Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39322e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          4Z9f+XGZ3XlZZyEUGVAvEAJnSts6T5gcGvFH0l9nlFQ=
Subject key identifier:   8A:E0:15:B9:0A:E0:D6:CD:63:F6:1A:4F:33:4F:D3:3F:8E:2F:44:43
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       2D836F34990D987F4E1479F689DDF4E114327728
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 13:05:21 +0000
ROA not before:           Thu 05 Dec 2024 13:00:21 +0000
ROA not after:            Thu 04 Dec 2025 13:05:21 +0000
asID:                     53047
IP address blocks:        177.101.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:83:6f:34:99:0d:98:7f:4e:14:79:f6:89:dd:f4:e1:14:32:77:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 13:00:21 2024 GMT
            Not After : Dec  4 13:05:21 2025 GMT
        Subject: CN=8AE015B90AE0D6CD63F61A4F334FD33F8E2F4443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:81:2a:53:33:ca:fb:1d:85:7d:71:29:84:
                    d2:2c:c7:80:a6:c4:55:70:e6:89:5d:be:a8:ff:a0:
                    3d:77:64:62:ab:79:d2:77:53:d2:d1:bc:13:d6:2d:
                    33:ae:b7:f2:14:93:7b:8d:f2:f5:38:9a:fb:89:2f:
                    64:a7:e1:5a:6a:aa:90:c3:24:24:a4:c9:7f:85:ac:
                    b4:c4:e9:80:17:f7:19:da:ab:87:04:6d:37:9c:e2:
                    c4:41:5d:08:38:a9:72:e5:cf:41:dc:1b:46:0d:74:
                    52:69:3f:ee:c1:b9:8b:a1:57:54:fb:c1:d4:7a:8f:
                    a5:36:3d:78:6a:c2:21:87:d2:d6:fa:c9:eb:fc:36:
                    3f:22:41:6c:5d:0c:6c:81:93:f3:59:14:88:51:8a:
                    30:fa:ad:95:5d:06:fd:dc:5e:6f:02:76:f7:f1:85:
                    ef:32:66:d5:32:19:af:72:37:a4:73:5e:1e:89:aa:
                    01:44:23:0e:d5:6d:fa:d4:c2:ea:57:98:70:10:c5:
                    a2:78:79:f7:68:19:f6:81:f3:c0:0a:1b:3c:9d:6c:
                    88:c2:cc:a1:6b:39:39:e6:f9:b0:1c:a3:f8:e0:f8:
                    b3:7f:f5:0c:62:ac:14:24:dd:b4:68:ef:91:75:db:
                    1f:14:23:cb:fc:cf:1e:94:69:6a:d2:7b:62:1c:60:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E0:15:B9:0A:E0:D6:CD:63:F6:1A:4F:33:4F:D3:3F:8E:2F:44:43
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:31:4d:3e:10:69:02:cd:9c:b1:0c:52:2a:07:45:10:4d:06:
         9b:ce:4a:a0:87:81:b4:97:36:37:fc:99:db:04:ed:f8:97:a2:
         8c:be:f7:a5:b6:d6:51:89:46:d3:b1:27:70:5b:8f:a5:80:89:
         82:8b:c2:4b:4a:5f:08:78:f3:da:8d:5b:dd:82:1f:b1:c5:2d:
         90:5c:38:ec:25:ec:c6:19:b1:e6:7a:9a:5d:3f:9c:fd:f2:c4:
         04:2e:46:ba:2b:aa:d3:6b:c9:e5:59:20:2a:ba:b8:cf:03:ea:
         c7:fb:fa:7e:8d:c6:dd:3b:4b:42:3a:82:35:c2:ac:5f:ee:e3:
         70:cd:eb:c8:d5:5c:86:be:2b:44:46:63:76:ff:2f:2b:5a:e8:
         8b:41:0d:5f:fa:09:fd:85:c8:08:11:40:db:3f:e1:c3:10:ac:
         96:85:b3:12:cb:b4:f0:df:5d:f5:5f:d0:22:f8:63:41:dc:cf:
         9b:5c:b0:6e:fb:33:9c:b5:f8:d3:1b:db:57:d2:81:f0:eb:7a:
         d0:f7:b3:31:d0:9a:d8:ac:10:b6:41:42:ac:9e:d5:63:c7:ca:
         12:02:9f:ca:c7:03:4c:d4:6e:74:89:7d:25:ef:ce:3e:8d:4d:
         52:75:79:a4:ad:9b:69:02:67:e1:4a:94:ae:ee:7a:f6:73:54:
         68:81:1a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:03 2025 by rpki-client on console.sobornost.net