Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38362e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38362e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          TfORM0iyoxKLiL5TgqQhVALr+ySDSTcadlTeiY6niE0=
Subject key identifier:   80:E9:59:5B:0F:20:42:8D:3B:4E:49:0F:CE:FD:93:3C:C3:5B:E4:98
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       2EC50A8F1FD335FBF9BAE830FB0EAD5BC5DA8D6F
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38362e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 13:02:32 +0000
ROA not before:           Thu 05 Dec 2024 12:57:32 +0000
ROA not after:            Thu 04 Dec 2025 13:02:32 +0000
asID:                     53047
IP address blocks:        177.101.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 13:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c5:0a:8f:1f:d3:35:fb:f9:ba:e8:30:fb:0e:ad:5b:c5:da:8d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 12:57:32 2024 GMT
            Not After : Dec  4 13:02:32 2025 GMT
        Subject: CN=80E9595B0F20428D3B4E490FCEFD933CC35BE498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:ac:7b:98:36:7e:0b:58:ad:f9:c0:e8:7d:
                    7a:37:df:e2:a7:89:d5:8c:d5:19:18:71:dd:98:12:
                    3f:b6:42:65:44:b5:b2:55:21:44:1a:7a:8a:36:bd:
                    69:1b:f8:0f:ca:7b:b0:6f:73:e4:bd:46:8a:8d:cd:
                    ed:33:1c:b9:7f:a7:c5:61:2c:45:8d:5e:29:ec:9d:
                    7c:78:cf:2d:f1:3d:6d:a9:0d:1e:c5:c2:3b:ee:59:
                    0f:96:e3:08:c3:eb:97:66:50:48:fa:26:23:ab:5f:
                    e8:a1:53:1e:8a:0e:03:fe:84:1d:0c:96:c0:d6:f1:
                    66:52:d0:4a:73:27:df:69:61:01:44:00:2a:ca:db:
                    a2:51:ac:49:22:2c:f0:3e:3f:ad:a1:d7:2a:b7:02:
                    dd:a0:16:5d:4b:b7:e9:76:ff:cc:c9:f7:df:73:cf:
                    f6:6e:3b:4b:a2:67:fb:95:24:34:80:1d:99:e1:d4:
                    9a:99:d7:fc:d8:b2:af:d1:c1:a3:c4:5a:56:4e:90:
                    da:5b:0f:1c:00:5d:ea:2f:97:f1:84:2a:a5:55:ff:
                    6b:7f:98:c8:07:64:4b:09:fe:65:87:3c:e1:3e:59:
                    e9:bd:89:da:bc:98:69:41:fe:e0:42:35:c5:f9:c1:
                    4a:35:6c:b3:c5:19:44:88:80:b0:2a:90:58:ed:c7:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:59:5B:0F:20:42:8D:3B:4E:49:0F:CE:FD:93:3C:C3:5B:E4:98
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38362e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:42:67:0b:b3:8d:49:9d:c8:0b:e4:9f:4d:ed:37:1a:7d:ec:
         e7:c4:da:da:9a:f4:83:c0:0c:03:4f:99:5b:74:d6:ec:c5:56:
         e3:f1:92:1e:e1:ee:5d:fe:18:e0:82:5a:12:47:b5:ae:76:00:
         29:e5:7d:e3:12:a1:df:4f:1d:94:ea:e3:0b:b8:db:7b:74:d6:
         1e:0f:7c:63:5c:6f:89:f3:0b:20:8e:4f:7f:18:1c:07:05:61:
         8d:44:3d:5f:ff:0a:d6:3e:ad:8b:53:e5:f5:08:43:6e:66:41:
         3a:fb:df:27:ea:c2:7c:90:eb:75:0e:70:89:95:ca:ae:b0:1a:
         09:e0:b3:8e:ad:5c:ac:f0:03:ca:52:29:37:0e:76:ac:61:78:
         6c:00:71:b0:10:ed:df:0a:6f:a0:7b:14:3a:22:50:97:a0:14:
         9b:83:89:51:cb:1c:b9:4e:59:e4:4d:63:f8:98:49:10:26:2a:
         c8:7b:ea:73:64:1b:61:15:93:bf:37:af:5a:46:ed:64:f1:45:
         b0:7c:37:5b:38:75:83:b5:f6:89:db:4c:82:69:21:c1:ae:0a:
         b8:eb:32:e4:5a:79:84:49:f7:29:0a:f0:00:e3:4d:9d:5b:ca:
         80:9c:d4:aa:ca:d6:2a:9e:25:23:54:9b:ee:12:33:d4:a9:fc:
         94:9b:b6:df
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULsUKjx/TNfv5uugw+w6tW8XajW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNDEyMDUxMjU3MzJaFw0yNTEyMDQxMzAyMzJaMDMxMTAvBgNV
BAMTKDgwRTk1OTVCMEYyMDQyOEQzQjRFNDkwRkNFRkQ5MzNDQzM1QkU0OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Gqx7mDZ+C1it+cDofXo33+Kn
idWM1RkYcd2YEj+2QmVEtbJVIUQaeoo2vWkb+A/Ke7Bvc+S9RoqNze0zHLl/p8Vh
LEWNXinsnXx4zy3xPW2pDR7FwjvuWQ+W4wjD65dmUEj6JiOrX+ihUx6KDgP+hB0M
lsDW8WZS0EpzJ99pYQFEACrK26JRrEkiLPA+P62h1yq3At2gFl1Lt+l2/8zJ999z
z/ZuO0uiZ/uVJDSAHZnh1JqZ1/zYsq/RwaPEWlZOkNpbDxwAXeovl/GEKqVV/2t/
mMgHZEsJ/mWHPOE+Wem9idq8mGlB/uBCNcX5wUo1bLPFGUSIgLAqkFjtxyGLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgOlZWw8gQo07TkkPzv2TPMNb5JgwHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsWVWMA0GCSqGSIb3DQEBCwUAA4IBAQDZQmcLs41J
ncgL5J9N7TcafeznxNramvSDwAwDT5lbdNbsxVbj8ZIe4e5d/hjggloSR7WudgAp
5X3jEqHfTx2U6uMLuNt7dNYeD3xjXG+J8wsgjk9/GBwHBWGNRD1f/wrWPq2LU+X1
CENuZkE6+98n6sJ8kOt1DnCJlcqusBoJ4LOOrVys8APKUik3DnasYXhsAHGwEO3f
Cm+gexQ6IlCXoBSbg4lRyxy5TlnkTWP4mEkQJirIe+pzZBthFZO/N69aRu1k8UWw
fDdbOHWDtfaJ20yCaSHBrgq46zLkWnmESfcpCvAA402dW8qAnNSqytYqniUjVJvu
EjPUqfyUm7bf
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:14 2025 by rpki-client on console.sobornost.net