Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e34342e3138342e302f32322d3234203d3e203533313733.roa
File:                     3137372e34342e3138342e302f32322d3234203d3e203533313733.roa (raw, json)
Hash identifier:          nclLJ8ERFoSoqiISklMqYafqmB2hy0ojxxtO7ZfKkD4=
Subject key identifier:   2B:2A:B8:27:A3:44:13:2D:EE:C2:6A:2C:29:B9:F3:FE:C5:A9:FC:EF
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       03545DC273ABC0AEFF48E3F393FD65AA124C8654
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e34342e3138342e302f32322d3234203d3e203533313733.roa
Signing time:             Thu 06 Mar 2025 02:41:52 +0000
ROA not before:           Thu 06 Mar 2025 02:36:52 +0000
ROA not after:            Thu 05 Mar 2026 02:41:52 +0000
asID:                     53173
IP address blocks:        177.44.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:54:5d:c2:73:ab:c0:ae:ff:48:e3:f3:93:fd:65:aa:12:4c:86:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:52 2025 GMT
            Not After : Mar  5 02:41:52 2026 GMT
        Subject: CN=2B2AB827A344132DEEC26A2C29B9F3FEC5A9FCEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:5d:32:be:bf:62:50:44:d4:c4:4d:fe:79:
                    4c:46:1b:44:be:87:2d:38:5f:b1:1c:e4:f8:59:ea:
                    6b:bc:9f:dd:7f:dd:4c:14:fc:11:16:f7:81:fd:c3:
                    32:59:d6:7f:d8:31:48:41:90:ad:17:b8:29:49:c2:
                    fb:34:02:04:03:54:02:8c:97:25:1b:4a:b0:97:09:
                    e0:ef:a4:65:2c:00:72:42:5f:74:54:95:72:3d:20:
                    1b:e3:95:3a:d1:eb:1e:af:0a:0d:7b:48:30:d0:3b:
                    53:8e:4a:3b:89:dc:6b:93:bd:61:93:65:14:d4:d9:
                    98:c2:6e:a1:d7:cd:97:b0:34:0d:48:9a:74:19:79:
                    08:02:d8:23:48:64:89:3d:72:ee:5a:e1:a3:62:bd:
                    73:57:91:17:dc:79:b3:20:fb:1b:46:66:29:30:ba:
                    d2:c2:be:4b:d9:46:02:b1:15:38:c7:bd:35:6d:f0:
                    c7:90:11:d3:48:5c:0e:25:13:6c:4d:9c:35:ff:eb:
                    60:ab:f3:cc:c7:18:74:81:68:62:82:a0:fc:99:93:
                    37:c9:48:0d:4f:ff:5b:e5:a6:db:40:da:5c:43:b7:
                    eb:52:c3:56:3c:0e:c0:1e:f1:fd:dc:d7:30:eb:09:
                    eb:11:7b:00:82:86:76:3e:0b:b5:b4:81:74:d6:ec:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2A:B8:27:A3:44:13:2D:EE:C2:6A:2C:29:B9:F3:FE:C5:A9:FC:EF
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e34342e3138342e302f32322d3234203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:e7:bb:09:92:3f:41:df:a6:ea:1a:d8:ae:67:c3:6e:3b:76:
         5e:74:bc:e5:1b:f0:1e:92:65:8a:f5:78:b7:fe:60:9a:d1:26:
         cf:15:10:53:4d:1d:5c:65:13:ae:86:94:29:19:0e:8b:de:73:
         9e:57:74:ec:2d:a0:0a:4a:a0:c9:e9:47:3a:38:fd:5c:06:8b:
         34:9f:dc:f2:f9:6f:ce:c9:11:ce:ec:a6:61:75:65:05:b2:c8:
         c6:a2:bd:97:02:b4:45:c9:9c:20:e2:9b:2e:45:db:e9:97:8b:
         14:c7:65:f1:c7:6b:ab:ef:7b:9c:ec:f6:79:7b:f1:84:a4:ae:
         92:02:fe:66:f9:83:03:f0:66:1f:a1:0d:7e:b2:1b:bc:05:02:
         05:08:fe:c1:c7:10:bc:0a:5a:3d:d3:a7:2a:2a:42:cd:a9:76:
         d8:2b:7a:7f:52:9a:03:0a:ac:f4:26:64:8e:d9:a1:e5:d2:23:
         47:a0:00:31:c6:af:eb:cf:4e:e8:98:83:a6:8f:23:dd:1d:a9:
         e2:25:06:b8:5e:05:ed:59:83:be:c9:f5:4e:fa:2b:f1:18:2d:
         30:71:5d:c1:fe:63:ad:02:59:59:23:ad:97:e0:85:68:e5:65:
         0a:6d:93:ab:80:a1:e3:9e:7b:36:49:7f:98:a3:81:55:79:76:
         a1:96:bb:ea
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUA1RdwnOrwK7/SOPzk/1lqhJMhlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNTAzMDYwMjM2NTJaFw0yNjAzMDUwMjQxNTJaMDMxMTAvBgNV
BAMTKDJCMkFCODI3QTM0NDEzMkRFRUMyNkEyQzI5QjlGM0ZFQzVBOUZDRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSF0yvr9iUETUxE3+eUxGG0S+
hy04X7Ec5PhZ6mu8n91/3UwU/BEW94H9wzJZ1n/YMUhBkK0XuClJwvs0AgQDVAKM
lyUbSrCXCeDvpGUsAHJCX3RUlXI9IBvjlTrR6x6vCg17SDDQO1OOSjuJ3GuTvWGT
ZRTU2ZjCbqHXzZewNA1ImnQZeQgC2CNIZIk9cu5a4aNivXNXkRfcebMg+xtGZikw
utLCvkvZRgKxFTjHvTVt8MeQEdNIXA4lE2xNnDX/62Cr88zHGHSBaGKCoPyZkzfJ
SA1P/1vlpttA2lxDt+tSw1Y8DsAe8f3c1zDrCesRewCChnY+C7W0gXTW7GjtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKyq4J6NEEy3uwmosKbnz/sWp/O8wHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzEzNzM3MmUzNDM0MmUzMTM4MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz
MzEzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSy4MA0GCSqGSIb3DQEBCwUAA4IBAQCb57sJkj9B
36bqGtiuZ8NuO3ZedLzlG/AekmWK9Xi3/mCa0SbPFRBTTR1cZROuhpQpGQ6L3nOe
V3TsLaAKSqDJ6Uc6OP1cBos0n9zy+W/OyRHO7KZhdWUFssjGor2XArRFyZwg4psu
Rdvpl4sUx2Xxx2ur73uc7PZ5e/GEpK6SAv5m+YMD8GYfoQ1+shu8BQIFCP7BxxC8
Clo906cqKkLNqXbYK3p/UpoDCqz0JmSO2aHl0iNHoAAxxq/rz07omIOmjyPdHani
JQa4XgXtWYO+yfVO+ivxGC0wcV3B/mOtAllZI62X4IVo5WUKbZOrgKHjnns2SX+Y
o4FVeXahlrvq
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net