Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3137392e302f32342d3234203d3e20323632363131.roa
File:                     3137372e38352e3137392e302f32342d3234203d3e20323632363131.roa (raw, json)
Hash identifier:          sDUVZLop8GTSRuUl2VAI+gB6ru74ZBZ6Q8b45i7tEro=
Subject key identifier:   46:A8:56:B9:E1:F2:66:AE:CD:C6:C5:53:5C:1C:42:62:C0:8F:FD:CA
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       4E7BA82F906A7C0CF534213EF3C094A5D21E9BD1
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3137392e302f32342d3234203d3e20323632363131.roa
Signing time:             Wed 19 Mar 2025 14:30:12 +0000
ROA not before:           Wed 19 Mar 2025 14:25:12 +0000
ROA not after:            Wed 18 Mar 2026 14:30:12 +0000
asID:                     262611
IP address blocks:        177.85.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7b:a8:2f:90:6a:7c:0c:f5:34:21:3e:f3:c0:94:a5:d2:1e:9b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Mar 19 14:25:12 2025 GMT
            Not After : Mar 18 14:30:12 2026 GMT
        Subject: CN=46A856B9E1F266AECDC6C5535C1C4262C08FFDCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:ee:89:3f:bd:1c:9f:b6:96:35:59:99:81:
                    62:2d:b9:60:e0:b9:63:8f:0e:bc:48:ea:61:73:8b:
                    06:76:f6:8d:35:19:97:fe:52:1f:6f:dd:5f:89:98:
                    63:83:a5:79:cc:a8:57:72:92:de:05:ce:99:60:16:
                    ca:43:d9:70:9d:15:88:df:e1:c5:79:94:4a:f0:57:
                    16:c6:7c:78:ab:84:d7:27:7f:47:11:4f:66:21:eb:
                    03:29:12:67:9e:00:dc:1f:a4:1b:be:07:0f:34:0a:
                    00:f7:9d:1d:76:d0:26:c9:9e:8e:5e:d4:80:ca:5c:
                    7e:ea:4d:40:cd:3c:01:6e:96:bf:e8:ff:e2:5e:79:
                    dd:5e:d8:fb:70:42:a9:05:da:27:f3:48:f2:bf:d2:
                    71:f6:59:fe:f1:9c:86:20:e1:20:59:94:33:d2:f5:
                    b8:53:2e:1d:32:26:35:e4:c1:4a:04:f8:c0:92:66:
                    65:8a:e8:3a:7d:01:44:09:79:f7:c8:a8:4e:3c:b3:
                    25:49:16:93:64:d8:71:73:07:75:f7:3d:5b:a1:72:
                    5f:b4:64:06:0c:59:87:dd:e5:3d:87:d5:ee:e5:07:
                    e4:4c:b3:84:c9:69:63:be:49:58:ce:03:28:38:91:
                    23:bf:93:53:47:b0:73:27:10:fb:6e:4a:de:6e:85:
                    6c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A8:56:B9:E1:F2:66:AE:CD:C6:C5:53:5C:1C:42:62:C0:8F:FD:CA
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3137392e302f32342d3234203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:7b:bc:a7:e5:a7:a7:69:71:c1:43:8f:c4:08:f3:2c:23:2e:
         bd:b9:37:10:4c:97:e8:45:47:99:aa:6d:fe:6a:d2:ed:cd:d5:
         17:2d:d4:a5:0f:c4:e1:63:78:ae:c4:48:a0:f8:07:47:22:ec:
         6b:2f:83:bd:72:b6:4c:be:6b:06:51:9e:73:11:2d:3e:37:5b:
         8c:a5:e7:a9:48:f4:7b:db:92:31:20:9d:09:c0:9f:63:0f:13:
         6a:e4:c1:b0:f4:a3:4a:36:57:ed:e7:69:cc:11:d5:e0:27:38:
         a5:9e:a1:18:b6:97:0d:cb:67:5a:29:3a:b7:63:30:48:77:6f:
         9f:86:7e:27:b6:65:78:8d:35:0e:87:3b:49:2f:26:ea:7d:27:
         ff:fd:66:b3:d3:e5:27:5d:e7:85:f6:c9:2e:df:04:9b:5c:61:
         fb:58:fe:9c:77:50:b5:cb:3d:b0:2a:46:07:9b:3a:59:2b:70:
         b0:18:c8:af:c2:88:34:c7:3d:ce:87:ce:0b:2a:a9:65:c0:f8:
         e8:99:de:41:a7:5f:51:92:bc:a5:c6:e1:c7:10:92:6e:02:d9:
         2b:3a:42:b3:ef:09:ce:3f:ae:3d:7f:04:4b:8a:8d:42:19:1f:
         91:df:d9:26:1d:25:b4:c0:ee:ba:15:98:44:3c:a8:30:a0:61:
         54:11:d4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:43 2025 by rpki-client on console.sobornost.net