Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132322e302f32332d3233203d3e203532383532.roa
File:                     3137372e38362e3132322e302f32332d3233203d3e203532383532.roa (raw, json)
Hash identifier:          xKIUrVIggq7PIZczk4fzn7vaaRw+Y/bqcfY/oeOEoz0=
Subject key identifier:   F6:EB:43:BF:E3:B2:E1:03:D5:D9:FE:2C:79:BF:42:9B:AA:42:71:A8
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       176F6D90D76999515FAD879179E2C7863DECC3BB
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132322e302f32332d3233203d3e203532383532.roa
Signing time:             Wed 05 Mar 2025 20:25:21 +0000
ROA not before:           Wed 05 Mar 2025 20:20:21 +0000
ROA not after:            Wed 04 Mar 2026 20:25:21 +0000
asID:                     52852
IP address blocks:        177.86.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 23:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6f:6d:90:d7:69:99:51:5f:ad:87:91:79:e2:c7:86:3d:ec:c3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Mar  5 20:20:21 2025 GMT
            Not After : Mar  4 20:25:21 2026 GMT
        Subject: CN=F6EB43BFE3B2E103D5D9FE2C79BF429BAA4271A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:3d:70:4e:a2:fc:1b:32:8c:c1:c9:75:c4:
                    0f:f5:ae:f8:e1:cd:f6:02:6c:b8:ee:bb:5b:31:3b:
                    12:63:af:57:3c:94:8e:ca:9b:54:58:e3:be:7c:67:
                    31:12:2a:0c:35:a8:1e:97:94:90:f1:0d:44:0f:33:
                    d7:d1:5c:66:9c:0f:7b:90:34:bb:1e:63:b0:9e:50:
                    42:69:d5:db:a8:57:64:be:17:6f:81:99:6e:da:cc:
                    02:e3:ee:0e:e4:c0:f2:1d:f2:e1:43:1a:e5:bd:00:
                    d3:66:77:75:63:bb:c7:fa:ce:e9:ed:a4:08:30:75:
                    f3:eb:f5:40:f5:77:40:a2:b7:ca:ca:bf:cb:b9:43:
                    77:2b:a5:46:c1:45:8a:87:68:fe:b3:cc:fd:4b:38:
                    df:34:a8:50:af:8e:cf:57:02:73:e5:9b:8e:a6:71:
                    a5:9e:86:db:7e:aa:ce:ad:98:b0:a4:9a:6a:06:c6:
                    27:0f:ef:34:89:f9:4d:c4:58:11:17:cd:52:e6:f8:
                    c7:cd:87:18:8e:43:f0:b6:7c:3e:d1:e7:d9:78:15:
                    06:c9:b9:fc:a1:43:1a:d5:d5:9d:21:33:72:cc:09:
                    f0:eb:7f:a1:c5:e4:26:d7:95:53:bc:91:5a:27:6c:
                    ad:a4:91:8a:b1:97:bb:04:19:9d:85:a9:83:d6:0a:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EB:43:BF:E3:B2:E1:03:D5:D9:FE:2C:79:BF:42:9B:AA:42:71:A8
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132322e302f32332d3233203d3e203532383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:46:53:4a:bb:14:ab:14:61:1a:0e:a4:f3:66:a1:3d:78:3f:
         86:db:42:34:15:a3:2a:93:47:2f:ff:73:5d:ea:e6:90:51:05:
         8c:e7:fb:8e:0e:7c:75:35:69:d3:8f:64:2b:06:09:64:79:bd:
         ea:63:40:a7:0f:20:16:5d:d2:eb:0b:67:0b:2f:8a:3a:41:e4:
         22:45:0d:07:4d:88:64:c1:4b:2f:ea:56:c8:58:5b:34:c9:86:
         9d:bc:4c:b7:c7:9d:e6:d8:79:20:b2:bc:cc:2c:a5:56:7e:9a:
         37:41:a5:cf:3e:43:e1:94:3e:4d:1a:04:db:3c:a3:dd:64:8b:
         fa:25:e6:4d:95:90:d8:95:a9:ca:0b:45:bb:19:ac:76:5a:97:
         a6:07:43:1d:d0:f1:9d:6c:75:b7:9c:6e:9c:f2:ab:01:31:1e:
         7c:3f:43:65:d4:72:70:f0:97:54:1d:eb:cc:11:f6:7b:37:50:
         d9:33:69:53:9c:cb:af:c7:e3:eb:20:29:59:4e:e4:3d:8c:42:
         3d:1b:57:10:a7:1a:25:f2:b3:b5:d3:53:f3:d8:b0:b5:c4:e4:
         89:85:02:08:f2:4a:f1:01:a9:96:18:97:48:2e:be:5a:51:ae:
         dc:fd:e1:09:f0:c6:01:64:14:93:43:18:53:45:76:25:d3:47:
         d9:52:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:35 2025 by rpki-client on console.sobornost.net