Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/3137372e382e3133362e302f32322d3234203d3e20323730353832.roa
File:                     3137372e382e3133362e302f32322d3234203d3e20323730353832.roa (raw, json)
Hash identifier:          krULwq9Rhl+VvAB64k7HqwFs18gauIlz8FGNJJMo8fQ=
Subject key identifier:   66:6F:04:FF:44:0C:74:EC:BC:E9:91:F5:31:A7:4A:04:31:C0:15:0D
Certificate issuer:       /CN=4A72675E0CB992AE4B9D50A44FF4387FA780D7CF
Certificate serial:       6E2FBB32B581C6E876FF90900758DF9220A2EC8F
Authority key identifier: 4A:72:67:5E:0C:B9:92:AE:4B:9D:50:A4:4F:F4:38:7F:A7:80:D7:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/3137372e382e3133362e302f32322d3234203d3e20323730353832.roa
Signing time:             Thu 03 Apr 2025 17:10:36 +0000
ROA not before:           Thu 03 Apr 2025 17:05:36 +0000
ROA not after:            Thu 02 Apr 2026 17:10:36 +0000
asID:                     270582
IP address blocks:        177.8.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl
                          rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2f:bb:32:b5:81:c6:e8:76:ff:90:90:07:58:df:92:20:a2:ec:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A72675E0CB992AE4B9D50A44FF4387FA780D7CF
        Validity
            Not Before: Apr  3 17:05:36 2025 GMT
            Not After : Apr  2 17:10:36 2026 GMT
        Subject: CN=666F04FF440C74ECBCE991F531A74A0431C0150D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:54:31:65:a9:fc:62:a9:9a:27:24:d8:a1:c2:
                    8a:9a:38:a3:ee:2c:16:95:8f:98:08:01:53:07:2a:
                    30:ce:b6:ba:e8:d3:be:60:d8:f7:91:69:23:f9:5c:
                    a2:f0:91:7c:5c:06:4d:5d:f0:b3:fc:b4:2b:c2:1a:
                    2e:40:fe:6d:57:3d:75:5d:13:e3:42:1d:8e:34:d2:
                    cf:6b:ac:0e:11:66:f4:42:b7:25:8d:e8:1f:b0:70:
                    b2:3e:c3:f6:68:de:b5:95:a1:1a:b1:ad:3c:ac:27:
                    32:2a:af:74:81:c6:84:73:aa:aa:b3:fa:85:23:66:
                    56:2a:99:5e:46:7d:e3:56:a7:da:36:41:d3:bf:92:
                    20:0c:cf:01:b9:0f:39:e2:71:6a:ad:85:b1:5c:da:
                    ae:f0:54:be:e1:ac:3c:66:d7:5c:bc:be:7c:58:4c:
                    38:c4:04:83:7e:cf:04:52:40:60:cf:c5:97:2e:24:
                    d4:d8:bb:9c:27:34:82:dc:59:60:f5:7e:b0:79:88:
                    58:d7:1d:ab:a0:d9:10:53:ad:47:34:49:ac:78:4e:
                    96:de:d8:be:1a:30:b4:cf:0a:b8:16:3d:78:2f:cc:
                    8c:96:bf:37:6c:91:f0:32:0b:bb:0c:44:08:d4:e6:
                    f2:3f:02:17:17:7a:fe:50:1b:cb:2c:da:ae:4b:c9:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6F:04:FF:44:0C:74:EC:BC:E9:91:F5:31:A7:4A:04:31:C0:15:0D
            X509v3 Authority Key Identifier:
                keyid:4A:72:67:5E:0C:B9:92:AE:4B:9D:50:A4:4F:F4:38:7F:A7:80:D7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/3137372e382e3133362e302f32322d3234203d3e20323730353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:89:35:5e:72:da:8b:e2:ae:e7:59:d4:83:bc:31:88:39:43:
         2c:23:c4:af:96:84:40:39:0b:3d:1f:f4:d0:c0:21:17:12:aa:
         66:10:79:39:4e:d6:94:4d:02:4c:c2:4d:ae:fe:87:c7:9e:db:
         64:11:62:ab:48:f2:e1:50:3e:f2:ca:aa:c8:e9:16:90:57:70:
         6b:ae:8b:ff:3e:95:48:48:fb:da:5f:5f:86:76:9b:73:3b:5e:
         36:a8:39:55:5e:40:39:cf:c8:f6:1e:34:a3:a9:8b:7e:be:f9:
         fa:28:e4:7d:58:b6:a3:48:79:9d:5a:4f:69:30:cb:a8:a2:3a:
         4b:e9:9c:34:bd:14:0f:c6:1a:56:5f:11:97:3d:07:e1:c2:19:
         5e:08:f3:69:7e:fa:12:78:80:1c:db:a5:4b:9e:73:50:30:5b:
         70:55:da:b6:d6:16:27:d3:15:98:28:12:ba:d9:9d:d2:bc:d6:
         0f:00:3d:88:60:66:01:8b:57:96:e4:0d:71:bf:c2:cc:ca:86:
         ce:25:49:43:92:dd:ad:ab:20:7e:7e:64:22:6d:c4:a5:26:14:
         84:2b:07:49:57:95:b8:a9:b2:c1:63:58:16:a6:f0:a8:d9:8d:
         3b:24:7a:d2:75:bf:a6:b6:86:a7:0d:09:1f:cf:69:1e:2b:f7:
         c7:37:77:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:11 2025 by rpki-client on console.sobornost.net