Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa
File:                     3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          mLutMEjW1nChrSZ404keINGT+lGzDHoJst8HhK8ucrE=
Subject key identifier:   40:5B:CE:9E:4F:02:33:D8:6D:77:48:44:EF:1D:C4:55:D0:EC:46:46
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       1B139D10DF452C02366B98DE0C3B4C8C97CC23A2
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:18 +0000
ROA not before:           Thu 06 Mar 2025 09:37:18 +0000
ROA not after:            Thu 05 Mar 2026 09:42:18 +0000
asID:                     52613
IP address blocks:        177.125.172.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:13:9d:10:df:45:2c:02:36:6b:98:de:0c:3b:4c:8c:97:cc:23:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:18 2025 GMT
            Not After : Mar  5 09:42:18 2026 GMT
        Subject: CN=405BCE9E4F0233D86D774844EF1DC455D0EC4646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:ba:20:5b:28:60:ec:99:5b:35:28:e9:89:
                    36:02:6f:f0:38:05:35:21:ff:5b:16:da:e3:c9:53:
                    b2:dd:a1:03:27:66:bc:ca:75:ac:5f:36:e3:d4:42:
                    35:01:cf:47:de:4e:6e:b1:4e:bd:ec:ad:55:4f:7a:
                    c3:06:14:86:83:88:eb:0f:23:d4:4d:c9:55:0d:0d:
                    7d:1a:b1:89:15:97:20:c2:eb:34:a8:9e:1f:34:b2:
                    7a:27:3f:d9:0b:2e:44:30:7a:aa:f9:7a:b8:d5:75:
                    8f:4f:80:93:61:b7:e5:8e:ed:9f:73:97:1d:ac:b1:
                    d4:69:ab:a8:22:f7:2e:69:c4:9c:09:31:6f:44:a2:
                    f3:92:ef:f5:49:1f:0e:aa:9e:4b:dd:83:18:3b:70:
                    53:2c:1a:90:a0:ce:15:96:10:eb:3a:6c:ab:84:26:
                    e6:27:d5:73:62:41:65:7b:80:c4:d9:04:8f:52:af:
                    b4:b5:7c:20:e2:ff:2a:dc:0a:ee:03:5a:31:a9:52:
                    63:51:d2:60:7d:e7:8f:6f:91:cf:fe:71:81:d7:cd:
                    60:0b:4d:83:85:40:0b:4c:ed:33:3c:80:ee:a5:0b:
                    1e:61:96:fa:df:5a:fa:ec:27:9d:c2:d3:de:65:95:
                    69:93:b3:fc:68:38:3a:fa:e2:42:6c:c1:79:1e:9a:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5B:CE:9E:4F:02:33:D8:6D:77:48:44:EF:1D:C4:55:D0:EC:46:46
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:ac:9b:4c:e7:25:ed:dc:c1:ad:88:b9:24:ba:08:9e:91:ca:
         16:0f:ec:98:c2:35:83:dd:d9:02:e7:49:25:ec:75:d1:c3:d3:
         61:16:d0:47:8a:43:9b:53:22:fe:db:c9:93:03:66:8a:ef:7f:
         0e:5f:45:3d:66:ff:b2:87:17:6d:59:30:22:9b:5e:67:0f:b0:
         2e:8d:b3:3f:a3:c4:e3:f1:f7:c4:5e:5d:d2:0e:4b:34:8e:46:
         5c:cd:16:d0:9c:3a:e3:c6:ba:b6:76:f6:f0:0e:c3:3b:98:00:
         43:46:0b:9a:f9:06:05:93:92:80:c8:6f:34:8c:03:52:1b:fb:
         70:18:27:64:04:0b:c7:d3:97:b0:05:6f:78:27:23:26:14:8d:
         96:a7:3d:63:5b:c4:f1:80:89:bd:29:a7:5a:af:83:2e:52:45:
         34:c5:69:3f:07:58:97:1b:12:67:31:f0:8a:ec:27:9e:99:7b:
         35:57:5f:6a:1e:24:d8:73:c4:d1:a4:a5:39:7f:70:eb:2f:27:
         03:c5:96:04:cb:ae:9b:57:e4:04:34:60:71:18:f0:ff:f1:ba:
         da:9c:2d:54:e4:96:a5:ed:a4:8b:c1:ae:c9:fb:bf:ec:34:66:
         3c:c5:1a:82:72:5c:4f:57:55:d9:f8:bb:99:44:fb:d1:60:36:
         ac:07:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:43 2025 by rpki-client on console.sobornost.net