Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa
File:                     3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa (raw, json)
Hash identifier:          eqkqDsCbZJ99K4+D1CJ52cYtToGH+zvVM9ibhegLf/I=
Subject key identifier:   0A:21:37:CC:36:C8:B1:B8:13:C2:7E:69:66:88:67:A7:48:D1:66:70
Certificate issuer:       /CN=AD2A9EAA0D8113E73A6CFCE555B59055FBE53065
Certificate serial:       13E8EC06256186FA0BDEE737D2CE0DB0E095F869
Authority key identifier: AD:2A:9E:AA:0D:81:13:E7:3A:6C:FC:E5:55:B5:90:55:FB:E5:30:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa
Signing time:             Wed 09 Apr 2025 23:59:06 +0000
ROA not before:           Wed 09 Apr 2025 23:54:06 +0000
ROA not after:            Wed 08 Apr 2026 23:59:06 +0000
asID:                     28300
IP address blocks:        177.223.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.crl
                          rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e8:ec:06:25:61:86:fa:0b:de:e7:37:d2:ce:0d:b0:e0:95:f8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2A9EAA0D8113E73A6CFCE555B59055FBE53065
        Validity
            Not Before: Apr  9 23:54:06 2025 GMT
            Not After : Apr  8 23:59:06 2026 GMT
        Subject: CN=0A2137CC36C8B1B813C27E69668867A748D16670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2f:46:a3:47:e1:b9:bd:c1:c4:95:b3:d7:9c:
                    56:c1:a9:dc:47:89:02:75:86:1c:0a:83:4f:b1:8a:
                    19:7e:e8:c8:47:33:90:0b:7e:15:f3:5f:4f:2a:47:
                    f6:2c:83:2e:5a:b8:1c:74:6d:b2:73:a6:be:77:74:
                    08:ae:ba:25:1b:61:cd:91:f9:ab:15:4a:92:b2:8f:
                    c0:9a:7a:80:b4:db:cb:f9:99:62:4c:db:9f:04:1d:
                    70:1e:a3:f9:17:1c:9b:48:11:60:9b:c5:a9:f3:50:
                    7f:fd:cc:a6:39:e9:19:c9:ce:7b:20:70:13:5d:a6:
                    9a:c8:19:bc:86:60:56:1e:c3:4c:68:04:4f:77:64:
                    7f:16:e5:22:6c:75:56:1a:84:aa:8b:71:88:af:b7:
                    f7:6b:31:6f:0f:4c:6d:f5:e4:b7:18:4e:1f:6c:4d:
                    00:a4:3d:39:00:80:1a:2b:17:ea:09:77:4c:24:06:
                    b5:70:1e:04:f3:88:d4:53:82:ca:c2:19:f2:94:11:
                    76:2f:92:de:8c:71:05:28:6e:ce:45:06:f3:ec:6e:
                    98:82:aa:6d:de:74:f0:be:65:8d:0b:fe:d4:6d:85:
                    b3:79:98:fe:ed:ef:84:fb:ae:31:39:98:ad:51:98:
                    c3:9c:cc:a5:14:3c:26:41:20:99:f5:23:ca:ae:b5:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:21:37:CC:36:C8:B1:B8:13:C2:7E:69:66:88:67:A7:48:D1:66:70
            X509v3 Authority Key Identifier:
                keyid:AD:2A:9E:AA:0D:81:13:E7:3A:6C:FC:E5:55:B5:90:55:FB:E5:30:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:6d:7c:2a:f5:8f:b4:1c:15:b9:67:76:9f:7c:c6:0c:d8:0c:
