Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa
File:                     3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa (raw, json)
Hash identifier:          2s9hs+kwMjjO6qbwwoZtnUG31mVPWkLhTujJzlJMdcw=
Subject key identifier:   D3:96:17:CC:3A:0E:15:86:F2:BD:C3:3B:8D:7C:70:72:07:3A:68:68
Certificate issuer:       /CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
Certificate serial:       2B224D2B3BC2C5F3464489883C65E95C3A9C492C
Authority key identifier: 1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa
Signing time:             Fri 07 Mar 2025 01:12:12 +0000
ROA not before:           Fri 07 Mar 2025 01:07:12 +0000
ROA not after:            Fri 06 Mar 2026 01:12:12 +0000
asID:                     271000
IP address blocks:        177.223.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl
                          rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 08:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:22:4d:2b:3b:c2:c5:f3:46:44:89:88:3c:65:e9:5c:3a:9c:49:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
        Validity
            Not Before: Mar  7 01:07:12 2025 GMT
            Not After : Mar  6 01:12:12 2026 GMT
        Subject: CN=D39617CC3A0E1586F2BDC33B8D7C7072073A6868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:eb:96:c3:fa:9e:da:7e:f5:90:19:ef:d4:
                    d5:49:7e:5c:26:09:72:fa:88:6d:24:a5:58:76:94:
                    59:ad:23:44:78:26:67:51:bd:40:17:fd:64:49:f5:
                    2b:5e:2d:a2:b3:ee:05:bb:d8:92:66:bb:5f:56:0a:
                    3d:25:60:ee:50:58:3e:41:d7:5d:be:df:cd:f9:b7:
                    2f:01:55:fc:d2:9e:c7:43:b0:d6:fa:4b:9a:ba:c9:
                    d8:71:99:ff:47:d7:5f:b9:15:56:c6:da:2f:71:66:
                    bd:33:72:a7:76:dc:d7:39:c2:df:d0:92:fc:fc:39:
                    2c:2d:8b:20:fc:e6:ea:3d:65:c3:2f:28:47:5c:f4:
                    c2:f8:5f:d6:3f:a6:9f:08:b5:29:88:b5:9a:51:3d:
                    7c:23:25:4b:eb:b5:32:fb:8a:31:35:17:c9:57:fe:
                    ce:47:58:f0:49:c1:8d:95:84:17:ef:e0:f3:61:d0:
                    dc:da:90:f7:f1:cf:66:63:cc:e5:f4:a1:60:77:da:
                    6d:91:19:fc:31:c5:7f:de:03:f1:42:f2:a1:35:3d:
                    93:1d:63:19:09:24:54:2a:a2:a4:f9:a4:0d:10:50:
                    4b:a6:84:d6:ba:21:2c:26:6a:f1:d2:c6:17:7c:54:
                    fc:2d:d7:17:21:0a:a6:49:27:6a:fc:3b:db:4a:1d:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:96:17:CC:3A:0E:15:86:F2:BD:C3:3B:8D:7C:70:72:07:3A:68:68
            X509v3 Authority Key Identifier:
                keyid:1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:03:38:11:c9:5e:d3:09:dc:bc:9d:4a:00:2a:5d:1b:d3:08:
         29:99:3c:e4:b3:0b:f7:b7:a0:c2:83:c3:4d:6a:1d:3e:51:28:
         f6:ca:96:e2:fe:e0:c6:52:5f:9e:c6:f9:1a:87:48:f9:1b:fc:
         ce:4f:31:fd:ba:e5:d2:36:d8:0b:56:36:b0:4c:a7:53:82:7c:
         9c:26:3f:4c:1b:04:38:d0:55:1d:b5:0d:7d:12:fa:e6:b5:d3:
         61:0f:77:1f:e8:f5:94:3c:e1:a6:28:28:50:71:b6:b6:42:aa:
         a7:c4:fa:17:0b:82:dc:40:bc:2e:71:1a:0b:15:8a:c9:20:1b:
         41:1b:83:17:ac:63:f9:f1:bd:43:28:f9:44:07:e0:d4:db:4f:
         10:c4:78:0f:32:2c:38:99:eb:b1:5f:73:c6:17:ab:0f:9d:33:
         cc:f1:8c:40:11:c5:e5:d7:5d:a0:5a:58:a8:85:c0:5f:ba:55:
         47:3d:f9:11:4d:ef:d5:63:b4:c2:14:4f:28:f5:dc:88:61:b6:
         ca:03:4b:39:fd:b6:f9:d1:34:6f:0a:7d:b7:43:ae:66:1d:cb:
         15:54:8b:66:15:8d:4e:32:ef:0a:b4:92:3a:8d:fc:4e:a4:ce:
         24:b6:ce:19:75:f1:03:cd:49:7c:82:16:b5:d0:ed:13:5c:15:
         83:1a:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:00 2025 by rpki-client on console.sobornost.net