Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31372e302f32342d3234203d3e20323730393736.roa
File:                     3137392e34332e31372e302f32342d3234203d3e20323730393736.roa (raw, json)
Hash identifier:          Gz5BwlpSHqcubxviL8iBUsNWO+hKSOACwY+/jQcBO8A=
Subject key identifier:   46:D0:63:1C:7E:BC:D5:79:CD:AF:EB:D9:33:A3:01:07:13:7A:EC:55
Certificate issuer:       /CN=4A3F13967BD1598A8FC3B219CC9900A809C37494
Certificate serial:       06BE1E8C4DE3A2DF54FF1A99AABD914CADF5979F
Authority key identifier: 4A:3F:13:96:7B:D1:59:8A:8F:C3:B2:19:CC:99:00:A8:09:C3:74:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31372e302f32342d3234203d3e20323730393736.roa
Signing time:             Fri 28 Mar 2025 19:40:35 +0000
ROA not before:           Fri 28 Mar 2025 19:35:35 +0000
ROA not after:            Fri 27 Mar 2026 19:40:35 +0000
asID:                     270976
IP address blocks:        179.43.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4A3F13967BD1598A8FC3B219CC9900A809C37494.crl
                          rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4A3F13967BD1598A8FC3B219CC9900A809C37494.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:be:1e:8c:4d:e3:a2:df:54:ff:1a:99:aa:bd:91:4c:ad:f5:97:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3F13967BD1598A8FC3B219CC9900A809C37494
        Validity
            Not Before: Mar 28 19:35:35 2025 GMT
            Not After : Mar 27 19:40:35 2026 GMT
        Subject: CN=46D0631C7EBCD579CDAFEBD933A30107137AEC55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:6c:70:a9:27:4a:51:b4:06:4e:9e:1d:2b:
                    03:93:a8:d5:6d:7f:98:18:02:cb:dc:81:d7:17:d9:
                    88:e7:92:d3:7f:dd:06:e0:79:db:6e:68:97:c1:e6:
                    3b:fa:06:5c:fd:d8:af:81:ed:28:84:7d:73:c5:28:
                    4f:b0:5a:44:e0:60:fc:df:81:b3:6a:2b:c9:9a:03:
                    ca:93:b0:dc:f0:82:69:9c:73:c5:59:86:a6:fc:08:
                    48:d0:93:cb:af:02:f2:54:8d:6f:a0:66:7a:9e:6e:
                    38:15:df:64:19:a6:c2:15:92:7b:f2:7b:59:e5:51:
                    ca:e1:dd:52:f7:6f:01:2a:d9:14:e9:5f:8f:e6:36:
                    73:bd:84:c3:c8:07:42:f0:03:a0:13:77:04:c0:a4:
                    78:4c:1f:ea:e5:af:05:ac:15:d6:55:88:76:23:96:
                    da:53:c1:f8:b6:2a:a5:ab:cf:24:93:91:0d:27:6d:
                    d4:2b:52:bb:6e:29:25:ae:3f:7d:83:11:d7:f3:37:
                    d9:41:7f:61:89:85:85:49:92:2d:1e:fc:d5:0c:85:
                    37:21:62:21:ab:93:2f:60:f0:88:bb:f1:a5:6b:ed:
                    3e:e2:d7:6f:85:d0:4d:6d:59:91:1f:73:b6:ab:52:
                    5e:40:c8:82:41:45:0d:2b:66:52:06:a6:6b:0f:47:
                    f2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D0:63:1C:7E:BC:D5:79:CD:AF:EB:D9:33:A3:01:07:13:7A:EC:55
            X509v3 Authority Key Identifier:
                keyid:4A:3F:13:96:7B:D1:59:8A:8F:C3:B2:19:CC:99:00:A8:09:C3:74:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4A3F13967BD1598A8FC3B219CC9900A809C37494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31372e302f32342d3234203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:76:dd:40:a6:57:71:66:6c:e4:94:be:6b:07:a8:45:a5:3f:
         21:5e:91:f1:60:57:75:5c:7b:56:66:00:43:3e:82:12:28:ba:
         e4:ce:cc:79:48:84:8f:da:5d:a3:4a:b8:29:97:65:e5:2e:8c:
         93:9e:30:63:cb:4c:b8:88:82:c7:9d:da:05:e5:67:f0:52:e3:
         b6:27:20:41:58:f7:22:e6:24:76:f6:41:91:ba:5c:23:3f:42:
         00:4d:9c:de:f2:3d:29:aa:45:a6:0b:4e:4e:27:1f:05:11:88:
         49:86:14:f2:4a:86:cc:dd:fe:bf:29:2b:23:a6:44:0d:9f:69:
         dc:86:b6:c5:53:72:47:53:d1:6c:2d:46:84:2f:c9:c6:ed:fd:
         e8:6c:28:a6:08:62:1b:d1:ec:17:00:60:b3:7a:46:74:37:e8:
         31:68:89:62:3c:ad:0b:1f:8f:e9:a2:1b:d8:7a:90:35:8a:84:
         c2:2b:a6:42:66:db:23:fe:b2:29:ff:1f:b8:15:8a:4f:71:79:
         b1:14:48:8a:ea:f3:b1:68:fd:e3:21:67:2f:ca:ca:1b:c9:a0:
         8c:c5:41:2d:f1:bf:6b:00:5f:95:2b:8a:af:f1:ef:b6:30:90:
         49:1d:ac:05:5f:af:fc:17:e3:87:f6:c8:52:45:11:ac:bb:d8:
         9e:21:0c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:07 2025 by rpki-client on console.sobornost.net