Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32322d3232203d3e203533303437.roa
File:                     3137372e3130312e39322e302f32322d3232203d3e203533303437.roa (raw, json)
Hash identifier:          QIk9Lv+/ZT2bMJO96//gvUPuOZ6d4aUGt44dS9D+5Zw=
Subject key identifier:   3B:E1:4F:A2:F8:56:F6:6F:3C:21:F0:8B:20:0B:00:43:C2:EF:85:D3
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       1D4C8A126F8419E24CEC2F0A9EC4C941A80E898D
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32322d3232203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 13:04:49 +0000
ROA not before:           Thu 05 Dec 2024 12:59:49 +0000
ROA not after:            Thu 04 Dec 2025 13:04:49 +0000
asID:                     53047
IP address blocks:        177.101.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4c:8a:12:6f:84:19:e2:4c:ec:2f:0a:9e:c4:c9:41:a8:0e:89:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 12:59:49 2024 GMT
            Not After : Dec  4 13:04:49 2025 GMT
        Subject: CN=3BE14FA2F856F66F3C21F08B200B0043C2EF85D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:ac:66:5c:1a:21:30:ad:1a:26:f4:64:27:
                    e2:a6:d8:87:5c:81:f8:79:6c:ff:cb:12:ec:27:6d:
                    c8:c5:4d:25:69:27:a2:cb:ea:f0:9d:d0:5a:c1:93:
                    fb:a9:07:1d:6e:7a:b0:37:4a:6c:6f:ba:34:d2:db:
                    56:51:e0:93:24:22:a9:d3:74:4f:92:c0:a9:70:ab:
                    12:0a:cf:26:ed:cb:be:53:4e:87:b5:f4:88:46:43:
                    c4:bb:60:f8:b6:c8:eb:4b:1b:07:ab:15:4c:03:5d:
                    aa:a5:dc:2d:9f:b3:68:b9:bf:23:4a:b0:d9:42:26:
                    c3:44:de:25:9c:3e:39:f2:5c:28:13:6d:7f:69:6b:
                    9d:79:65:cb:0d:d9:d1:a7:66:33:01:ab:b3:9f:a2:
                    4a:66:46:de:c4:46:21:d2:d8:8c:ff:c0:1a:33:e2:
                    d5:d7:e9:e6:3c:9a:8d:94:09:a7:79:74:99:54:da:
                    f8:b7:e2:1f:b1:5f:f2:de:25:bc:93:42:be:9f:6f:
                    9e:ff:ae:38:3c:23:11:cb:9c:97:4a:fa:5a:ba:62:
                    7f:28:eb:0e:8c:d4:41:56:62:f9:5c:3c:32:0b:07:
                    de:d8:e7:e2:f2:ac:7a:5d:6e:4b:ba:c3:f4:fa:09:
                    63:6c:28:eb:8e:b7:61:31:8e:d1:00:e1:9b:85:d8:
                    f2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E1:4F:A2:F8:56:F6:6F:3C:21:F0:8B:20:0B:00:43:C2:EF:85:D3
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32322d3232203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:56:fe:72:15:6c:e7:10:b2:54:4c:c6:32:24:c2:73:54:fd:
         1b:ac:9f:ca:94:33:02:f4:b6:d7:aa:81:10:37:89:f9:44:db:
         5b:58:8c:76:0d:c4:8a:bd:bf:87:01:61:7d:b9:c8:93:0c:10:
         92:73:18:5a:b1:96:03:37:af:4b:69:cf:97:6b:bc:5a:fd:23:
         82:06:06:27:e5:fb:8e:fa:26:5a:86:47:31:8a:70:95:45:dd:
         0f:14:63:d0:25:3a:92:b3:54:97:97:a8:e8:f4:f7:fd:4f:8b:
         c5:ba:bd:e7:e6:46:2a:07:d2:28:cd:03:2b:04:78:03:1f:55:
         69:65:69:41:41:c4:36:0f:b4:69:b7:d6:8a:79:db:89:ea:92:
         33:2c:5c:e0:83:3d:37:e8:15:9c:f7:c3:66:8f:87:75:e5:71:
         dd:27:f4:4a:d8:8e:6b:dd:b5:af:93:81:8c:ae:8d:41:26:f0:
         81:6f:ca:a0:b9:48:f4:05:9b:f5:10:26:e7:0c:ce:4b:55:ee:
         0f:1f:34:83:d0:de:09:94:8e:a7:a3:1c:79:5a:a0:1d:7b:da:
         a3:2b:ec:66:5c:67:09:53:86:61:75:49:43:bf:20:c1:47:7e:
         fc:ae:5c:dd:a9:0a:d9:f1:d1:51:21:ca:11:78:4d:af:8a:53:
         28:c2:3d:c1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHUyKEm+EGeJM7C8KnsTJQagOiY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNDEyMDUxMjU5NDlaFw0yNTEyMDQxMzA0NDlaMDMxMTAvBgNV
BAMTKDNCRTE0RkEyRjg1NkY2NkYzQzIxRjA4QjIwMEIwMDQzQzJFRjg1RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRqxmXBohMK0aJvRkJ+Km2Idc
gfh5bP/LEuwnbcjFTSVpJ6LL6vCd0FrBk/upBx1uerA3SmxvujTS21ZR4JMkIqnT
dE+SwKlwqxIKzybty75TToe19IhGQ8S7YPi2yOtLGwerFUwDXaql3C2fs2i5vyNK
sNlCJsNE3iWcPjnyXCgTbX9pa515ZcsN2dGnZjMBq7OfokpmRt7ERiHS2Iz/wBoz
4tXX6eY8mo2UCad5dJlU2vi34h+xX/LeJbyTQr6fb57/rjg8IxHLnJdK+lq6Yn8o
6w6M1EFWYvlcPDILB97Y5+LyrHpdbku6w/T6CWNsKOuOt2ExjtEA4ZuF2PJnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUO+FPovhW9m88IfCLIAsAQ8LvhdMwHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsWVcMA0GCSqGSIb3DQEBCwUAA4IBAQBNVv5yFWzn
ELJUTMYyJMJzVP0brJ/KlDMC9LbXqoEQN4n5RNtbWIx2DcSKvb+HAWF9uciTDBCS
cxhasZYDN69Lac+Xa7xa/SOCBgYn5fuO+iZahkcxinCVRd0PFGPQJTqSs1SXl6jo
9Pf9T4vFur3n5kYqB9IozQMrBHgDH1VpZWlBQcQ2D7Rpt9aKeduJ6pIzLFzggz03
6BWc98Nmj4d15XHdJ/RK2I5r3bWvk4GMro1BJvCBb8qguUj0BZv1ECbnDM5LVe4P
HzSD0N4JlI6noxx5WqAde9qjK+xmXGcJU4ZhdUlDvyDBR378rlzdqQrZ8dFRIcoR
eE2vilMowj3B
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:03 2025 by rpki-client on console.sobornost.net