Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133322e302f32342d3234203d3e20323731303031.roa
File:                     3137372e3232332e3133322e302f32342d3234203d3e20323731303031.roa (raw, json)
Hash identifier:          HsEa4g4kAQ+ZOZ3JuXg60HlvdpHJZ+/t+cfG8fR4k3I=
Subject key identifier:   9B:F2:96:53:DC:62:34:46:5F:64:05:07:25:86:8C:F2:21:78:9C:7B
Certificate issuer:       /CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
Certificate serial:       7F015A79DC0DB29D36A5E06273AE2E9441F492E5
Authority key identifier: A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133322e302f32342d3234203d3e20323731303031.roa
Signing time:             Thu 16 Nov 2023 17:54:18 +0000
ROA not before:           Thu 16 Nov 2023 17:49:18 +0000
ROA not after:            Thu 14 Nov 2024 17:54:18 +0000
asID:                     271001
IP address blocks:        177.223.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.crl
                          rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 23:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:01:5a:79:dc:0d:b2:9d:36:a5:e0:62:73:ae:2e:94:41:f4:92:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
        Validity
            Not Before: Nov 16 17:49:18 2023 GMT
            Not After : Nov 14 17:54:18 2024 GMT
        Subject: CN=9BF29653DC6234465F64050725868CF221789C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:45:7b:2b:5e:99:0d:86:81:51:5e:3e:18:
                    c2:81:3d:9d:86:80:95:f8:d0:49:04:69:c3:af:c1:
                    a2:79:d3:4f:aa:d7:d0:9e:fa:5d:5c:ac:19:d9:fe:
                    c5:88:dc:06:f5:df:9a:46:2f:f6:9c:26:9b:1f:24:
                    0c:78:54:16:18:db:41:9a:7f:15:2b:30:d9:79:a1:
                    b9:f1:61:98:72:03:d8:31:0c:00:a0:16:81:d4:66:
                    27:a2:5f:d3:9a:1f:21:28:ba:f8:5b:29:97:ba:f9:
                    0f:4c:f5:83:fa:fd:0b:e7:4a:c4:60:7e:9e:b5:8f:
                    8f:96:3c:e2:34:49:f2:a8:e6:d3:33:94:e5:b2:3b:
                    02:5e:3f:ac:b9:2b:89:46:fa:97:fd:59:5c:75:c2:
                    8a:a4:3f:02:ec:76:5d:a4:f2:3a:a4:db:80:de:00:
                    f6:e2:72:dc:00:5c:ba:57:50:40:10:cb:40:fd:89:
                    ac:70:5d:64:13:81:4a:fc:47:18:47:59:43:b6:92:
                    cb:a8:88:ae:a5:1e:c8:9e:32:cd:cc:be:f3:00:9f:
                    43:3a:3e:b2:67:9c:4a:6b:fc:0a:02:e5:87:ed:55:
                    0c:5d:8e:19:1e:00:d0:b4:76:ef:58:ca:05:a1:b0:
                    c6:2f:db:3b:0b:af:24:73:63:20:18:36:36:08:2f:
                    49:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F2:96:53:DC:62:34:46:5F:64:05:07:25:86:8C:F2:21:78:9C:7B
            X509v3 Authority Key Identifier:
                keyid:A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133322e302f32342d3234203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:1f:c7:ec:9e:bd:ca:47:f2:c5:b7:1c:52:70:bd:58:03:ff:
         45:53:2d:9a:64:56:ca:3d:ec:48:dc:a6:7d:77:26:79:04:a5:
         9f:4e:d9:9b:c7:51:7e:7f:66:b1:ec:9b:b8:83:fa:40:e5:fc:
         db:ce:f6:38:95:61:f5:97:bf:eb:52:22:e1:aa:22:59:7f:d9:
         e9:b2:58:db:48:11:b3:46:60:46:35:87:b4:12:2f:37:b4:98:
         48:60:df:09:db:07:7a:6f:f3:b9:13:b7:53:47:cf:4d:2a:7b:
         48:1f:4d:3b:63:11:2b:38:23:1f:e9:3d:9a:62:47:e2:20:f1:
         52:eb:5f:ed:d1:cc:bf:2b:27:16:bb:6a:f4:28:0b:56:48:ce:
         78:ce:6a:88:4e:fc:e8:3b:26:61:73:4d:63:6f:3c:95:3e:ba:
         cf:d9:44:ae:79:0f:ae:da:33:d0:ff:0b:43:b9:3c:ea:e6:e0:
         bf:2c:74:71:11:86:3a:c5:20:cd:dd:d8:b8:fc:e7:e5:8e:cd:
         e2:24:a3:0a:1a:c5:d5:4c:fd:ae:a6:72:ad:62:f7:dc:99:8d:
         b9:96:f0:63:af:a6:ed:f6:5b:5f:a1:90:37:9a:e2:10:60:41:
         5d:cd:b5:c0:18:f2:3e:db:32:02:aa:1c:17:54:7d:7d:27:63:
         f6:90:95:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 00:20:31 2024 by rpki-client on console.sobornost.net