Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/3137372e33392e3135322e302f32322d3234203d3e20323632343237.roa
File:                     3137372e33392e3135322e302f32322d3234203d3e20323632343237.roa (raw, json)
Hash identifier:          +SH1VjqSWqQxliRg5cMuFYBmBkMqMfL70N/ahgL+izI=
Subject key identifier:   CC:10:B5:2A:32:3D:5E:51:E4:D8:48:29:D2:D5:18:60:7A:EA:9B:7F
Certificate issuer:       /CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
Certificate serial:       2216DEAF34FF38DEC0C35CE10FB8AC9A769794CA
Authority key identifier: A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/3137372e33392e3135322e302f32322d3234203d3e20323632343237.roa
Signing time:             Thu 06 Mar 2025 05:19:28 +0000
ROA not before:           Thu 06 Mar 2025 05:14:28 +0000
ROA not after:            Thu 05 Mar 2026 05:19:28 +0000
asID:                     262427
IP address blocks:        177.39.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl
                          rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 22:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:16:de:af:34:ff:38:de:c0:c3:5c:e1:0f:b8:ac:9a:76:97:94:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
        Validity
            Not Before: Mar  6 05:14:28 2025 GMT
            Not After : Mar  5 05:19:28 2026 GMT
        Subject: CN=CC10B52A323D5E51E4D84829D2D518607AEA9B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:11:90:f8:67:33:33:74:d8:1f:40:a0:15:
                    db:e3:64:db:9d:85:5d:42:ca:53:2a:10:fc:ef:ff:
                    3d:fb:3c:5e:36:0e:88:70:00:aa:56:20:d0:e6:f2:
                    7f:90:7c:f1:38:8e:db:cb:d9:44:15:6a:fe:ad:3c:
                    89:a8:a9:a5:db:88:8b:4b:ba:99:98:8b:4a:8b:9d:
                    0b:b3:a1:07:f3:57:45:1f:19:39:49:d4:01:18:d2:
                    6c:00:61:47:4a:5f:50:56:42:3e:46:e0:a6:66:9a:
                    31:33:f8:46:fc:55:80:83:35:83:f8:54:34:3a:32:
                    5f:90:f1:be:09:8a:09:d7:3c:cc:d4:8c:8e:0e:f6:
                    b1:67:0e:ec:31:92:fd:32:76:63:77:89:69:01:9c:
                    07:09:d3:56:40:25:eb:68:69:d9:29:1f:d5:d8:57:
                    b9:a6:39:b7:c5:18:78:ed:8a:f0:d6:7b:f0:32:44:
                    67:84:d5:b1:00:9c:98:e2:4b:0b:30:78:96:6e:5a:
                    c3:f3:56:64:ed:c6:2c:65:ea:5c:69:ac:bc:42:6d:
                    76:a0:86:5a:22:c6:81:a7:db:f2:e1:03:5b:47:6b:
                    39:20:ca:dd:44:2a:e3:ce:29:e1:d3:b7:eb:3c:94:
                    71:2c:21:4c:17:2b:8a:d9:d7:9a:48:1b:52:f5:2a:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:10:B5:2A:32:3D:5E:51:E4:D8:48:29:D2:D5:18:60:7A:EA:9B:7F
            X509v3 Authority Key Identifier:
                keyid:A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/3137372e33392e3135322e302f32322d3234203d3e20323632343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:2d:4c:cc:64:71:d1:6e:b2:24:21:6e:76:ec:d9:11:2e:46:
         0f:cb:0e:56:e4:32:69:1b:a0:f3:f4:14:93:a7:30:99:9e:78:
         9d:1c:b7:b8:16:0a:a4:e2:6a:bc:3c:e2:ff:a8:ef:49:bd:ac:
         d8:d0:d7:8b:24:f4:c8:d2:69:90:8d:76:39:e8:8f:4a:ef:f5:
         1e:8c:66:4d:0e:19:ef:62:72:a4:9e:c0:0a:d8:cc:19:1b:db:
         8a:10:6a:40:2d:76:5f:8b:aa:e9:a5:94:e3:22:63:f9:d4:82:
         2d:3f:6c:a5:f0:e5:92:b9:8f:06:