         59:25:95:cb:b3:d3:6e:46:ad:d4:c6:45:7f:e8:ef:d7:ea:25:
         34:9c:85:b9:dd:9f:58:85:ea:87:b8:75:36:25:2a:70:03:81:
         2b:cb:b5:8e:e2:d3:24:1c:28:59:ca:5c:51:51:80:15:9b:d2:
         2b:31:ce:dd:ef:a6:5d:cc:ec:31:46:b0:fb:a0:d3:5a:da:c8:
         ef:14:ea:51:e0:20:76:f4:81:ba:01:ea:bc:70:95:63:37:0c:
         91:77:5b:1a:06:aa:61:f5:76:12:dd:5a:1e:8d:02:56:4e:46:
         40:de:e8:90:f6:ac:15:29:24:85:09:c6:fe:6c:54:0e:e7:93:
         42:a3:84:39:6e:38:13:c6:84:c9:3b:ce:6c:12:df:65:cd:82:
         62:ed:4f:31:98:02:13:ee:e3:ee:c9:b8:b7:fb:92:a2:7b:ea:
         11:7f:31:ef:aa:87:81:fb:08:16:1b:e5:46:4b:2b:d2:e1:5e:
         75:93:be:13:29:f0:f4:af:53:f0:d9:7c:f9:8b:a7:fb:37:97:
         4e:1a:be:14:de:0b:1f:b0:9c:66:27:1a:44:43:4b:15:7e:6f:
         77:d6:57:f6:76:4c:41:89:0d:89:9b:89:79:13:7a:3e:37:1d:
         de:41:8d:62
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE+jsBiVhhvoL3uc30s4NsOCV+GkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQyQTlFQUEwRDgxMTNFNzNBNkNGQ0U1NTVCNTkwNTVG
QkU1MzA2NTAeFw0yNTA0MDkyMzU0MDZaFw0yNjA0MDgyMzU5MDZaMDMxMTAvBgNV
BAMTKDBBMjEzN0NDMzZDOEIxQjgxM0MyN0U2OTY2ODg2N0E3NDhEMTY2NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaL0ajR+G5vcHElbPXnFbBqdxH
iQJ1hhwKg0+xihl+6MhHM5ALfhXzX08qR/Ysgy5auBx0bbJzpr53dAiuuiUbYc2R
+asVSpKyj8CaeoC028v5mWJM258EHXAeo/kXHJtIEWCbxanzUH/9zKY56RnJznsg
cBNdpprIGbyGYFYew0xoBE93ZH8W5SJsdVYahKqLcYivt/drMW8PTG315LcYTh9s
TQCkPTkAgBorF+oJd0wkBrVwHgTziNRTgsrCGfKUEXYvkt6McQUobs5FBvPsbpiC
qm3edPC+ZY0L/tRthbN5mP7t74T7rjE5mK1RmMOczKUUPCZBIJn1I8qutVyfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCiE3zDbIsbgTwn5pZohnp0jRZnAwHwYDVR0j
BBgwFoAUrSqeqg2BE+c6bPzlVbWQVfvlMGUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpTTmplR3dIeFlaMTd6ajZkVHd5d2pnSFZNSnlKYnhINERzWGZUeU1l
eXkvMC9BRDJBOUVBQTBEODExM0U3M0E2Q0ZDRTU1NUI1OTA1NUZCRTUzMDY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FEMkE5RUFBMEQ4MTEzRTcz
QTZDRkNFNTU1QjU5MDU1RkJFNTMwNjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl6U05qZUd3SHhZWjE3emo2ZFR3eXdqZ0hWTUp5SmJ4SDREc1hmVHlNZXl5LzAv
MzEzNzM3MmUzMjMyMzMyZTMxMzYzMDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMy
MzgzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWx36AwDQYJKoZIhvcNAQELBQADggEBAHJtfCr1
j7QcFblndp98xgzYDFkllcuz025GrdTGRX/o79fqJTSchbndn1iF6oe4dTYlKnAD
gSvLtY7i0yQcKFnKXFFRgBWb0isxzt3vpl3M7DFGsPug01rayO8U6lHgIHb0gboB
6rxwlWM3DJF3WxoGqmH1dhLdWh6NAlZORkDe6JD2rBUpJIUJxv5sVA7nk0KjhDlu
OBPGhMk7zmwS32XNgmLtTzGYAhPu4+7JuLf7kqJ76hF/Me+qh4H7CBYb5UZLK9Lh
XnWTvhMp8PSvU/DZfPmLp/s3l04avhTeCx+wnGYnGkRDSxV+b3fWV/Z2TEGJDYmb
iXkTej43Hd5BjWI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:09 2025 by rpki-client on console.sobornost.net