Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137312e302f32342d3234203d3e203532363133.roa
File:                     3137372e3132352e3137312e302f32342d3234203d3e203532363133.roa (raw, json)
Hash identifier:          iacsmD01wp6pGjFcKwAXAA6zVKlA4PB3PHMMJbDWc10=
Subject key identifier:   C6:D2:8C:CE:38:C5:C3:44:DD:E7:48:24:E6:A5:47:DD:7B:4B:48:E8
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       4B32D262F06265304F3CF200398FABE2902AA0EF
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137312e302f32342d3234203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:18 +0000
ROA not before:           Thu 06 Mar 2025 09:37:18 +0000
ROA not after:            Thu 05 Mar 2026 09:42:18 +0000
asID:                     52613
IP address blocks:        177.125.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:32:d2:62:f0:62:65:30:4f:3c:f2:00:39:8f:ab:e2:90:2a:a0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:18 2025 GMT
            Not After : Mar  5 09:42:18 2026 GMT
        Subject: CN=C6D28CCE38C5C344DDE74824E6A547DD7B4B48E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:92:07:a5:f2:6a:7e:8a:45:23:5a:24:3a:
                    fd:09:52:1c:ea:2b:71:7d:03:6a:84:91:f0:81:2c:
                    ce:0e:29:76:01:dc:3d:9f:51:3d:86:fc:1d:b3:51:
                    20:25:70:cf:b6:ab:a0:78:56:c9:86:7e:2f:6e:37:
                    b8:2f:81:c1:fb:73:f3:21:d6:c7:16:30:f1:4c:97:
                    9e:52:56:e2:89:87:15:29:8d:79:22:f5:d8:58:18:
                    8d:cb:75:db:18:2d:b3:74:35:c3:c8:8b:38:39:3f:
                    35:0c:01:f0:6a:7a:fe:91:44:64:cb:69:e4:44:d1:
                    28:37:ea:5a:af:7b:54:7c:6d:af:35:ba:c3:31:94:
                    24:96:d8:78:58:ba:0a:ed:f9:d5:6c:14:ef:d5:dd:
                    10:c5:4b:8e:6a:8c:c0:e7:44:e7:30:72:88:7c:78:
                    cc:e9:f4:d7:ea:f4:f0:08:2a:a1:47:dd:49:ad:83:
                    2e:9f:ec:e5:e4:f7:29:f5:48:95:6d:da:8c:02:de:
                    69:b9:d3:86:8e:1a:67:71:4a:a7:cd:be:5e:97:05:
                    f8:f5:a9:6d:c2:80:c2:ce:fc:0a:5d:9b:b9:f1:13:
                    94:f4:07:1a:ed:3c:b3:0c:95:6a:c0:77:46:44:5a:
                    a5:0c:84:62:db:fc:25:68:fb:90:de:ee:69:7b:e2:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D2:8C:CE:38:C5:C3:44:DD:E7:48:24:E6:A5:47:DD:7B:4B:48:E8
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137312e302f32342d3234203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:2a:40:41:9f:b7:75:f0:ad:29:cb:f8:dc:00:75:5f:5e:f4:
         ca:bf:09:96:4c:ca:06:9b:2e:f7:eb:93:62:c3:10:8a:5b:39:
         dc:7d:8f:97:e1:cc:92:a4:49:ba:37:c3:07:64:b4:98:73:a8:
         d3:22:86:86:01:0b:cf:eb:3c:b9:12:cc:e5:a2:90:3c:1e:fa:
         6b:58:00:52:e9:60:32:cd:ec:2a:5d:d0:75:a0:c9:26:49:db:
         11:3e:fa:a3:d4:3e:f3:e5:f7:28:6d:c3:d1:f9:06:0e:1a:29:
         b8:6b:de:d7:92:d5:fb:ac:81:d3:f0:84:50:9a:5b:42:60:2c:
         13:45:1a:9f:34:15:35:bd:40:c4:50:c8:44:49:ac:b1:28:f7:
         58:e2:74:36:83:bf:4c:40:5b:0f:eb:d4:67:a7:d8:dc:ec:f0:
         98:db:5e:5d:3d:1d:79:b3:6b:ce:ed:83:5d:a7:26:3d:4b:a9:
         af:07:eb:b9:75:82:67:99:7d:11:ae:f1:3b:a5:50:d4:3f:f9:
         d1:14:81:be:4f:ce:64:26:29:90:21:73:2a:64:e7:fa:87:c7:
         b8:36:07:b0:d8:9c:58:6e:0a:f3:b0:fd:92:da:06:bd:a8:fb:
         0b:3e:61:60:e8:67:96:65:c6:63:7b:32:2f:f3:34:2a:be:98:
         e9:f0:8c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:43 2025 by rpki-client on console.sobornost.net