Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230302e302f32322d3232203d3e20323633303235.roa
File:                     3137372e31302e3230302e302f32322d3232203d3e20323633303235.roa (raw, json)
Hash identifier:          iIzOdK6YppimridWGDT9+Wdr8vo5meGWPuwVOK7eEwQ=
Subject key identifier:   FE:2B:7F:04:BA:E5:34:C4:34:06:3C:E3:DC:96:F8:47:CA:ED:54:40
Certificate issuer:       /CN=EAB467368870DA703732D42A059330F5218787CD
Certificate serial:       7485491C48BA047CFF86D3F4A71249A004A7FB32
Authority key identifier: EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230302e302f32322d3232203d3e20323633303235.roa
Signing time:             Thu 06 Mar 2025 01:24:43 +0000
ROA not before:           Thu 06 Mar 2025 01:19:43 +0000
ROA not after:            Thu 05 Mar 2026 01:24:43 +0000
asID:                     263025
IP address blocks:        177.10.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl
                          rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:85:49:1c:48:ba:04:7c:ff:86:d3:f4:a7:12:49:a0:04:a7:fb:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB467368870DA703732D42A059330F5218787CD
        Validity
            Not Before: Mar  6 01:19:43 2025 GMT
            Not After : Mar  5 01:24:43 2026 GMT
        Subject: CN=FE2B7F04BAE534C434063CE3DC96F847CAED5440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:9c:3a:0e:d6:d6:22:6d:7c:0e:49:95:72:
                    f6:71:47:94:3a:81:20:0d:26:02:8f:d5:b7:34:4b:
                    8d:e2:1f:04:dd:2a:f7:51:b1:18:58:20:e2:a0:b5:
                    eb:03:f4:5d:99:ae:cc:75:a6:78:62:66:3c:ed:d6:
                    d1:c3:65:8e:d3:2c:4d:3e:66:2f:79:d9:d3:57:73:
                    1d:b5:aa:58:7a:ad:85:02:2d:ab:a5:dc:e9:f5:d6:
                    a1:c0:ed:c6:35:ee:b1:d7:7e:65:f3:84:21:15:1f:
                    69:22:94:36:6a:72:bb:7b:70:d1:11:d8:22:eb:c5:
                    fb:0d:91:39:e3:d2:c1:64:80:da:0a:0e:21:5d:02:
                    32:15:7c:2d:02:a9:7a:00:2e:b2:53:2b:cf:5d:b8:
                    16:09:9f:9f:c0:c3:5a:61:1b:cb:e4:dc:7c:67:ba:
                    ad:a9:bd:2a:ed:9d:47:55:99:3a:4b:7c:43:13:36:
                    28:17:3e:d6:f3:0b:6c:aa:26:11:4f:e7:a9:4c:d9:
                    66:03:bc:12:b8:f4:15:c2:89:b2:99:03:ab:e5:4f:
                    a1:88:83:37:86:91:33:61:d2:0f:8d:6a:c5:86:90:
                    c1:c2:b1:20:03:63:c6:ea:cf:11:b9:5e:e1:24:2f:
                    7c:fe:a7:3a:f2:44:05:1b:ef:29:ef:6e:cc:1b:5c:
                    cf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2B:7F:04:BA:E5:34:C4:34:06:3C:E3:DC:96:F8:47:CA:ED:54:40
            X509v3 Authority Key Identifier:
                keyid:EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230302e302f32322d3232203d3e20323633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:47:5a:3a:7b:0f:f2:4d:6c:76:24:b8:ca:c7:b2:6e:6e:2b:
         98:d6:44:83:c4:67:ee:fc:be:41:30:1f:5b:de:f0:f6:9a:70:
         19:d6:4c:d1:de:0b:c0:a7:21:93:e0:6e:85:5f:50:cd:9a:0e:
         29:4a:6b:34:71:bf:9c:5a:6b:7f:ef:f2:1a:b6:0d:c5:3b:02:
         90:06:02:ad:c6:71:81:8e:df:26:ae:74:ac:9a:40:56:e5:ba:
         78:f8:61:4e:52:51:63:bb:22:b3:f3:e2:48:63:0c:3e:89:8c:
         e5:3d:2a:3c:c9:fa:fb:1c:2c:93:88:39:51:2b:11:69:f5:42:
         0a:9b:77:e0:fc:33:cf:dd:27:72:0a:3a:f4:69:3f:99:f2:f1:
         ea:78:30:43:13:ad:78:5b:ab:05:6a:71:fd:01:1b:58:e4:be:
         1a:b6:f4:5c:00:9e:b8:75:5f:fc:02:8e:6a:36:ad:1a:81:37:
         b0:94:b3:5b:ca:d5:2d:8f:6c:48:7c:30:34:fc:ea:1c:5d:cb:
         51:25:bd:7a:47:9d:57:7a:e1:bf:c6:20:43:9a:06:d5:d2:b0:
         d4:08:6c:f6:be:44:9b:0f:fd:72:a7:c5:72:97:4e:91:e4:d2:
         6f:69:d0:e0:b7:49:0f:1b:38:77:8f:2b:74:9f:fc:24:fa:9c:
         b6:07:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:32 2025 by rpki-client on console.sobornost.net