Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3137372e39332e3232342e302f32302d3234203d3e203238363633.roa
File:                     3137372e39332e3232342e302f32302d3234203d3e203238363633.roa (raw, json)
Hash identifier:          jPGcbv6wdnM3Q3Y5o9G/oodYNv+Na3nmV3ud7lvo3CY=
Subject key identifier:   BB:AF:B7:15:27:82:6F:06:D9:E0:4A:29:D3:9E:8E:A7:0F:93:18:32
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       2F691425DC33153D62948AB937875F6DDEB95486
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3137372e39332e3232342e302f32302d3234203d3e203238363633.roa
Signing time:             Fri 18 Apr 2025 14:30:51 +0000
ROA not before:           Fri 18 Apr 2025 14:25:51 +0000
ROA not after:            Fri 17 Apr 2026 14:30:51 +0000
asID:                     28663
IP address blocks:        177.93.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:69:14:25:dc:33:15:3d:62:94:8a:b9:37:87:5f:6d:de:b9:54:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Apr 18 14:25:51 2025 GMT
            Not After : Apr 17 14:30:51 2026 GMT
        Subject: CN=BBAFB71527826F06D9E04A29D39E8EA70F931832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:68:ac:76:c9:9c:ef:0f:b1:ab:51:3f:b3:
                    da:33:7f:34:af:a2:78:70:5c:bb:da:53:23:d0:9c:
                    2d:a2:2f:ff:6f:56:aa:10:e7:fb:63:27:ff:5a:69:
                    f6:77:32:29:cf:90:9c:fe:f5:82:60:9c:06:40:70:
                    0c:cc:5a:66:0d:d9:aa:8e:73:7a:af:47:05:b6:bb:
                    5f:96:ae:82:10:34:0c:33:40:c0:83:14:8b:30:d1:
                    30:56:00:cf:35:05:c9:a7:d7:88:07:ff:81:56:5b:
                    c0:5e:7f:ba:de:c7:d9:25:bc:55:45:d6:f7:10:87:
                    70:e7:ed:bf:73:42:9f:4d:bf:4e:3e:b9:bf:2c:3f:
                    f2:a9:ed:89:11:c1:2c:1a:b6:27:39:59:0b:ec:29:
                    e7:86:78:48:6b:94:65:e5:67:69:08:3b:72:6b:25:
                    ae:2c:5c:60:f9:f5:79:db:e5:4b:04:ec:9e:aa:f9:
                    8b:1e:e1:c5:b8:47:f5:29:d5:0a:e3:62:4e:48:e2:
                    ec:ab:21:78:b6:96:d1:89:73:5f:db:24:71:4e:54:
                    06:3d:69:b9:b2:dc:a8:87:4c:00:12:ae:17:d5:4a:
                    2c:58:dc:df:e9:b2:60:a9:33:f8:62:6a:d8:10:f3:
                    48:24:d8:cf:30:a6:23:b5:34:80:b2:71:06:2a:3d:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AF:B7:15:27:82:6F:06:D9:E0:4A:29:D3:9E:8E:A7:0F:93:18:32
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3137372e39332e3232342e302f32302d3234203d3e203238363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:06:39:93:0e:f2:fd:77:8d:5b:ef:f9:3c:74:d2:ee:b6:b5:
         76:6a:51:c8:d8:09:52:23:f7:99:a6:a8:72:da:78:96:af:35:
         b7:d9:61:ae:fd:ab:a2:cc:4a:cb:ff:9d:82:7d:e3:f8:30:f4:
         e3:34:64:08:2a:e8:83:1f:77:62:f7:22:a8:13:e7:7b:4e:b3:
         31:7b:76:65:9d:b4:84:d9:b1:51:7f:08:c6:43:6c:85:9f:6a:
         dd:89:da:d6:fb:df:f6:f8:65:99:72:10:cc:96:63:ae:ff:43:
         b1:c8:30:16:bb:e7:bd:68:90:17:7a:2d:09:f1:4d:77:3b:30:
         b0:7f:7c:02:3c:a4:56:39:3a:cd:65:ea:2f:e0:93:a5:41:57:
         a6:6a:7f:da:25:a6:ad:4b:2a:1b:44:4a:d9:d5:60:ae:a6:0b:
         ac:26:f2:08:6f:36:2d:39:90:85:12:2d:ae:1a:f2:9c:60:c0:
         a2:04:13:16:7f:b2:82:17:27:8b:0f:a5:b0:70:85:c9:b3:1b:
         2e:f6:08:9e:bf:31:db:7f:47:84:4a:db:01:2a:a8:4b:14:54:
         00:fa:87:18:82:c5:11:ba:2f:14:eb:11:71:86:a9:25:67:75:
         16:de:53:7c:d7:2c:03:3d:a5:44:2e:ba:6f:25:26:a0:6e:f4:
         bc:dc:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:32 2025 by rpki-client on console.sobornost.net