Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138322e302f32332d3233203d3e20323632363131.roa
File:                     3137372e38352e3138322e302f32332d3233203d3e20323632363131.roa (raw, json)
Hash identifier:          7dC3OTC/PLH/EI4TDPjUcVJsr+MK/H0fZT8ilrP0kr4=
Subject key identifier:   E6:F8:64:F5:B1:97:2A:0D:B6:B1:B9:28:57:26:24:F1:DE:EF:B3:1F
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       528D0DDA8D4518870A1130173DAF3D2A1D8636CC
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138322e302f32332d3233203d3e20323632363131.roa
Signing time:             Wed 19 Mar 2025 14:30:13 +0000
ROA not before:           Wed 19 Mar 2025 14:25:13 +0000
ROA not after:            Wed 18 Mar 2026 14:30:13 +0000
asID:                     262611
IP address blocks:        177.85.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8d:0d:da:8d:45:18:87:0a:11:30:17:3d:af:3d:2a:1d:86:36:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Mar 19 14:25:13 2025 GMT
            Not After : Mar 18 14:30:13 2026 GMT
        Subject: CN=E6F864F5B1972A0DB6B1B928572624F1DEEFB31F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:cd:02:00:5a:11:fa:82:c7:c0:08:9f:63:
                    1f:6d:7a:08:5c:06:f1:7c:c4:15:70:6a:b0:e2:49:
                    1f:39:aa:f8:b1:46:10:97:6a:ad:b9:d9:e4:62:41:
                    35:0b:33:52:90:40:8a:e6:89:0b:1b:d6:4a:1f:e0:
                    e6:e0:d3:46:58:25:ef:fa:af:85:d9:2a:7f:8e:61:
                    71:1f:57:17:43:46:af:5c:3f:69:43:f4:10:01:c7:
                    d9:3a:05:ef:b4:f7:88:42:ab:17:6b:52:0e:38:95:
                    76:e7:38:e2:87:de:92:3a:65:46:bc:5c:47:db:79:
                    e1:10:bd:8d:15:de:0b:55:5c:d6:db:37:2b:cb:ea:
                    71:d3:82:a0:45:6f:19:79:46:c9:73:e5:12:ea:3c:
                    e6:3a:a9:3e:56:14:0b:f1:e8:9e:64:ca:89:dd:e4:
                    ed:fe:bf:98:df:8d:69:dc:4d:51:01:12:43:af:0f:
                    e2:7b:ad:23:0b:1e:f8:11:d1:4c:1b:b8:f5:2d:58:
                    b6:4e:ad:60:29:da:67:9c:39:77:92:e1:a0:f9:aa:
                    13:b9:24:f8:2b:d3:35:1e:fa:6a:d9:0f:bf:3d:18:
                    96:91:7d:30:b7:14:dd:a4:b0:7f:e0:9e:c2:8d:39:
                    c9:73:27:8b:0c:53:4a:48:9b:c9:5f:75:2c:95:74:
                    84:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F8:64:F5:B1:97:2A:0D:B6:B1:B9:28:57:26:24:F1:DE:EF:B3:1F
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138322e302f32332d3233203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:a0:21:cc:52:72:f6:72:04:f7:fc:67:ff:40:e2:79:09:06:
         60:11:24:12:27:65:e8:d9:94:4d:bc:29:3c:36:16:ae:f3:47:
         34:9d:ba:1e:e5:58:be:ca:6a:12:e3:ac:a6:1e:1b:07:c5:76:
         bf:7d:25:c1:91:b8:81:5e:8c:e7:ec:6b:29:5a:91:a8:e1:bb:
         b2:89:52:da:a3:c9:a8:4c:4f:56:a1:e4:38:a4:38:43:e3:a7:
         db:01:d3:78:8b:39:12:92:dc:62:74:5b:e7:7f:1f:d1:4f:a8:
         d4:09:c8:5f:e9:f9:90:d7:b2:b0:27:94:a3:fa:90:66:6e:a4:
         09:6f:2f:2b:5e:d9:6f:5f:54:dd:a4:bf:01:aa:31:11:b7:a7:
         59:2d:7f:5b:a4:32:7b:e7:69:c8:c4:f8:5d:7d:43:2b:4e:5d:
         0f:25:ed:55:48:a5:35:11:99:14:62:c6:08:4b:52:8b:90:1d:
         f2:ea:db:0b:ae:27:88:6d:9f:73:9c:41:36:0c:5c:46:fa:b3:
         78:65:c0:ab:d2:05:ae:4f:2b:ec:a2:e1:11:14:79:72:ad:88:
         b4:09:68:51:b5:98:4e:b8:11:f7:7f:ea:16:6f:99:4c:17:a6:
         ef:aa:5b:40:0d:b5:5b:23:dd:aa:b2:f6:5b:ad:c1:c7:e2:41:
         61:f9:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:43 2025 by rpki-client on console.sobornost.net