Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e36302e302f32322d3232203d3e20323638303138.roa
File:                     3137372e33392e36302e302f32322d3232203d3e20323638303138.roa (raw, json)
Hash identifier:          7Jlop5xESqDuQ4m4aNjUT3LXJ4bErHS0tSvRwS+Cclw=
Subject key identifier:   66:7C:5F:0D:DE:D8:E7:82:7C:9C:D7:DE:ED:72:C9:CB:C4:08:8F:40
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       3070C8E1467ACBEE73056857CBBEF599E8B92043
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e36302e302f32322d3232203d3e20323638303138.roa
Signing time:             Thu 05 Oct 2023 17:51:47 +0000
ROA not before:           Thu 05 Oct 2023 17:46:47 +0000
ROA not after:            Thu 03 Oct 2024 17:51:47 +0000
asID:                     268018
IP address blocks:        177.39.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl
                          rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 10:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:70:c8:e1:46:7a:cb:ee:73:05:68:57:cb:be:f5:99:e8:b9:20:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:47 2023 GMT
            Not After : Oct  3 17:51:47 2024 GMT
        Subject: CN=667C5F0DDED8E7827C9CD7DEED72C9CBC4088F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:b0:3c:4a:11:45:b5:79:6f:0a:80:30:c8:
                    33:e4:6b:78:5f:5f:d8:9c:0e:e3:cc:05:ad:05:a7:
                    41:de:76:9f:b2:ad:ed:a6:61:74:4a:51:42:2a:7f:
                    86:89:59:15:dd:11:ca:61:22:12:9b:2b:76:da:ae:
                    7e:2d:2f:53:0a:ea:e8:d0:a1:bc:5b:5e:1f:93:2f:
                    92:fb:73:c7:92:9c:55:e7:38:4f:8b:e5:ce:eb:8b:
                    e2:39:12:59:c6:43:ee:e9:fb:6c:ec:93:15:59:b0:
                    65:51:a1:52:80:8f:1d:f4:5e:ca:95:dd:42:7e:fb:
                    d3:23:99:c5:74:c0:56:70:9c:7d:3c:b7:8f:33:74:
                    ca:a0:eb:79:98:c9:de:bb:db:c7:55:6b:e0:cb:55:
                    2b:9d:66:b8:54:f0:5f:00:57:88:cb:2f:db:3c:a4:
                    e8:f2:38:8f:d1:3d:20:8b:7e:33:c7:13:24:a0:9a:
                    7d:ef:18:65:3c:43:7f:26:7c:e0:28:2c:c6:96:6e:
                    d5:1d:d4:3c:35:be:99:35:4d:68:71:42:bd:0d:55:
                    a2:27:73:92:3d:05:ed:ad:eb:02:da:4e:f0:40:ab:
                    e7:ab:b5:3f:9d:43:47:66:89:06:93:5d:04:0e:16:
                    37:6c:a6:90:cf:f6:d5:70:08:93:5d:60:65:72:20:
                    7a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7C:5F:0D:DE:D8:E7:82:7C:9C:D7:DE:ED:72:C9:CB:C4:08:8F:40
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e36302e302f32322d3232203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:a7:61:72:01:d8:cf:f1:16:15:64:67:15:b3:be:84:35:48:
         02:fc:25:68:28:75:2c:8d:80:14:95:fa:74:0b:eb:6d:48:d7:
         aa:57:5d:0b:8c:a4:d6:56:da:b1:61:9f:45:4d:d5:22:97:9d:
         44:61:56:64:b3:8f:54:4d:c4:4c:37:3b:d2:7b:5a:10:c4:9e:
         a2:f9:9e:b0:8e:4d:8b:91:25:b0:f2:08:23:b9:4f:84:a1:f5:
         bc:6e:03:4a:e7:76:69:8f:8d:05:c0:6f:02:87:55:47:f4:1a:
         b7:04:49:37:7c:7d:d3:93:b4:2b:fa:1f:73:85:5d:2c:3c:33:
         48:2d:d8:de:d7:90:f5:47:59:8e:55:56:b5:1c:39:86:2d:df:
         79:7d:3f:9e:f2:c0:d8:98:b0:8c:71:b1:eb:33:98:ab:3f:73:
         e3:37:80:7a:dd:b0:3c:83:45:fa:b7:8a:9e:3d:1d:ce:a4:0c:
         60:ae:c3:de:5e:29:ca:9b:f5:c1:5f:4c:43:c5:bb:34:f4:28:
         1c:87:24:7e:a4:83:88:67:64:a3:c0:21:7e:24:11:ff:c5:ec:
         62:3b:8e:60:83:35:0a:35:db:70:a1:43:58:1f:b5:ca:1e:e2:
         4e:40:2e:1c:43:de:0f:bb:3b:d5:ea:14:3d:cf:5d:41:e5:03:
         72:ea:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:44:02 2024 by rpki-client on console.sobornost.net