Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230302e302f32342d3234203d3e20323633303235.roa
File:                     3137372e31302e3230302e302f32342d3234203d3e20323633303235.roa (raw, json)
Hash identifier:          EpkWVOkjEMnXqIc3zaGQhi02xgAA5hUOQz8qlh49v8M=
Subject key identifier:   01:9B:13:9E:CE:F0:35:64:74:93:0E:26:F0:D5:DB:DB:5C:07:EC:7E
Certificate issuer:       /CN=EAB467368870DA703732D42A059330F5218787CD
Certificate serial:       273989E760BD0C42B34D139E352B3D334D89E94C
Authority key identifier: EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230302e302f32342d3234203d3e20323633303235.roa
Signing time:             Thu 06 Mar 2025 01:24:43 +0000
ROA not before:           Thu 06 Mar 2025 01:19:43 +0000
ROA not after:            Thu 05 Mar 2026 01:24:43 +0000
asID:                     263025
IP address blocks:        177.10.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl
                          rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:39:89:e7:60:bd:0c:42:b3:4d:13:9e:35:2b:3d:33:4d:89:e9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB467368870DA703732D42A059330F5218787CD
        Validity
            Not Before: Mar  6 01:19:43 2025 GMT
            Not After : Mar  5 01:24:43 2026 GMT
        Subject: CN=019B139ECEF0356474930E26F0D5DBDB5C07EC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:c2:79:56:e1:48:59:85:97:27:1f:d1:8f:
                    1e:4e:0a:f1:fc:fe:bc:3b:dc:b5:d0:09:38:d8:53:
                    4c:b5:d9:92:1f:9d:c4:d7:7b:e3:ee:7b:e4:dd:13:
                    53:ee:93:0a:bd:e4:3b:8a:30:84:d3:43:db:23:cf:
                    e6:7d:16:f9:0d:c4:82:ad:8a:89:cb:75:d4:69:1f:
                    c1:a7:84:0a:f4:8d:6b:e8:7a:34:c6:ee:78:08:c4:
                    83:9b:67:71:e4:79:cb:eb:95:79:51:20:96:f4:e3:
                    41:89:82:4f:bb:01:d0:10:f1:74:c7:b9:9f:1a:ed:
                    d9:85:12:d0:18:94:78:47:be:32:bd:b5:13:ae:c3:
                    83:76:98:f0:fc:9e:aa:90:e8:f8:2a:9a:f1:58:72:
                    99:a3:fb:d1:19:32:cb:37:16:f7:3e:50:c3:d7:b1:
                    4a:e8:8e:cd:34:10:5c:b9:9e:93:e7:7d:d7:05:fb:
                    21:48:a6:21:de:89:00:fd:65:01:4b:b6:09:90:74:
                    f9:c7:05:d5:a1:de:0f:46:9e:eb:d2:0b:1c:6b:92:
                    b7:f0:5b:57:f8:0b:5b:25:5a:99:53:ee:48:fa:61:
                    4e:bf:2e:2f:f1:34:35:e1:10:ac:c7:10:3a:31:6c:
                    73:f1:ce:37:37:37:17:3a:2a:d7:dc:f0:73:ad:57:
                    d0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9B:13:9E:CE:F0:35:64:74:93:0E:26:F0:D5:DB:DB:5C:07:EC:7E
            X509v3 Authority Key Identifier:
                keyid:EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230302e302f32342d3234203d3e20323633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:bb:8c:6c:c6:15:d2:93:e6:91:81:48:5a:2b:80:d8:5a:4c:
         8d:16:97:aa:81:03:19:77:1c:c0:6b:4d:d8:90:aa:7c:ed:7f:
         19:9b:65:84:84:04:cf:e4:f3:3f:6f:4d:3e:4c:ef:05:d9:35:
         45:31:cf:0a:b9:3c:47:45:b0:d6:8a:18:fb:12:aa:f1:77:67:
         db:2b:22:d0:88:e6:53:89:6f:7d:4f:25:2a:99:97:43:22:69:
         d8:72:a9:d9:6a:ec:39:cf:0c:3e:6b:c7:6c:82:dd:e9:2e:f2:
         e4:26:cc:59:81:d9:a5:a7:9d:75:4b:d2:c6:8e:c5:f3:a1:14:
         3e:73:3c:57:70:a1:7b:3e:e6:f2:6d:e7:b4:58:f8:55:d5:aa:
         ba:59:e2:c9:c6:39:39:8b:06:f4:4b:a3:4c:8b:b1:77:63:05:
         ca:19:4f:b1:f6:e1:f5:3e:61:0e:cc:b2:53:92:b1:76:f1:d7:
         6d:45:f7:ea:59:4a:e2:0a:e9:86:5d:2e:e1:31:28:8c:d1:fd:
         f9:37:50:f2:39:50:23:3d:e3:64:36:8a:9c:70:5f:2d:63:3b:
         ff:e5:f2:fc:37:01:d0:82:00:36:85:78:a2:ec:1c:31:87:01:
         45:8d:46:47:de:87:79:32:15:54:69:87:7f:08:c3:6d:0e:39:
         e4:d3:d8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:48 2025 by rpki-client on console.sobornost.net