Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38382e302f32342d3234203d3e20323731313137.roa
File:                     3137392e34382e38382e302f32342d3234203d3e20323731313137.roa (raw, json)
Hash identifier:          +ADrcaW5DOQB1G16iDBibpMi3TraQN8Tmhg2OvtyU+E=
Subject key identifier:   3B:94:98:E6:52:1C:92:74:25:BF:06:43:E0:68:72:83:3D:54:A5:74
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       50BA4AB0F78DAC2866BBCE7004829AEC3E245D9F
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38382e302f32342d3234203d3e20323731313137.roa
Signing time:             Thu 06 Mar 2025 21:39:18 +0000
ROA not before:           Thu 06 Mar 2025 21:34:18 +0000
ROA not after:            Thu 05 Mar 2026 21:39:18 +0000
asID:                     271117
IP address blocks:        179.48.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ba:4a:b0:f7:8d:ac:28:66:bb:ce:70:04:82:9a:ec:3e:24:5d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Mar  6 21:34:18 2025 GMT
            Not After : Mar  5 21:39:18 2026 GMT
        Subject: CN=3B9498E6521C927425BF0643E06872833D54A574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:07:4c:d7:7b:2b:8b:b0:a0:72:6e:46:bf:
                    c4:be:ef:36:9f:dd:0a:f9:d5:17:a2:12:ec:47:20:
                    73:cc:d9:c2:be:d4:db:29:50:b7:eb:56:0d:b5:9b:
                    ea:a3:52:8e:82:8f:2b:08:a8:9a:81:a5:8c:e5:c2:
                    67:ea:02:15:62:2e:d3:f5:4e:c6:77:f9:b6:5f:66:
                    1e:6a:86:62:ab:dc:dc:7f:49:2b:8f:1f:2f:59:82:
                    9e:c0:85:79:24:26:1c:51:5a:f5:cb:03:84:ab:e0:
                    37:16:8b:5d:72:a2:88:84:d8:e9:a1:a6:6a:06:10:
                    0d:c1:72:46:21:a5:b5:4f:ec:55:97:fd:c7:f2:05:
                    fa:e9:be:da:21:c0:46:b8:83:f7:0a:60:cc:b3:52:
                    bb:6d:95:fd:e8:d3:48:4b:f5:6c:23:5b:e1:86:aa:
                    15:73:67:6c:76:a5:07:9c:1c:45:40:a3:21:b7:72:
                    60:7a:2f:21:10:22:98:4e:5e:2b:04:d9:63:1d:f7:
                    f1:9e:5e:0c:6e:21:b5:6e:49:2f:ab:d0:da:d7:68:
                    d6:4b:e4:f7:f3:a2:53:db:43:38:c0:b4:9d:25:9f:
                    98:d6:54:2a:59:7f:ce:14:d7:41:c9:ab:c5:4d:b7:
                    b9:bc:e3:73:a3:10:7c:a5:00:8c:d9:5e:e0:49:fd:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:94:98:E6:52:1C:92:74:25:BF:06:43:E0:68:72:83:3D:54:A5:74
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38382e302f32342d3234203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e4:2f:fe:e7:e1:97:20:83:37:27:1d:8b:68:fe:4e:9a:1a:
         d2:b5:b0:4d:ba:69:d4:1f:68:e5:71:00:d0:df:d7:83:f4:9d:
