Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32312d3332203d3e203533323039.roa
File:                     3137372e31312e3133362e302f32312d3332203d3e203533323039.roa (raw, json)
Hash identifier:          G2Qx/7CcQsGcX2pCFyEXivzfbK4kDC5MUDVhi7FSvGQ=
Subject key identifier:   DE:1E:53:97:55:2E:47:E7:79:32:E0:9F:E6:91:A5:D5:D3:5B:6A:7B
Certificate issuer:       /CN=FF4C5A7CB5F90DAE8409EFA373627C2606355D20
Certificate serial:       3234D9E1D300F8F37990CA22F50EC732AD6F13CC
Authority key identifier: FF:4C:5A:7C:B5:F9:0D:AE:84:09:EF:A3:73:62:7C:26:06:35:5D:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4C5A7CB5F90DAE8409EFA373627C2606355D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32312d3332203d3e203533323039.roa
Signing time:             Tue 08 Apr 2025 19:29:33 +0000
ROA not before:           Tue 08 Apr 2025 19:24:33 +0000
ROA not after:            Tue 07 Apr 2026 19:29:33 +0000
asID:                     53209
IP address blocks:        177.11.136.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/FF4C5A7CB5F90DAE8409EFA373627C2606355D20.crl
                          rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/FF4C5A7CB5F90DAE8409EFA373627C2606355D20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4C5A7CB5F90DAE8409EFA373627C2606355D20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:34:d9:e1:d3:00:f8:f3:79:90:ca:22:f5:0e:c7:32:ad:6f:13:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4C5A7CB5F90DAE8409EFA373627C2606355D20
        Validity
            Not Before: Apr  8 19:24:33 2025 GMT
            Not After : Apr  7 19:29:33 2026 GMT
        Subject: CN=DE1E5397552E47E77932E09FE691A5D5D35B6A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:4d:c9:ae:fc:f0:9d:be:b4:7a:42:30:50:
                    78:8a:e4:26:b8:b4:40:71:35:84:fa:5d:5f:27:b2:
                    50:52:82:86:8d:71:4f:0a:e9:6e:da:e7:56:68:b3:
                    cb:44:5a:7d:82:07:87:d0:02:e3:d5:18:d9:0c:67:
                    eb:7d:1b:87:6a:a2:75:49:e2:97:19:a7:74:c6:99:
                    de:9e:e4:06:f2:4c:8c:40:3b:b1:53:47:19:96:bc:
                    fa:b6:ac:f4:3b:d6:20:47:53:b6:8b:25:23:96:95:
                    3c:57:10:1f:44:dc:66:bb:74:74:03:97:b0:ac:1f:
                    28:33:54:2f:87:84:48:4f:85:5f:26:25:e0:41:20:
                    bc:12:25:75:45:fc:88:18:b9:04:b4:ee:c1:db:28:
                    7b:2d:bc:c4:c9:9a:0d:b2:8d:1b:3e:e1:1a:19:54:
                    28:2a:c2:6a:b8:9f:d3:bf:6a:49:0a:52:8a:86:2a:
                    c3:6e:55:3f:27:50:14:9c:2c:f0:80:49:70:79:3b:
                    65:51:50:69:94:f8:fe:8d:be:c1:2b:7a:ae:02:50:
                    c4:1a:6a:f0:c6:ac:d7:c9:aa:f0:c2:ed:e2:02:5b:
                    e5:92:48:eb:bb:8c:68:a2:b7:13:65:4f:56:67:e4:
                    5b:a0:38:39:36:65:67:f1:ef:97:a0:14:92:84:00:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1E:53:97:55:2E:47:E7:79:32:E0:9F:E6:91:A5:D5:D3:5B:6A:7B
            X509v3 Authority Key Identifier:
                keyid:FF:4C:5A:7C:B5:F9:0D:AE:84:09:EF:A3:73:62:7C:26:06:35:5D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/FF4C5A7CB5F90DAE8409EFA373627C2606355D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4C5A7CB5F90DAE8409EFA373627C2606355D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32312d3332203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:a5:1e:9e:8d:72:9d:26:a7:05:d7:0f:79:38:89:50:b2:11:
         39:75:9c:72:46:6e:dc:f4:d8:c0:0f:d1:b6:08:84:d4:47:16:
         da:85:97:eb:eb:26:85:15:af:ee:80:ca:2f:50:73:01:78:5a:
         64:6c:80:24:4a:27:a0:ff:cd:32:72:84:db:2d:71:6e:b0:55:
         5c:05:9a:26:41:5e:41:86:60:8a:f5:41:95:72:29:70:89:fb:
         d7:9c:ad:b2:42:a4:61:22:69:f4:0d:50:47:8a:22:24:c0:9f:
         f2:ea:86:ca:e5:bf:78:37:a5:3f:e3:ae:b8:66:49:1e:d8:60:
         24:f0:83:c2:25:f1:0c:67:f9:3c:72:e7:ef:3c:49:bc:41:1a:
         b4:6a:ed:24:74:d3:c1:c0:78:e3:94:4e:fa:4d:2e:ea:0d:91:
         a1:16:ab:b0:d8:56:5e:17:0e:7e:5a:01:ac:c3:66:f7:4a:1c:
         dc:49:99:e3:ce:c1:10:f4:d3:f6:2e:78:7e:9f:5a:ac:9e:22:
         b7:25:e3:9f:6c:3e:10:50:ba:d5:dd:ea:d6:99:f6:68:9d:a4:
         4e:90:1b:1b:a9:bf:1b:c6:b3:56:66:61:4b:58:1a:0a:89:42:
         90:c1:3d:18:da:1c:5c:81:0d:31:a1:d1:02:5d:ad:22:dd:d0:
         6f:09:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:35 2025 by rpki-client on console.sobornost.net