Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/3137372e35322e3137302e302f32342d3234203d3e20323632343439.roa
File:                     3137372e35322e3137302e302f32342d3234203d3e20323632343439.roa (raw, json)
Hash identifier:          7nYq6K8fdw4ZRybGXDs4Kkd0F3fRmBUFACD2hQSjlMM=
Subject key identifier:   B5:16:99:31:95:D2:71:DC:43:A7:C0:91:2E:4E:6B:9A:70:9D:74:2E
Certificate issuer:       /CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523
Certificate serial:       371D85F81DC64E479DFD248D85DABAC2AFB9CDC8
Authority key identifier: 5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/3137372e35322e3137302e302f32342d3234203d3e20323632343439.roa
Signing time:             Wed 05 Mar 2025 23:41:50 +0000
ROA not before:           Wed 05 Mar 2025 23:36:50 +0000
ROA not after:            Wed 04 Mar 2026 23:41:50 +0000
asID:                     262449
IP address blocks:        177.52.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl
                          rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 22:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1d:85:f8:1d:c6:4e:47:9d:fd:24:8d:85:da:ba:c2:af:b9:cd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523
        Validity
            Not Before: Mar  5 23:36:50 2025 GMT
            Not After : Mar  4 23:41:50 2026 GMT
        Subject: CN=B516993195D271DC43A7C0912E4E6B9A709D742E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:51:5d:44:70:3c:05:80:b3:34:b2:19:89:
                    90:a6:9b:75:e5:28:72:06:e8:33:89:84:d0:0c:8e:
                    bb:13:66:33:20:fc:6a:35:41:79:4b:b1:e6:8c:eb:
                    9b:77:85:93:36:e2:ea:f7:ff:75:4e:00:53:b4:4b:
                    79:d0:25:5b:30:ff:0a:12:58:d7:00:fc:9b:2b:39:
                    f2:7b:b0:23:2d:d1:72:af:d3:7e:b1:c8:ba:38:b5:
                    44:d1:21:ca:f2:b6:01:4f:b2:bc:40:0b:60:ee:54:
                    6b:42:59:fd:e1:57:c8:e7:91:ec:92:58:71:21:19:
                    59:c0:d5:63:9c:ee:a5:e5:12:2d:bb:71:79:0f:fc:
                    ef:a2:77:7b:68:30:08:97:85:c9:55:e3:95:d7:97:
                    1e:5b:60:60:4d:aa:14:38:11:1e:5e:44:db:0f:ba:
                    00:7a:78:af:f0:d6:8e:bd:f8:63:65:d3:b9:5c:10:
                    45:fe:bf:b7:3d:0a:2f:ba:27:fd:98:7d:7e:60:85:
                    06:e0:72:da:5d:67:2c:53:b0:72:e3:73:cb:58:2a:
                    2b:fe:f1:82:81:a6:c6:25:f3:b1:82:7b:0f:e1:b8:
                    e5:ad:e1:80:5e:b0:06:e2:2b:58:e5:90:10:57:81:
                    57:3b:2b:ee:f8:37:95:13:fc:e2:cd:c2:d8:e6:87:
                    6a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:16:99:31:95:D2:71:DC:43:A7:C0:91:2E:4E:6B:9A:70:9D:74:2E
            X509v3 Authority Key Identifier:
