Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136372e302f32342d3234203d3e20323632373938.roa
File:                     3137372e3132392e3136372e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          7rPy34E36/HkcxlMlq3fnxR6TyUNo8oWqNJZKLq4ekw=
Subject key identifier:   23:43:80:D9:0D:88:E8:75:4E:76:FD:02:98:EF:AD:4B:93:BA:BF:98
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       2DDFE76AB405484BD192EF40A3A0ED99FFB11AB1
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136372e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:58 +0000
ROA not before:           Wed 05 Mar 2025 23:54:58 +0000
ROA not after:            Wed 04 Mar 2026 23:59:58 +0000
asID:                     262798
IP address blocks:        177.129.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:df:e7:6a:b4:05:48:4b:d1:92:ef:40:a3:a0:ed:99:ff:b1:1a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:58 2025 GMT
            Not After : Mar  4 23:59:58 2026 GMT
        Subject: CN=234380D90D88E8754E76FD0298EFAD4B93BABF98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:8d:e6:95:7e:63:29:28:f7:ea:09:ef:23:
                    fa:5e:fc:92:92:f5:8c:a0:76:f0:cc:f6:16:b1:21:
                    2d:ff:39:38:e0:a8:33:53:26:7f:7d:ea:bb:72:c5:
                    5d:58:f4:bd:06:c9:79:0d:03:cd:24:93:d2:28:a4:
                    1a:3c:f0:16:f3:c6:09:5b:55:2d:e3:1a:ce:a8:95:
                    9f:bc:e7:1e:55:af:8a:a1:60:ca:8e:77:11:45:eb:
                    92:45:93:8c:75:7e:54:98:51:8d:43:1f:7b:70:be:
                    63:bf:a2:69:2f:93:9c:05:e1:e7:a4:6b:b2:39:72:
                    7a:0c:98:68:48:cb:ba:41:88:20:14:8d:f0:e9:d9:
                    3b:47:6d:e5:2e:98:a1:8f:be:f8:2b:90:98:94:26:
                    42:4c:13:87:8f:6e:9c:77:4a:34:22:e2:8b:39:d9:
                    75:89:f1:4e:9f:aa:6f:fb:4a:d7:42:b3:90:1a:57:
                    d3:64:8b:0b:dc:1e:ad:2f:6e:45:87:fe:61:3c:60:
                    a6:96:53:2b:c3:f5:b7:e1:6f:b9:87:8b:58:4a:45:
                    1c:0e:86:e4:3f:f2:9f:dc:0f:ff:a3:77:4b:df:b4:
                    3d:0d:a5:ab:0f:5a:af:45:c3:2b:73:0f:35:76:34:
                    db:d6:80:fb:77:93:44:9b:8e:6d:cd:e9:f1:5f:72:
                    71:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:43:80:D9:0D:88:E8:75:4E:76:FD:02:98:EF:AD:4B:93:BA:BF:98
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136372e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:9a:97:83:b5:78:35:42:27:da:f2:5a:cf:4f:93:f5:c4:00:
         29:91:2b:d7:9c:f2:61:e5:e6:47:75:4e:d4:92:17:57:8b:ce:
         42:d7:3a:a3:d7:d4:af:15:d4:20:5b:7b:54:f4:9b:0e:2d:0e:
         46:5e:1a:9f:45:31:55:77:e1:a1:a1:f7:59:ac:17:11:40:ec:
         41:2d:f7:25:07:ac:af:d2:78:cb:1d:f9:20:00:31:ac:80:4c:
         ce:e5:56:4f:2e:23:aa:60:8e:26:3d:78:9d:c8:86:fb:ba:51:
         92:56:03:84:67:43:4f:06:3f:ef:3f:8a:cd:6b:7d:a8:d7:75:
         a0:36:9a:82:06:0f:0d:fc:bc:2f:f9:1a:b1:ea:07:de:41:17:
         b5:1f:f5:26:43:9a:40:39:b7:bc:d5:ea:0f:08:68:af:56:5c:
         f6:20:56:a6:96:e9:a3:9b:1b:ef:7d:e3:19:24:20:f3:78:25:
         94:ff:e0:20:aa:05:9c:74:56:4d:df:fc:59:2e:67:6d:d4:27:
         32:1b:85:bc:ab:89:f3:04:5e:ef:c2:cc:ce:d0:fc:e4:f3:f0:
         a5:5d:54:c6:d0:f4:54:8c:ea:04:cf:fe:2b:af:d7:de:ad:6c:
         c2:41:aa:14:90:cd:79:0c:73:bc:88:a0:5e:37:51:1c:03:72:
         cd:f1:b6:85
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULd/narQFSEvRku9Ao6Dtmf+xGrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJC
MEQ3RkY4QTAeFw0yNTAzMDUyMzU0NThaFw0yNjAzMDQyMzU5NThaMDMxMTAvBgNV
BAMTKDIzNDM4MEQ5MEQ4OEU4NzU0RTc2RkQwMjk4RUZBRDRCOTNCQUJGOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpe43mlX5jKSj36gnvI/pe/JKS
9YygdvDM9haxIS3/OTjgqDNTJn996rtyxV1Y9L0GyXkNA80kk9IopBo88Bbzxglb
VS3jGs6olZ+85x5Vr4qhYMqOdxFF65JFk4x1flSYUY1DH3twvmO/omkvk5wF4eek
a7I5cnoMmGhIy7pBiCAUjfDp2TtHbeUumKGPvvgrkJiUJkJME4ePbpx3SjQi4os5
2XWJ8U6fqm/7StdCs5AaV9NkiwvcHq0vbkWH/mE8YKaWUyvD9bfhb7mHi1hKRRwO
huQ/8p/cD/+jd0vftD0NpasPWq9FwytzDzV2NNvWgPt3k0Sbjm3N6fFfcnGzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUI0OA2Q2I6HVOdv0CmO+tS5O6v5gwHwYDVR0j
BBgwFoAU34SlWt0qNLsikhYGbhWrq7DX/4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMS9ERjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODRBNTVBREQyQTM0QkIy
MjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzEv
MzEzNzM3MmUzMTMyMzkyZTMxMzYzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGBpzANBgkqhkiG9w0BAQsFAAOCAQEAY5qX
g7V4NUIn2vJaz0+T9cQAKZEr15zyYeXmR3VO1JIXV4vOQtc6o9fUrxXUIFt7VPSb
Di0ORl4an0UxVXfhoaH3WawXEUDsQS33JQesr9J4yx35IAAxrIBMzuVWTy4jqmCO
Jj14nciG+7pRklYDhGdDTwY/7z+KzWt9qNd1oDaaggYPDfy8L/kaseoH3kEXtR/1
JkOaQDm3vNXqDwhor1Zc9iBWppbpo5sb733jGSQg83gllP/gIKoFnHRWTd/8WS5n
bdQnMhuFvKuJ8wRe78LMztD85PPwpV1UxtD0VIzqBM/+K6/X3q1swkGqFJDNeQxz
vIigXjdRHANyzfG2hQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:34 2025 by rpki-client on console.sobornost.net