Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/3137372e33382e382e302f32312d3332203d3e20323632383933.roa
File:                     3137372e33382e382e302f32312d3332203d3e20323632383933.roa (raw, json)
Hash identifier:          Ch4GDfUKOc3O1mTqlcHhj6sJ7L8qVb2AelfN8+K1uYk=
Subject key identifier:   7B:9A:45:63:00:1D:27:45:C5:70:94:5D:FA:24:E1:3F:AC:93:08:15
Certificate issuer:       /CN=99B35081E0645635AD4D8BE70E34F035910FB764
Certificate serial:       0B47E90BE0FC65514991C28A7CDDD6315BFD3F81
Authority key identifier: 99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/3137372e33382e382e302f32312d3332203d3e20323632383933.roa
Signing time:             Fri 07 Mar 2025 05:20:25 +0000
ROA not before:           Fri 07 Mar 2025 05:15:25 +0000
ROA not after:            Fri 06 Mar 2026 05:20:25 +0000
asID:                     262893
IP address blocks:        177.38.8.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl
                          rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:47:e9:0b:e0:fc:65:51:49:91:c2:8a:7c:dd:d6:31:5b:fd:3f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99B35081E0645635AD4D8BE70E34F035910FB764
        Validity
            Not Before: Mar  7 05:15:25 2025 GMT
            Not After : Mar  6 05:20:25 2026 GMT
        Subject: CN=7B9A4563001D2745C570945DFA24E13FAC930815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:14:49:42:2b:fd:f4:99:fb:fa:b1:6f:b6:
                    f1:b0:9f:f9:61:ab:f7:37:91:37:a3:90:f9:fc:8c:
                    2c:79:8d:09:d6:d4:91:14:0f:9d:a8:25:7b:71:44:
                    28:91:84:89:2f:a5:29:65:59:94:57:14:36:df:7c:
                    2b:58:02:e2:f7:27:af:f1:15:41:db:18:d3:5e:7b:
                    5a:40:49:17:25:5b:ea:85:0c:dd:0e:47:9b:e2:7e:
                    1a:4b:bf:e3:37:5c:61:ff:18:29:17:4c:1b:96:df:
                    24:29:61:91:ed:d9:d4:05:35:71:f3:b4:bc:85:ee:
                    d2:99:65:f2:ec:d8:cc:6a:67:a1:46:ee:32:cb:53:
                    45:70:93:73:a6:44:cf:51:80:f3:2e:c3:9d:7e:a0:
                    1b:30:3c:da:03:3b:3b:83:bd:b3:43:79:a1:fb:29:
                    60:d5:51:c9:7a:62:f3:95:01:44:5a:7a:d0:28:bf:
                    4f:92:d0:85:ea:7f:5e:d6:88:cc:05:cf:fa:8e:2f:
                    8a:67:75:f2:43:a2:45:cb:0b:bd:01:2a:98:96:41:
                    2d:70:19:97:81:74:4a:41:85:3a:3d:05:7a:73:5b:
                    c5:00:22:67:69:65:c5:5d:a7:6e:d5:81:7a:4a:5f:
                    cc:cb:a0:02:e8:2a:84:4d:d9:a0:61:c1:3e:03:a9:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9A:45:63:00:1D:27:45:C5:70:94:5D:FA:24:E1:3F:AC:93:08:15
            X509v3 Authority Key Identifier:
                keyid:99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/3137372e33382e382e302f32312d3332203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:68:6e:17:72:a0:e2:2e:32:7c:4a:4a:6f:36:d6:6d:13:e0:
         04:35:75:3e:17:06:85:6f:2b:52:79:8e:3d:63:dc:e8:5c:aa:
         3d:3d:63:ba:50:05:5a:fc:84:43:f2:b0:f0:72:54:48:8e:17:
         a6:ec:63:ef:32:2b:5f:d9:40:e5:b4:56:ed:a4:ad:2e:f4:b5:
         2c:bd:08:1b:d3:bb:55:10:42:22:fb:2b:3e:b1:22:e2:68:2d:
         c6:76:80:dc:1c:e3:51:a9:9e:8d:91:c1:a6:ed:cd:98:12:73:
         8b:40:f9:f4:b2:3b:92:fa:68:a2:2c:14:bb:ac:3b:55:e9:b6:
         cf:93:cf:39:bd:df:d5:44:e3:10:2c:2d:53:f0:b3:3e:db:a6:
         54:26:cb:67:44:a8:23:d3:a4:56:04:4b:8e:6c:e9:38:46:8b:
         49:99:40:54:06:6a:d5:17:d1:f1:24:c2:c5:bd:db:ff:4a:02:
         fb:12:8c:b7:fc:9e:ce:a2:72:bb:4b:85:72:9a:be:36:5b:b3:
         20:93:b5:6f:1b:22:38:e2:77:dc:27:97:96:9d:76:51:0d:b1:
         dd:a4:74:2d:85:3a:64:c6:96:1f:c2:99:ee:a5:4c:31:eb:bc:
         09:b8:61:c3:b6:4e:41:8b:e5:68:c8:78:e2:c1:64:6b:8f:d7:
         b2:f7:18:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:02 2025 by rpki-client on console.sobornost.net