         64:3d:eb:20:5d:04:54:02:44:94:90:4a:1d:22:12:65:16:8d:
         6d:ea:40:82:ef:fa:85:32:6a:86:61:72:75:88:25:0f:5e:de:
         e4:4e:61:c0:e3:cd:55:eb:f9:67:80:41:b4:2d:c4:d7:84:d3:
         9c:36:5f:6f:31:c6:4e:5f:81:7b:52:85:63:5d:b2:f7:9d:0f:
         f5:b2:9a:7c:30:50:49:a3:70:fd:1f:7f:ad:c2:eb:e5:2f:48:
         60:cf:9d:f9:97:b4:81:00:81:da:ae:1f:50:bd:8b:f4:97:47:
         59:f6:5e:9e:72:74:67:71:3c:6f:ca:5b:45:ca:b3:d7:8b:fc:
         17:c4:fe:87:66:fe:ea:ec:f0:db:18:c6:d8:df:1e:14:0e:4c:
         f8:7a:15:9c:fb:62:37:d3:a5:82:36:a0:52:e7:90:fd:17:aa:
         99:37:22:a7:8c:14:02:87:4c:0b:2c:e8:5b:5b:8c:53:e7:77:
         7b:af:e0:3e:1c:11:a2:1c:f6:23:52:54:e7:90:6a:06:a7:50:
         46:3a:b8:d6:8e:0c:cf:ff:d4:71:90:23:d1:b4:f8:cd:89:21:
         ba:70:28:ad
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUULpKsPeNrChmu85wBIKa7D4kXZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJEMDFBMzIxMjVEN0IxRjYyNkMzOEMyNUJDMzQwQjg5
OTc5M0NGQTAeFw0yNTAzMDYyMTM0MThaFw0yNjAzMDUyMTM5MThaMDMxMTAvBgNV
BAMTKDNCOTQ5OEU2NTIxQzkyNzQyNUJGMDY0M0UwNjg3MjgzM0Q1NEE1NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3bwdM13sri7Cgcm5Gv8S+7zaf
3Qr51ReiEuxHIHPM2cK+1NspULfrVg21m+qjUo6CjysIqJqBpYzlwmfqAhViLtP1
TsZ3+bZfZh5qhmKr3Nx/SSuPHy9Zgp7AhXkkJhxRWvXLA4Sr4DcWi11yooiE2Omh
pmoGEA3BckYhpbVP7FWX/cfyBfrpvtohwEa4g/cKYMyzUrttlf3o00hL9WwjW+GG
qhVzZ2x2pQecHEVAoyG3cmB6LyEQIphOXisE2WMd9/GeXgxuIbVuSS+r0NrXaNZL
5PfzolPbQzjAtJ0ln5jWVCpZf84U10HJq8VNt7m843OjEHylAIzZXuBJ/f8VAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUO5SY5lIcknQlvwZD4Ghygz1UpXQwHwYDVR0j
BBgwFoAUYtAaMhJdex9ibDjCW8NAuJl5PPowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUhmYmpUMXFmZVQ4UHNoNXEyekZoMXkzeXZGU1hRYm1aVWJicnJabm9a
QjQvMS82MkQwMUEzMjEyNUQ3QjFGNjI2QzM4QzI1QkMzNDBCODk5NzkzQ0ZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyRDAxQTMyMTI1RDdCMUY2
MjZDMzhDMjVCQzM0MEI4OTk3OTNDRkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FIZmJqVDFxZmVUOFBzaDVxMnpGaDF5M3l2RlNYUWJtWlViYnJyWm5vWkI0LzEv
MzEzNzM5MmUzNDM4MmUzODM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzEzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAszBYMA0GCSqGSIb3DQEBCwUAA4IBAQAT5C/+5+GX
IIM3Jx2LaP5OmhrStbBNumnUH2jlcQDQ39eD9J1kPesgXQRUAkSUkEodIhJlFo1t
6kCC7/qFMmqGYXJ1iCUPXt7kTmHA481V6/lngEG0LcTXhNOcNl9vMcZOX4F7UoVj
XbL3nQ/1spp8MFBJo3D9H3+twuvlL0hgz535l7SBAIHarh9QvYv0l0dZ9l6ecnRn
cTxvyltFyrPXi/wXxP6HZv7q7PDbGMbY3x4UDkz4ehWc+2I306WCNqBS55D9F6qZ
NyKnjBQCh0wLLOhbW4xT53d7r+A+HBGiHPYjUlTnkGoGp1BGOrjWjgzP/9RxkCPR
tPjNiSG6cCit
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:42 2025 by rpki-client on console.sobornost.net