Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230332e302f32342d3234203d3e20323633303235.roa
File:                     3137372e31302e3230332e302f32342d3234203d3e20323633303235.roa (raw, json)
Hash identifier:          5QarQH1s+5JEQQ3mFqiPxcjWIxLthfrrr7AygSd9Ja0=
Subject key identifier:   42:F2:7D:F7:9A:CF:03:4B:A0:C9:E0:22:DF:84:87:0B:A9:AA:B2:B3
Certificate issuer:       /CN=EAB467368870DA703732D42A059330F5218787CD
Certificate serial:       43DA4A84994088FFECD3E6E30954F2C13F9647B2
Authority key identifier: EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230332e302f32342d3234203d3e20323633303235.roa
Signing time:             Thu 06 Mar 2025 01:24:43 +0000
ROA not before:           Thu 06 Mar 2025 01:19:43 +0000
ROA not after:            Thu 05 Mar 2026 01:24:43 +0000
asID:                     263025
IP address blocks:        177.10.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl
                          rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 00:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:da:4a:84:99:40:88:ff:ec:d3:e6:e3:09:54:f2:c1:3f:96:47:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB467368870DA703732D42A059330F5218787CD
        Validity
            Not Before: Mar  6 01:19:43 2025 GMT
            Not After : Mar  5 01:24:43 2026 GMT
        Subject: CN=42F27DF79ACF034BA0C9E022DF84870BA9AAB2B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:d1:a4:df:60:90:9c:08:36:22:02:d0:cf:
                    70:0a:d3:c1:bf:50:9b:0c:29:ac:25:54:9f:a8:0c:
                    e5:b8:e9:f9:c1:80:36:51:b9:27:5d:75:88:a5:f6:
                    90:a3:cc:39:4d:9b:b6:6f:c6:27:ec:28:56:58:e0:
                    f7:79:2f:e3:3c:ab:f9:a2:cf:20:d7:81:30:3b:a2:
                    fb:56:8a:85:88:d4:10:cd:f1:50:0a:87:2b:74:cb:
                    2e:b2:9e:6c:38:ee:1e:e9:86:30:65:af:cb:25:2f:
                    bd:3a:f5:f6:3d:05:bd:42:99:58:07:fe:65:2a:50:
                    da:f5:72:72:ef:ca:e7:33:51:99:20:75:36:21:27:
                    fd:3b:ce:f3:64:9c:26:34:f9:e3:2c:9d:8f:55:e9:
                    50:b9:68:5a:d8:96:63:09:7e:1a:91:00:2d:d9:61:
                    cc:e5:7e:56:bb:9f:0c:bd:d7:8b:61:95:cc:87:b1:
                    3b:5d:00:89:01:07:8f:28:00:9f:c5:0d:af:32:f0:
                    d1:6f:33:78:ce:6d:08:99:46:d9:0d:bd:da:c1:37:
                    21:10:e9:c5:0f:9a:18:cc:5c:b7:fd:53:5c:98:06:
                    ad:22:b0:58:07:6e:f6:5c:7b:25:ee:02:7a:c1:3d:
                    8d:f4:f2:b7:8b:86:48:a1:81:b0:fe:61:62:ed:9e:
                    70:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F2:7D:F7:9A:CF:03:4B:A0:C9:E0:22:DF:84:87:0B:A9:AA:B2:B3
            X509v3 Authority Key Identifier:
                keyid:EA:B4:67:36:88:70:DA:70:37:32:D4:2A:05:93:30:F5:21:87:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/EAB467368870DA703732D42A059330F5218787CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB467368870DA703732D42A059330F5218787CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/1/3137372e31302e3230332e302f32342d3234203d3e20323633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:da:fa:71:07:c7:fb:6b:bd:6d:e8:fe:e5:73:fe:b3:2a:05:
         8e:d7:24:a0:6d:04:52:67:b9:3b:67:fe:57:f3:fd:00:9c:27:
         9e:67:53:91:d0:b5:d5:cb:38:12:aa:26:e9:01:9e:28:c6:b6:
         a9:a3:b0:b9:23:87:d8:d3:07:4b:2f:c8:23:d6:74:8d:b7:04:
         f5:2f:7c:cf:97:47:1d:c8:11:60:54:4c:2a:a5:66:c5:ff:02:
         20:d2:51:05:04:45:70:62:bb:14:25:d8:a3:69:2b:9c:22:ae:
         2c:56:b6:43:f2:a9:02:86:d7:9c:62:81:a6:11:27:b6:5d:14:
         70:24:e6:ff:da:69:d8:44:e3:f2:e5:55:ad:c7:21:97:1d:86:
         33:45:8b:0a:7e:41:d5:a3:e1:73:23:dc:aa:81:8a:56:1c:c2:
         2e:a9:e7:43:12:29:68:81:ec:24:2d:06:99:9e:95:88:3e:63:
         e1:cc:c3:29:eb:8f:57:a1:8b:c6:b1:b0:b3:d5:26:5e:42:97:
         c7:2c:30:57:84:ca:18:77:fd:18:b7:cd:d1:c9:7d:74:35:40:
         5e:3b:d4:c8:dc:2f:d6:1d:bf:64:20:24:3f:56:96:0f:3a:bf:
         0c:a8:21:5d:81:c9:71:4b:1c:57:0a:0c:8a:80:b4:3f:ab:8b:
         a5:97:31:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:51 2025 by rpki-client on console.sobornost.net