Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/3137372e3130352e3131322e302f32302d3234203d3e20323632363433.roa
File:                     3137372e3130352e3131322e302f32302d3234203d3e20323632363433.roa (raw, json)
Hash identifier:          ajD4Kp5vkLb88kXcqGYZjNrIHeoaWOLwL+xcCtKorEA=
Subject key identifier:   3D:BA:72:3F:5F:4F:9E:22:22:40:87:D2:93:35:AB:55:36:6D:DC:F1
Certificate issuer:       /CN=875E06F9E7034F27BB17B17F859BD523F124DED9
Certificate serial:       66684F8842B049271704EFE962882227C8E79A8B
Authority key identifier: 87:5E:06:F9:E7:03:4F:27:BB:17:B1:7F:85:9B:D5:23:F1:24:DE:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/3137372e3130352e3131322e302f32302d3234203d3e20323632363433.roa
Signing time:             Tue 15 Apr 2025 18:05:22 +0000
ROA not before:           Tue 15 Apr 2025 18:00:22 +0000
ROA not after:            Tue 14 Apr 2026 18:05:22 +0000
asID:                     262643
IP address blocks:        177.105.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.crl
                          rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:68:4f:88:42:b0:49:27:17:04:ef:e9:62:88:22:27:c8:e7:9a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875E06F9E7034F27BB17B17F859BD523F124DED9
        Validity
            Not Before: Apr 15 18:00:22 2025 GMT
            Not After : Apr 14 18:05:22 2026 GMT
        Subject: CN=3DBA723F5F4F9E22224087D29335AB55366DDCF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a2:84:e1:44:0c:99:28:16:48:af:da:2e:ea:
                    35:5a:a2:48:6e:8d:13:16:91:95:be:24:ae:bb:85:
                    1c:88:ee:76:9f:9d:cd:5d:28:00:36:54:5e:65:82:
                    b5:ab:bc:49:c6:3c:f2:a0:96:f6:89:75:d1:54:2b:
                    04:2b:51:c6:2b:fd:1d:5c:dc:02:7b:53:8f:4b:03:
                    1d:23:c2:d1:a4:c8:1f:a6:60:d7:c1:f7:0b:a0:e3:
                    ea:0c:49:28:de:60:7c:83:6d:11:7f:28:54:d4:31:
                    86:5c:93:75:af:9a:a8:a9:5b:3d:49:da:6b:ea:12:
                    a0:7f:11:0d:fb:ad:d8:81:ab:50:b8:22:ca:f1:e8:
                    a7:12:e3:b1:26:8b:43:d8:84:56:4b:d9:51:de:48:
                    11:6a:d6:27:cb:59:53:a0:99:c6:ab:20:0f:07:71:
                    e5:a4:73:81:51:1d:2a:4f:3e:c3:e1:6b:7a:c7:1a:
                    01:bf:ee:74:44:14:c3:f1:c0:9d:16:ca:87:2a:63:
                    05:6b:c6:04:aa:28:dd:2f:a8:8b:3a:0f:63:c3:4c:
                    2f:99:40:b4:dd:ec:29:59:80:1b:59:08:1f:0a:9a:
                    ce:f8:48:fa:14:9a:5c:76:75:9f:03:6e:29:9e:91:
                    ef:dd:0b:2b:3d:ad:2b:d0:ee:da:18:e3:f3:62:3c:
                    ac:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BA:72:3F:5F:4F:9E:22:22:40:87:D2:93:35:AB:55:36:6D:DC:F1
            X509v3 Authority Key Identifier:
                keyid:87:5E:06:F9:E7:03:4F:27:BB:17:B1:7F:85:9B:D5:23:F1:24:DE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/3137372e3130352e3131322e302f32302d3234203d3e20323632363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:da:be:77:65:63:30:66:65:6d:e7:74:09:84:85:f0:0a:90:
         42:13:dd:b8:bc:68:4a:bd:c0:55:64:81:50:a1:e2:5b:e4:5d:
         43:16:53:3b:eb:06:bd:59:b2:61:82:da:4d:7f:3d:e2:80:ee:
         c7:fa:35:bf:47:1d:a7:5c:53:d0:2d:5c:88:c6:73:11:f6:a9:
         18:df:be:eb:9c:08:16:aa:45:58:50:77:bb:7e:6a:d6:b9:7e:
         e2:5b:51:d5:4d:52:80:fc:85:14:99:24:fe:ff:fe:cd:ab:26:
         26:22:f9:8a:07:c7:b6:7f:62:cb:ec:e2:ba:11:96:94:5d:77:
         c7:3e:31:c8:f0:2a:bf:26:f2:05:9e:ec:86:74:ab:8b:a1:fe:
         22:b4:23:38:cc:67:1f:b5:79:b3:45:16:52:06:e7:1f:73:2b:
         da:80:bc:c8:6d:f8:48:ec:a2:d3:81:78:ae:be:2b:ca:73:42:
         f0:09:c0:88:dd:26:99:ce:3d:59:86:fb:1c:9f:ab:a3:55:97:
         9a:49:80:5a:28:0b:02:f4:95:43:d3:02:a7:ce:bb:8c:e2:42:
         16:36:8e:ac:09:37:a7:bb:54:9f:74:01:37:42:c1:85:00:8d:
         d9:fa:c5:5f:40:85:d8:17:7b:52:8e:de:81:55:08:f3:bc:fe:
         81:78:91:73
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZmhPiEKwSScXBO/pYogiJ8jnmoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc1RTA2RjlFNzAzNEYyN0JCMTdCMTdGODU5QkQ1MjNG
MTI0REVEOTAeFw0yNTA0MTUxODAwMjJaFw0yNjA0MTQxODA1MjJaMDMxMTAvBgNV
BAMTKDNEQkE3MjNGNUY0RjlFMjIyMjQwODdEMjkzMzVBQjU1MzY2RERDRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwooThRAyZKBZIr9ou6jVaokhu
jRMWkZW+JK67hRyI7nafnc1dKAA2VF5lgrWrvEnGPPKglvaJddFUKwQrUcYr/R1c
3AJ7U49LAx0jwtGkyB+mYNfB9wug4+oMSSjeYHyDbRF/KFTUMYZck3WvmqipWz1J
2mvqEqB/EQ37rdiBq1C4Isrx6KcS47Emi0PYhFZL2VHeSBFq1ifLWVOgmcarIA8H
ceWkc4FRHSpPPsPha3rHGgG/7nREFMPxwJ0WyocqYwVrxgSqKN0vqIs6D2PDTC+Z
QLTd7ClZgBtZCB8Kms74SPoUmlx2dZ8Dbimeke/dCys9rSvQ7toY4/NiPKxxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPbpyP19PniIiQIfSkzWrVTZt3PEwHwYDVR0j
BBgwFoAUh14G+ecDTye7F7F/hZvVI/Ek3tkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHFZOUdpeWlDUU04WmV3RzdMQVR5eUZSdE43VExoZWlnWVdpdUprSEc0
WWgvMC84NzVFMDZGOUU3MDM0RjI3QkIxN0IxN0Y4NTlCRDUyM0YxMjRERUQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3NUUwNkY5RTcwMzRGMjdC
QjE3QjE3Rjg1OUJENTIzRjEyNERFRDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhxWTlHaXlpQ1FNOFpld0c3TEFUeXlGUnRON1RMaGVpZ1lXaXVKa0hHNFloLzAv
MzEzNzM3MmUzMTMwMzUyZTMxMzEzMjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLFpcDANBgkqhkiG9w0BAQsFAAOCAQEAmtq+
d2VjMGZlbed0CYSF8AqQQhPduLxoSr3AVWSBUKHiW+RdQxZTO+sGvVmyYYLaTX89
4oDux/o1v0cdp1xT0C1ciMZzEfapGN++65wIFqpFWFB3u35q1rl+4ltR1U1SgPyF
FJkk/v/+zasmJiL5igfHtn9iy+ziuhGWlF13xz4xyPAqvybyBZ7shnSri6H+IrQj
OMxnH7V5s0UWUgbnH3Mr2oC8yG34SOyi04F4rr4rynNC8AnAiN0mmc49WYb7HJ+r
o1WXmkmAWigLAvSVQ9MCp867jOJCFjaOrAk3p7tUn3QBN0LBhQCN2frFX0CF2Bd7
Uo7egVUI87z+gXiRcw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:08 2025 by rpki-client on console.sobornost.net