                keyid:5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/3137372e35322e3137302e302f32342d3234203d3e20323632343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:ad:7e:b2:20:c5:aa:5a:a8:60:03:c5:45:64:49:88:1d:aa:
         8f:ef:2a:c9:ca:af:a7:a8:8e:86:f0:c2:53:41:1f:a4:27:75:
         53:b6:44:31:78:36:df:1d:73:8b:57:7a:de:ca:07:0f:06:58:
         a4:cd:58:2e:83:bf:31:b2:c8:e1:7b:d6:7e:3f:33:0a:9e:a9:
         59:83:b2:02:01:16:eb:3e:fc:17:d5:7f:cd:8a:e3:f4:49:1c:
         bd:c1:a6:c3:f8:0b:b5:ca:15:2e:e3:8b:63:bd:c8:23:58:a0:
         48:e8:07:96:4e:a5:9c:7f:f8:68:7a:51:ee:48:68:0d:f3:b2:
         12:ac:9c:39:8c:7a:b6:d9:db:e2:a5:90:19:9a:7c:7d:2c:2d:
         c7:d7:b5:84:7f:49:f1:d8:17:29:54:3c:df:09:a6:84:e3:00:
         8c:a4:ea:d7:b3:00:2f:81:25:cc:5c:66:0d:10:31:df:fd:78:
         84:26:47:dc:f2:99:99:f2:5e:c1:ea:47:ec:b1:37:0d:06:58:
         c0:95:fd:9f:c6:cc:ca:83:81:14:47:24:11:de:04:96:3e:5d:
         ea:33:f4:7b:9c:ea:2b:eb:35:f3:02:bf:86:2a:2e:e7:44:b1:
         bc:cc:70:15:67:c8:6c:6c:c4:e4:8a:bb:ec:0e:8f:ad:73:23:
         48:bd:14:f3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNx2F+B3GTked/SSNhdq6wq+5zcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ0M0FGMkZDM0EwQkQwOTVGRDA2MjYyNUM1RUNFMzRC
ODRBOTUyMzAeFw0yNTAzMDUyMzM2NTBaFw0yNjAzMDQyMzQxNTBaMDMxMTAvBgNV
BAMTKEI1MTY5OTMxOTVEMjcxREM0M0E3QzA5MTJFNEU2QjlBNzA5RDc0MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyFFdRHA8BYCzNLIZiZCmm3Xl
KHIG6DOJhNAMjrsTZjMg/Go1QXlLseaM65t3hZM24ur3/3VOAFO0S3nQJVsw/woS
WNcA/JsrOfJ7sCMt0XKv036xyLo4tUTRIcrytgFPsrxAC2DuVGtCWf3hV8jnkeyS
WHEhGVnA1WOc7qXlEi27cXkP/O+id3toMAiXhclV45XXlx5bYGBNqhQ4ER5eRNsP
ugB6eK/w1o69+GNl07lcEEX+v7c9Ci+6J/2YfX5ghQbgctpdZyxTsHLjc8tYKiv+
8YKBpsYl87GCew/huOWt4YBesAbiK1jlkBBXgVc7K+74N5UT/OLNwtjmh2rtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtRaZMZXScdxDp8CRLk5rmnCddC4wHwYDVR0j
BBgwFoAUXUOvL8OgvQlf0GJiXF7ONLhKlSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJR
NkcvMS81RDQzQUYyRkMzQTBCRDA5NUZEMDYyNjI1QzVFQ0UzNEI4NEE5NTIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVENDNBRjJGQzNBMEJEMDk1
RkQwNjI2MjVDNUVDRTM0Qjg0QTk1MjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NzVnNYbmdHcmpnWmlmNEhKN0JZUDFHdWpzMzVEWlg2U0REamVDNVliUTZHLzEv
MzEzNzM3MmUzNTMyMmUzMTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxNKowDQYJKoZIhvcNAQELBQADggEBAAytfrIg
xapaqGADxUVkSYgdqo/vKsnKr6eojobwwlNBH6QndVO2RDF4Nt8dc4tXet7KBw8G
WKTNWC6DvzGyyOF71n4/MwqeqVmDsgIBFus+/BfVf82K4/RJHL3BpsP4C7XKFS7j
i2O9yCNYoEjoB5ZOpZx/+Gh6Ue5IaA3zshKsnDmMerbZ2+KlkBmafH0sLcfXtYR/
SfHYFylUPN8JpoTjAIyk6tezAC+BJcxcZg0QMd/9eIQmR9zymZnyXsHqR+yxNw0G
WMCV/Z/GzMqDgRRHJBHeBJY+Xeoz9Huc6ivrNfMCv4YqLudEsbzMcBVnyGxsxOSK
u+wOj61zI0i9FPM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:40 2025 by rpki-client on console.sobornost.net