234.roa (raw, json)
Hash identifier:          S6Oms5nvn0GOBasOxjeKY6zDaO9LzLvv94Gxy09okfQ=
Subject key identifier:   E2:2A:71:EC:2B:AD:E8:10:1D:CA:09:65:62:C0:E5:FB:8D:37:E8:E6
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       68F188BDFE75AB8ADD39C6DC461A42BCAE0EBCE9
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134302e302f32332d3233203d3e20323632343234.roa
Signing time:             Wed 16 Apr 2025 14:25:42 +0000
ROA not before:           Wed 16 Apr 2025 14:20:42 +0000
ROA not after:            Wed 15 Apr 2026 14:25:42 +0000
asID:                     262424
IP address blocks:        177.44.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f1:88:bd:fe:75:ab:8a:dd:39:c6:dc:46:1a:42:bc:ae:0e:bc:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: Apr 16 14:20:42 2025 GMT
            Not After : Apr 15 14:25:42 2026 GMT
        Subject: CN=E22A71EC2BADE8101DCA096562C0E5FB8D37E8E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:4a:04:29:8f:36:d5:32:3c:e9:1d:a6:ae:
                    e7:6d:8d:e7:12:b2:c5:1f:67:e9:32:92:a0:4a:2e:
                    7e:aa:41:96:91:d1:4f:45:8f:47:82:f3:1a:b0:34:
                    19:a4:a5:cf:72:b1:af:22:dd:ab:6e:7b:c9:6f:31:
                    67:fb:b9:2a:f2:1f:d7:b8:06:f0:24:e6:5d:40:64:
                    ea:92:37:0a:1c:a9:92:e7:76:60:21:64:64:bd:ac:
                    07:d5:f6:5b:f6:4c:43:aa:fa:8c:b4:f6:9d:b7:8e:
                    eb:73:0c:d7:34:b4:a7:c8:36:0a:9f:3f:b9:0f:f8:
                    9c:ec:11:1d:00:cb:fd:f7:e3:03:bf:0f:07:ca:07:
                    44:52:e5:87:2c:77:23:5a:fa:3a:f5:a9:1d:8a:fa:
                    ef:a4:00:27:5b:9f:1b:cf:eb:e4:71:4e:08:60:3d:
                    d3:18:87:ba:55:19:7c:1e:e5:e5:4b:f7:37:15:20:
                    41:9c:80:a9:34:d6:8b:6f:1e:1a:c9:73:bc:26:96:
                    9a:b2:65:33:3a:f0:bf:d4:34:e7:28:35:73:c0:e4:
                    66:3a:47:cb:33:57:8c:0b:b9:fe:97:98:b3:04:cb:
                    8e:e0:d3:b5:e9:1b:b4:86:fa:8b:62:3d:e5:e5:db:
                    35:b7:52:8e:48:12:54:9c:b1:1b:89:dc:ed:8b:60:
                    4e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2A:71:EC:2B:AD:E8:10:1D:CA:09:65:62:C0:E5:FB:8D:37:E8:E6
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134302e302f32332d3233203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:88:7e:ad:05:5d:2d:37:ef:1f:7c:39:d9:d2:2c:09:fa:85:
         12:a9:12:43:e9:dc:11:36:1d:b5:23:1b:b5:48:a2:29:b9:b2:
         24:86:91:a7:d5:69:91:93:52:0d:ca:e1:c1:1f:a2:72:dd:ff:
         84:0f:0f:23:da:b2:dd:0b:da:68:db:a5:93:d5:2b:8d:a8:47:
         d3:2d:a3:1b:b1:5b:82:f8:9d:5b:f3:65:59:0f:be:1a:c1:5d:
         bb:6f:fe:2e:85:93:b1:65:d9:da:fc:d7:34:4d:ce:ba:87:d0:
         c2:01:76:ea:66:41:5a:ff:84:07:00:b7:0f:33:fc:27:3d:6c:
         00:c7:78:ea:b8:cb:38:ef:5d:46:cf:81:c8:66:c4:08:38:a4:
         e1:a2:7f:43:b3:d8:84:f9:0a:0f:f1:53:99:e6:cd:28:65:04:
         9a:6e:61:4f:cb:52:24:cb:76:ef:c6:89:6b:66:42:8b:3f:e7:
         8d:33:2c:89:f5:3c:d6:ff:21:8f:9a:d6:41:36:00:97:17:e5:
         fe:66:5f:78:9d:ee:33:66:59:4d:ba:5f:9a:1e:45:f0:dd:55:
         8b:45:de:9c:94:f0:82:68:bb:81:c4:47:84:d0:60:8e:0d:7b:
         ea:75:77:0a:0a:1a:fe:16:25:cb:b2:5a:ae:2b:d7:80:12:55:
         d2:e1:7e:36
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaPGIvf51q4rdOcbcRhpCvK4OvOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU5RUM1MzA5N0U3MjQ4QzQwOEMzRDFBNjQyMkRCODVC
QjQ0NzBBMzAeFw0yNTA0MTYxNDIwNDJaFw0yNjA0MTUxNDI1NDJaMDMxMTAvBgNV
BAMTKEUyMkE3MUVDMkJBREU4MTAxRENBMDk2NTYyQzBFNUZCOEQzN0U4RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfb0oEKY821TI86R2mrudtjecS
ssUfZ+kykqBKLn6qQZaR0U9Fj0eC8xqwNBmkpc9ysa8i3atue8lvMWf7uSryH9e4
BvAk5l1AZOqSNwocqZLndmAhZGS9rAfV9lv2TEOq+oy09p23jutzDNc0tKfINgqf
P7kP+JzsER0Ay/334wO/DwfKB0RS5YcsdyNa+jr1qR2K+u+kACdbnxvP6+RxTghg
PdMYh7pVGXwe5eVL9zcVIEGcgKk01otvHhrJc7wmlpqyZTM68L/UNOcoNXPA5GY6
R8szV4wLuf6XmLMEy47g07XpG7SG+otiPeXl2zW3Uo5IElScsRuJ3O2LYE4HAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4ipx7Cut6BAdygllYsDl+4036OYwHwYDVR0j
BBgwFoAUdZ7FMJfnJIxAjD0aZCLbhbtEcKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RGtxS3hlUzR2YXlyUnhwVlBpZm9jbVpWVnhuVnlSVWpGYXVOVlJU
QkIvMC83NTlFQzUzMDk3RTcyNDhDNDA4QzNEMUE2NDIyREI4NUJCNDQ3MEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1OUVDNTMwOTdFNzI0OEM0
MDhDM0QxQTY0MjJEQjg1QkI0NDcwQTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURrcUt4ZVM0dmF5clJ4cFZQaWZvY21aVlZ4blZ5UlVqRmF1TlZSVEJCLzAv
MzEzNzM3MmUzNDM0MmUzMTM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxLIwwDQYJKoZIhvcNAQELBQADggEBAEuIfq0F
XS037x98OdnSLAn6hRKpEkPp3BE2HbUjG7VIoim5siSGkafVaZGTUg3K4cEfonLd
/4QPDyPast0L2mjbpZPVK42oR9MtoxuxW4L4nVvzZVkPvhrBXbtv/i6Fk7Fl2dr8
1zRNzrqH0MIBdupmQVr/hAcAtw8z/Cc9bADHeOq4yzjvXUbPgchmxAg4pOGif0Oz
2IT5Cg/xU5nmzShlBJpuYU/LUiTLdu/GiWtmQos/540zLIn1PNb/IY+a1kE2AJcX
5f5mX3id7jNmWU26X5oeRfDdVYtF3pyU8IJou4HER4TQYI4Ne+p1dwoKGv4WJcuy
Wq4r14ASVdLhfjY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:56 2025 by rpki-client on console.sobornost.net