Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/3137372e35342e36342e302f32302d3234203d3e203238313534.roa
File:                     3137372e35342e36342e302f32302d3234203d3e203238313534.roa (raw, json)
Hash identifier:          kS6EitLR1FB7A4T6K5x48pQ+aZ5UZrIUeAfQz/7mFvA=
Subject key identifier:   5B:74:A0:AE:0D:9D:38:D7:FD:E5:7D:B4:35:D0:DF:3F:7D:64:C7:D5
Certificate issuer:       /CN=812191D8B89140CC7C6B2A5D3CF140116F023979
Certificate serial:       5FADF2C4FC95B17A2659D3AC76C06A9A4BC5A6B4
Authority key identifier: 81:21:91:D8:B8:91:40:CC:7C:6B:2A:5D:3C:F1:40:11:6F:02:39:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/3137372e35342e36342e302f32302d3234203d3e203238313534.roa
Signing time:             Thu 06 Mar 2025 07:57:53 +0000
ROA not before:           Thu 06 Mar 2025 07:52:53 +0000
ROA not after:            Thu 05 Mar 2026 07:57:53 +0000
asID:                     28154
IP address blocks:        177.54.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.crl
                          rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ad:f2:c4:fc:95:b1:7a:26:59:d3:ac:76:c0:6a:9a:4b:c5:a6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812191D8B89140CC7C6B2A5D3CF140116F023979
        Validity
            Not Before: Mar  6 07:52:53 2025 GMT
            Not After : Mar  5 07:57:53 2026 GMT
        Subject: CN=5B74A0AE0D9D38D7FDE57DB435D0DF3F7D64C7D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:5e:da:f8:53:31:bb:b0:91:f4:af:1c:31:
                    23:a4:fd:8f:81:6c:0d:e9:a4:21:ad:a4:85:0b:fa:
                    8c:5d:d2:c5:55:d0:c3:62:67:d5:f5:0a:cb:61:a9:
                    bf:f9:93:93:a0:54:09:77:39:2f:c6:50:5c:c0:2c:
                    35:62:9c:7a:1f:a0:d4:04:c4:98:f3:26:56:24:ef:
                    0e:8e:37:bd:60:fc:11:05:45:7c:36:fb:d1:8d:fd:
                    6d:ae:a7:51:2b:c4:0b:a4:43:20:9a:96:5f:a2:75:
                    92:98:43:ed:dc:4d:4f:fe:06:e9:82:c9:86:85:22:
                    5b:a6:db:d6:ad:cb:2a:77:71:3c:06:a6:b5:31:38:
                    bf:51:92:18:9d:71:4a:e0:a7:6b:5d:eb:3c:42:d6:
                    9d:bf:7b:19:1e:af:00:68:ef:ee:9e:5c:38:60:65:
                    a5:dd:ce:f1:cb:f2:60:a0:ce:67:28:13:85:a5:b1:
                    7e:7a:19:97:26:1e:e2:1b:43:45:d7:83:d5:bf:f1:
                    20:7d:5e:69:ce:0d:1c:d0:19:80:43:45:cb:e3:77:
                    93:9f:08:f8:0f:ae:df:79:ea:ee:97:e2:57:69:38:
                    83:eb:32:71:bb:f6:5f:5c:a0:c5:32:93:3a:59:7a:
                    5c:e6:e3:4e:0a:7e:cf:0d:ec:64:be:0c:91:da:fc:
                    9e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:74:A0:AE:0D:9D:38:D7:FD:E5:7D:B4:35:D0:DF:3F:7D:64:C7:D5
            X509v3 Authority Key Identifier:
                keyid:81:21:91:D8:B8:91:40:CC:7C:6B:2A:5D:3C:F1:40:11:6F:02:39:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/3137372e35342e36342e302f32302d3234203d3e203238313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:5b:35:f5:66:f1:d7:dc:52:c5:02:17:56:24:af:0c:5f:2a:
         d0:25:25:93:08:f9:63:87:82:68:65:07:a4:4c:21:57:32:53:
         98:41:1a:a5:00:a5:86:48:2f:0d:48:b3:f4:3d:bf:b9:7b:64:
         61:ad:3a:56:9d:5d:01:da:ed:76:eb:10:97:86:22:0e:0e:b0:
         7d:09:0b:3f:fe:d0:27:72:16:c4:d0:20:20:8f:e2:84:47:97:
         61:9b:f7:28:3d:88:50:d8:37:2d:dc:b4:4f:97:c8:78:58:79:
         1c:1d:49:60:c2:c1:fc:84:45:14:62:0b:7a:d0:59:e1:22:7a:
         f5:76:f9:c7:a7:cb:a8:3d:e7:3f:b0:f6:b5:16:45:9f:1b:60:
         ac:26:ec:6f:6d:3b:ad:65:1c:b7:11:2c:e4:7d:13:0f:14:9d:
         0d:87:7b:c6:6a:fd:ce:e2:0c:df:2a:76:c6:d1:dc:08:76:01:
         b4:45:c0:c7:a7:5d:ed:eb:f3:d5:83:00:40:6d:7e:53:39:3a:
         9b:df:61:e4:7a:40:10:60:6b:01:6f:b6:2c:cd:b3:09:66:0e:
         19:1e:0e:51:49:d9:19:82:b9:d3:ce:b0:64:c2:3b:36:d9:5c:
         e9:57:05:d7:70:09:b5:41:76:43:d7:6c:04:cc:47:1a:f2:40:
         59:49:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:39 2025 by rpki-client on console.sobornost.net