Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa
File:                     3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          FvMNaIxsdQxohhve57nqsQKQcWv5L4XzZTwgSCc4nRk=
Subject key identifier:   4D:DF:2F:D8:AE:51:13:83:6C:FB:FF:9F:08:40:7C:03:FA:66:38:C3
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       0D947DAD9D87637EDBB75E9CBA8285049FA1B388
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:19 +0000
ROA not before:           Thu 06 Mar 2025 09:37:19 +0000
ROA not after:            Thu 05 Mar 2026 09:42:19 +0000
asID:                     52613
IP address blocks:        177.125.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:94:7d:ad:9d:87:63:7e:db:b7:5e:9c:ba:82:85:04:9f:a1:b3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:19 2025 GMT
            Not After : Mar  5 09:42:19 2026 GMT
        Subject: CN=4DDF2FD8AE5113836CFBFF9F08407C03FA6638C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:91:05:58:9a:0a:28:1d:c5:d3:1e:6a:22:
                    2c:2b:5a:c2:55:7e:bb:38:a5:b0:b0:92:c3:7c:e5:
                    ec:65:95:81:16:dd:53:94:bb:2f:c5:55:6f:48:cb:
                    35:0d:b5:42:0d:a2:50:ae:9b:b6:94:1b:0c:95:5f:
                    39:7e:bb:5f:3d:25:1d:ec:65:fd:fe:fe:67:c6:eb:
                    93:ad:4f:20:31:ad:cc:cb:ed:92:e4:61:1d:ee:26:
                    ff:01:32:5e:50:d1:19:d5:8e:f0:f2:ab:3f:0c:3a:
                    b9:7f:40:3a:6b:d7:7c:80:b1:7a:30:a3:54:87:5c:
                    ce:45:6d:c5:90:22:6e:fe:79:6b:ed:77:29:4b:82:
                    b9:4d:e2:a0:b4:93:a0:61:51:fe:68:75:ad:15:59:
                    b0:ae:b8:ed:e5:95:46:55:60:4b:33:a3:fa:07:06:
                    f9:43:fb:e3:de:b9:e7:79:28:e3:ac:40:79:8d:d4:
                    7d:0a:55:24:5c:5f:d8:91:ef:61:fa:ce:f3:24:31:
                    90:8c:a6:4d:62:75:99:e8:cc:56:ac:eb:a6:81:9e:
                    c6:6a:a4:18:0d:54:b1:b4:84:1f:8b:88:22:c1:ea:
                    ab:61:f1:35:1b:53:5f:98:00:52:1d:6c:98:69:cd:
                    e2:b4:8f:83:83:f1:09:f3:2b:d7:f5:e9:d4:44:22:
                    5a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DF:2F:D8:AE:51:13:83:6C:FB:FF:9F:08:40:7C:03:FA:66:38:C3
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:d5:0d:ae:80:86:54:cc:f7:87:bf:d8:d1:16:8d:cd:9d:4e:
         6e:d9:93:87:28:30:b7:bf:81:7e:9f:b7:98:80:b0:0e:9c:76:
         4d:53:f0:f1:2d:8d:b8:bd:93:62:97:41:52:97:dc:95:21:e2:
         3e:70:25:48:69:4d:1a:83:f1:24:69:c5:d8:0c:39:8d:f8:36:
         6d:9a:71:c1:28:c3:b1:06:01:f5:8f:62:c2:7b:b1:f3:4e:e5:
         69:3f:3e:2e:fb:d4:75:41:3c:a0:df:99:58:40:ff:6f:8f:b8:
         12:f9:cf:2b:d4:6b:9b:93:d1:33:29:30:f0:28:d1:30:7e:d0:
         a8:6b:4e:c3:fa:da:1e:02:d2:18:5d:ff:1d:93:cf:49:ab:44:
         93:1e:dc:a5:27:a9:0a:dc:6a:29:ff:6e:f0:60:9d:7d:ca:bb:
         a1:e0:19:42:d1:03:6b:f1:93:36:34:e6:e9:1b:d9:13:93:dd:
         13:1d:77:14:da:0a:e6:4c:d7:5a:bc:f4:7e:14:7d:33:3e:8e:
         fc:cb:8a:40:f8:ca:e3:ed:9c:9e:22:bf:54:d2:d4:be:6a:02:
         c1:13:ac:3c:d2:3e:46:ed:b5:28:1f:36:e3:2f:d4:6f:b5:90:
         de:c1:6a:ea:80:f1:f2:02:24:81:d2:61:9e:51:07:f3:9f:25:
         ba:a1:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:43 2025 by rpki-client on console.sobornost.net