Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138302e302f32342d3234203d3e20323632363131.roa
File:                     3137372e38352e3138302e302f32342d3234203d3e20323632363131.roa (raw, json)
Hash identifier:          /vRIDZ2002bH4CjVi+oDmjbzFzC7+HmcOEFqKqH7XHQ=
Subject key identifier:   D8:CD:F8:95:8A:48:6A:62:26:91:52:56:76:B8:0A:41:1B:45:15:5D
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       777C9B88BCCFDD40B13BC372FC8D7398D430CA71
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138302e302f32342d3234203d3e20323632363131.roa
Signing time:             Wed 19 Mar 2025 14:30:13 +0000
ROA not before:           Wed 19 Mar 2025 14:25:13 +0000
ROA not after:            Wed 18 Mar 2026 14:30:13 +0000
asID:                     262611
IP address blocks:        177.85.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7c:9b:88:bc:cf:dd:40:b1:3b:c3:72:fc:8d:73:98:d4:30:ca:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Mar 19 14:25:13 2025 GMT
            Not After : Mar 18 14:30:13 2026 GMT
        Subject: CN=D8CDF8958A486A622691525676B80A411B45155D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:d6:2f:f9:a0:82:fc:a9:8b:3d:0e:25:87:
                    7a:1d:70:86:22:6b:fe:ee:b8:7a:a3:30:dc:18:cb:
                    fb:06:9b:61:35:59:4d:7a:32:1a:25:37:5b:ec:b5:
                    ff:4b:24:a7:ff:83:32:61:19:2c:77:5b:82:a7:84:
                    2f:74:a6:4d:03:0f:70:14:b7:a3:be:de:fe:89:82:
                    3f:7e:a3:d6:ec:09:4f:88:63:0f:5b:30:9d:e4:e5:
                    72:05:2a:e8:de:17:b2:91:d7:86:c1:79:db:46:91:
                    02:53:5b:d6:b0:1b:ca:6b:0e:19:e6:28:54:9a:c0:
                    da:31:16:8d:3c:09:85:57:2a:f4:b8:21:ea:8e:ff:
                    29:8b:43:29:76:f2:59:5b:ee:fc:18:af:11:70:c5:
                    67:46:93:84:3d:89:6c:7f:f5:8e:4d:23:12:23:67:
                    3b:04:b1:af:70:6a:d7:5f:82:7f:39:10:77:d2:2a:
                    f6:c2:8a:00:c7:c0:ac:2f:e5:46:4b:e4:0f:91:21:
                    67:33:b0:b3:9d:20:8b:c8:97:2b:b4:60:14:13:6c:
                    b9:7e:dc:e6:12:67:72:35:67:b8:d2:2f:ab:0d:79:
                    24:58:57:a4:fa:07:20:d4:b0:7a:ae:cb:e2:b1:85:
                    f0:34:e4:3f:05:f2:81:a4:76:f5:bc:ff:f0:ba:5e:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CD:F8:95:8A:48:6A:62:26:91:52:56:76:B8:0A:41:1B:45:15:5D
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138302e302f32342d3234203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:61:ab:da:bb:3f:4d:5f:fe:bf:cc:42:d5:8c:23:e2:69:f3:
         33:a9:c7:46:1e:a2:d1:6e:5d:44:a4:43:f9:77:57:5c:fc:d6:
         3f:4b:ca:e7:f2:13:31:36:e7:93:93:bd:a2:41:e2:34:24:16:
         71:a2:a5:15:0f:9b:50:ef:a3:97:b6:29:45:c6:7e:35:9a:ab:
         a3:4a:f8:f8:02:26:a1:ed:bc:19:ee:9e:c9:16:ca:74:e3:83:
         07:c8:a8:74:69:fb:f7:50:54:fc:a4:1d:28:eb:93:2f:99:5e:
         82:c8:a2:d4:52:b1:66:b1:a3:c3:c5:22:f0:2a:79:f1:07:c2:
         0a:42:d9:01:59:a9:c1:08:7f:a5:de:49:b3:7a:84:d8:f7:e4:
         27:45:f9:22:1d:fa:e2:3f:1d:d4:19:4d:b5:4d:25:45:a0:c9:
         02:3a:3f:1e:6b:1e:09:12:95:71:ea:7e:39:f3:9a:44:e2:dc:
         a5:4c:8a:8a:91:22:cd:d1:3e:e2:9b:df:b6:97:99:c4:5f:b5:
         27:8c:9f:a5:4a:3a:be:73:62:ec:07:96:9d:4e:72:3f:2f:eb:
         a5:25:e5:0f:49:d2:89:87:a3:3c:fa:11:49:c2:f3:32:6f:84:
         4b:dd:82:ce:1b:82:f9:e4:f5:dc:c9:54:4f:8c:8c:14:3b:16:
         3c:31:f4:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd3ybiLzP3UCxO8Ny/I1zmNQwynEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCMjQ2NzNBRjk0RjZFOEE3MTcxODg3QjYwQkY0RUJF
OUQxNUU3MzAeFw0yNTAzMTkxNDI1MTNaFw0yNjAzMTgxNDMwMTNaMDMxMTAvBgNV
BAMTKEQ4Q0RGODk1OEE0ODZBNjIyNjkxNTI1Njc2QjgwQTQxMUI0NTE1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwitYv+aCC/KmLPQ4lh3odcIYi
a/7uuHqjMNwYy/sGm2E1WU16MholN1vstf9LJKf/gzJhGSx3W4KnhC90pk0DD3AU
t6O+3v6Jgj9+o9bsCU+IYw9bMJ3k5XIFKujeF7KR14bBedtGkQJTW9awG8prDhnm
KFSawNoxFo08CYVXKvS4IeqO/ymLQyl28llb7vwYrxFwxWdGk4Q9iWx/9Y5NIxIj
ZzsEsa9watdfgn85EHfSKvbCigDHwKwv5UZL5A+RIWczsLOdIIvIlyu0YBQTbLl+
3OYSZ3I1Z7jSL6sNeSRYV6T6ByDUsHquy+KxhfA05D8F8oGkdvW8//C6Xi0rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2M34lYpIamImkVJWdrgKQRtFFV0wHwYDVR0j
BBgwFoAU0rJGc6+U9uinFxiHtgv06+nRXnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXJUOHZyRGpxeTRiV2FNQ3RGUDI0Q0ZVNWhNeldoSFJranZneFp5UUJR
a3AvMC9EMkIyNDY3M0FGOTRGNkU4QTcxNzE4ODdCNjBCRjRFQkU5RDE1RTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQjI0NjczQUY5NEY2RThB
NzE3MTg4N0I2MEJGNEVCRTlEMTVFNzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FyVDh2ckRqcXk0YldhTUN0RlAyNENGVTVoTXpXaEhSa2p2Z3haeVFCUWtwLzAv
MzEzNzM3MmUzODM1MmUzMTM4MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxVbQwDQYJKoZIhvcNAQELBQADggEBAGBhq9q7
P01f/r/MQtWMI+Jp8zOpx0YeotFuXUSkQ/l3V1z81j9LyufyEzE255OTvaJB4jQk
FnGipRUPm1Dvo5e2KUXGfjWaq6NK+PgCJqHtvBnunskWynTjgwfIqHRp+/dQVPyk
HSjrky+ZXoLIotRSsWaxo8PFIvAqefEHwgpC2QFZqcEIf6XeSbN6hNj35CdF+SId
+uI/HdQZTbVNJUWgyQI6Px5rHgkSlXHqfjnzmkTi3KVMioqRIs3RPuKb37aXmcRf
tSeMn6VKOr5zYuwHlp1Ocj8v66Ul5Q9J0omHozz6EUnC8zJvhEvdgs4bgvnk9dzJ
VE+MjBQ7Fjwx9K4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:43 2025 by rpki-client on console.sobornost.net