Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138322e302f32342d3234203d3e20323632363131.roa
File:                     3137372e38352e3138322e302f32342d3234203d3e20323632363131.roa (raw, json)
Hash identifier:          c+wpnAt8p4CVC0jQHi09TbnFM57L5Sul1Cn2jZpidAY=
Subject key identifier:   87:2A:26:0A:5F:04:EA:57:C4:C7:B2:77:29:AF:52:2D:E7:4C:93:63
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       6F1688ADE30910773B666F41FAD2DE9BEB9AA852
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138322e302f32342d3234203d3e20323632363131.roa
Signing time:             Wed 19 Mar 2025 14:30:13 +0000
ROA not before:           Wed 19 Mar 2025 14:25:13 +0000
ROA not after:            Wed 18 Mar 2026 14:30:13 +0000
asID:                     262611
IP address blocks:        177.85.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:16:88:ad:e3:09:10:77:3b:66:6f:41:fa:d2:de:9b:eb:9a:a8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Mar 19 14:25:13 2025 GMT
            Not After : Mar 18 14:30:13 2026 GMT
        Subject: CN=872A260A5F04EA57C4C7B27729AF522DE74C9363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:11:b2:9c:34:28:b4:db:b3:b7:85:38:3d:
                    0d:a4:19:64:c8:8b:18:96:fb:6a:ee:e4:32:01:25:
                    68:61:22:b1:bb:66:99:ba:d3:31:3a:2d:b0:38:6e:
                    33:22:2e:c5:31:22:25:8b:b1:39:50:a5:8d:bc:ba:
                    fa:43:5f:60:72:41:a3:7f:3f:60:b8:b1:a0:14:c1:
                    47:3c:1c:dd:3a:71:45:a4:21:c8:eb:79:39:1c:05:
                    bf:82:c5:b4:8a:6c:1c:21:0d:ad:c2:53:01:18:49:
                    ee:0b:ff:04:35:5d:59:47:af:a0:3e:83:01:44:6c:
                    eb:e2:ad:23:26:8c:4b:6f:f5:31:3a:8a:2d:fa:63:
                    9c:54:53:f9:3d:20:d9:99:e9:5b:e6:16:78:99:86:
                    55:16:3a:2a:e9:de:69:8d:eb:d3:77:98:ce:ae:7b:
                    e5:43:7e:f2:d7:eb:66:4d:aa:a5:b1:18:83:cb:39:
                    88:97:8e:11:b8:76:33:eb:74:2b:db:58:24:cd:0c:
                    8f:19:1f:79:97:f9:86:50:0e:d9:11:ab:9e:e6:0c:
                    79:8e:30:e3:22:15:11:6f:70:c7:91:7e:5b:9d:49:
                    1f:52:ad:e4:2e:03:a0:f6:0c:97:5b:5e:18:dc:f7:
                    0c:45:42:dc:a7:71:5d:2e:68:64:86:24:9f:c4:81:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2A:26:0A:5F:04:EA:57:C4:C7:B2:77:29:AF:52:2D:E7:4C:93:63
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138322e302f32342d3234203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:98:95:7c:ee:fb:d9:2e:7d:13:95:4e:2a:2e:b4:0d:45:2e:
         26:fb:cc:df:88:23:9f:74:f9:cb:49:18:1a:d8:b0:f6:2e:3d:
         f1:91:22:77:ae:a1:2e:78:19:b3:5d:99:ec:fe:12:5f:fe:dc:
         21:7b:24:63:d5:f3:95:00:c7:42:8c:b7:98:02:f4:12:c5:32:
         0c:5e:37:9b:1e:79:00:a5:eb:21:a3:b9:70:15:13:78:77:71:
         c0:4a:11:e1:9a:c4:83:c4:04:98:97:5a:80:1e:53:31:18:43:
         c5:f0:a0:ee:96:75:13:e3:ec:30:c0:ab:87:2c:39:a0:9e:bc:
         62:54:4d:7b:30:40:af:c0:33:ea:b8:36:d4:bd:18:8d:ff:91:
         73:4c:d0:9e:3c:db:c1:f2:09:f5:df:9b:89:24:1c:51:b6:9f:
         63:ab:f7:10:5f:e7:c9:2b:04:5b:10:21:f9:7a:79:5c:5c:1b:
         12:11:c8:8f:83:15:eb:20:ef:84:27:a9:72:6d:77:10:7a:41:
         38:b7:f3:c7:d3:8b:5a:0b:33:c2:be:15:03:67:5a:d9:e6:d8:
         18:ea:95:e5:0c:17:0f:2e:ae:d5:e7:c3:18:0c:03:d0:7f:69:
         28:49:95:5a:4a:50:a5:96:5f:70:8f:20:14:7b:c6:21:68:78:
         a9:b2:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:43 2025 by rpki-client on console.sobornost.net