Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133342e302f32332d3233203d3e203533303138.roa
File:                     3137372e37322e3133342e302f32332d3233203d3e203533303138.roa (raw, json)
Hash identifier:          ttSI2j71lImB/4PIMoo25pMA3CavEK/xKzNlMuqPf0E=
Subject key identifier:   02:0C:FC:1A:89:8A:4A:54:1A:7F:CC:E3:67:9C:2A:C2:F1:B7:D8:B8
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       08D9E14DF795A5FE24AB15FE1A58F7B21A90E1CD
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133342e302f32332d3233203d3e203533303138.roa
Signing time:             Thu 06 Mar 2025 14:33:19 +0000
ROA not before:           Thu 06 Mar 2025 14:28:19 +0000
ROA not after:            Thu 05 Mar 2026 14:33:19 +0000
asID:                     53018
IP address blocks:        177.72.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d9:e1:4d:f7:95:a5:fe:24:ab:15:fe:1a:58:f7:b2:1a:90:e1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Mar  6 14:28:19 2025 GMT
            Not After : Mar  5 14:33:19 2026 GMT
        Subject: CN=020CFC1A898A4A541A7FCCE3679C2AC2F1B7D8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:8d:ca:ad:be:9b:fe:c1:9e:d1:b9:90:fa:
                    c6:3a:25:c9:99:9b:22:d5:58:d8:51:57:c3:7b:85:
                    31:1c:2c:c2:a5:36:0f:ae:d9:f9:fb:66:5f:2c:64:
                    27:bd:b9:8e:de:6f:31:cf:e6:ff:ed:fd:59:d1:ab:
                    b5:20:2e:f3:f8:28:9a:90:d8:29:34:c1:04:0a:af:
                    3f:d8:e8:ae:00:ee:7a:1b:32:bb:cf:ee:6e:a1:45:
                    c2:85:7c:4a:ac:a9:8b:78:26:98:78:c2:a1:28:cc:
                    4c:08:24:6e:ff:99:e6:49:ef:f9:81:b0:2f:7d:a6:
                    4e:2f:f8:3f:94:48:b9:bd:69:58:30:77:c5:b5:9b:
                    d1:49:ff:d0:5f:8d:62:0a:64:ec:59:b7:a0:c4:32:
                    35:db:ca:a5:50:47:1b:4d:9e:7f:07:87:0c:9d:66:
                    2c:65:84:b4:a4:eb:03:4c:4b:ab:e5:0a:ad:94:59:
                    54:0e:58:ca:42:2e:e4:aa:33:7e:08:74:ca:67:63:
                    b9:de:ac:d5:70:25:f4:a9:91:b2:18:42:f2:e0:db:
                    ee:71:8f:89:21:f5:9b:79:41:21:92:d7:03:c6:76:
                    32:9c:c3:1b:e8:c1:f3:d0:9d:94:5f:a1:fa:72:2d:
                    22:52:94:52:df:4c:3f:ad:98:a3:dd:d3:27:31:76:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0C:FC:1A:89:8A:4A:54:1A:7F:CC:E3:67:9C:2A:C2:F1:B7:D8:B8
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133342e302f32332d3233203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:e1:d5:03:c3:39:cb:fb:ec:b5:80:ea:6e:8c:8b:79:69:1e:
         bd:d6:91:48:f9:70:80:07:c8:36:e5:1c:de:20:5b:88:80:87:
         62:ae:7c:da:dd:07:30:b9:76:64:a2:8e:c1:d2:a1:f4:e0:89:
         73:93:6d:2f:59:04:4c:9e:1f:22:b6:ca:ec:dd:f0:df:67:31:
         28:2e:d1:09:df:24:d0:d1:a8:c4:d6:f7:74:04:05:5d:bc:dc:
         53:e1:e0:a6:ed:9e:e5:10:2e:fd:5e:c0:54:20:4e:a6:f6:52:
         95:86:b2:16:91:84:9b:5d:6d:a7:ef:86:4c:81:fa:6c:ea:ce:
         47:cb:3a:11:91:40:6a:5d:14:5b:64:ca:67:b9:65:ee:ed:46:
         84:96:3a:db:04:55:26:9c:bb:d5:e3:94:a0:bb:20:16:fb:c4:
         d0:8c:5e:f3:c3:dc:06:05:20:7e:bb:bc:01:59:19:d3:27:a4:
         ad:3f:5f:03:b4:8c:5f:1a:6f:75:fd:e9:26:4f:53:51:13:8d:
         c2:29:c4:97:28:d1:93:73:6a:ae:d7:e1:2a:56:f4:c6:2a:ca:
         c9:f5:4e:cd:0c:a4:df:6a:48:60:b8:56:11:be:6a:a9:15:ce:
         32:6d:2d:89:c3:71:73:42:b7:75:18:83:f6:b2:e0:d4:25:fc:
         79:f2:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:14 2025 by rpki-client on console.sobornost.net