Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137302e38312e3139322e302f32322d3232203d3e203631383332.roa
File:                     3137302e38312e3139322e302f32322d3232203d3e203631383332.roa (raw, json)
Hash identifier:          xPFy0Hb7J5Eyn/t+lL5uZw/4xhe2swo6cGIjnyJTmJM=
Subject key identifier:   DC:7E:C7:7A:BB:3C:92:3A:3F:56:BC:02:E4:41:76:BB:4B:43:DA:12
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       7AAC4551D1816328EE9398928ED12B69206A90E8
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137302e38312e3139322e302f32322d3232203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:47 +0000
ROA not before:           Thu 05 Oct 2023 17:46:47 +0000
ROA not after:            Thu 03 Oct 2024 17:51:47 +0000
asID:                     61832
IP address blocks:        170.81.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl
                          rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 10:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ac:45:51:d1:81:63:28:ee:93:98:92:8e:d1:2b:69:20:6a:90:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:47 2023 GMT
            Not After : Oct  3 17:51:47 2024 GMT
        Subject: CN=DC7EC77ABB3C923A3F56BC02E44176BB4B43DA12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:4b:66:3d:35:f1:42:55:5e:92:01:5d:db:
                    b4:f5:83:97:ba:dc:f9:a9:e7:21:dc:e0:a5:96:41:
                    a4:e2:58:b0:74:77:25:c3:d4:65:0f:06:7f:88:15:
                    87:e5:de:eb:d6:ae:1a:c9:3f:67:13:fb:fa:d0:ec:
                    3b:f9:f0:f9:aa:17:75:7a:75:da:f7:1e:06:bd:b9:
                    57:d4:00:1c:2d:43:dc:c5:fa:66:b8:90:f3:d8:3a:
                    f9:fa:2d:ae:15:92:d7:a1:15:d7:0a:d6:5e:9d:61:
                    89:f7:70:9e:98:d4:41:ab:d2:b7:79:e7:78:48:de:
                    29:dd:ad:9f:12:6c:cf:ef:75:8d:c5:9d:cf:4b:f1:
                    05:3c:14:6e:b0:0e:09:25:16:ca:c3:9a:6a:c6:57:
                    fe:0c:53:a3:de:81:ea:bf:4a:ab:7a:40:6b:4e:dd:
                    d2:17:00:18:b9:55:88:ac:2e:83:5f:58:5a:5c:31:
                    4e:05:53:fd:a5:0f:86:51:dc:12:39:64:24:86:4d:
                    4f:2b:ab:28:27:42:9c:e9:28:e3:a7:67:06:29:db:
                    60:98:fc:fc:76:20:6c:a9:6e:39:20:b1:01:4b:a9:
                    12:9b:9d:8a:ae:e7:36:c6:32:ca:20:5b:fd:6f:fb:
                    6f:d4:37:ed:bd:34:55:66:88:46:42:34:c6:9f:a7:
                    44:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7E:C7:7A:BB:3C:92:3A:3F:56:BC:02:E4:41:76:BB:4B:43:DA:12
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137302e38312e3139322e302f32322d3232203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:c1:18:a3:3f:00:ae:1c:38:a0:9f:25:b2:2b:48:b0:1b:76:
         50:88:f3:c3:17:5c:8a:10:cf:28:99:9c:f6:74:22:68:0a:4c:
         55:49:4e:82:f2:bf:5d:6d:d2:60:90:75:14:37:a6:c5:17:d6:
         3b:8b:f5:55:ce:99:77:29:89:b9:02:a6:d8:f1:ab:45:ee:a6:
         04:52:a4:72:ad:59:0c:7a:65:94:bf:7c:fd:33:4c:88:ce:e3:
         51:06:10:a9:24:66:3e:ea:a4:78:37:fb:d8:46:d6:bb:9f:c2:
         ff:98:86:7c:9b:02:b0:b8:c9:69:f8:e3:d4:81:17:bd:a4:66:
         29:26:76:49:e9:7c:2e:dc:9f:4b:0b:8d:ba:4b:07:c3:d7:46:
         2f:ed:8b:74:27:30:7c:3f:7c:45:b4:ff:3b:ad:7b:18:25:f9:
         14:17:06:e4:06:f3:c8:52:8e:4e:6c:d5:29:fb:18:3c:3b:83:
         21:ec:ea:e2:08:66:bd:4b:5e:82:79:7a:cb:5f:cf:42:f7:2e:
         95:bd:39:7a:32:a3:10:78:87:35:9b:8b:06:5c:f6:37:7a:51:
         4a:ed:8f:73:88:1b:1a:80:c1:4b:2d:6b:98:f7:30:bb:9e:87:
         49:88:a4:3c:7c:6e:2b:ad:c5:fd:ba:a1:ea:e4:20:f2:8f:d1:
         86:5a:2a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:44:02 2024 by rpki-client on console.sobornost.net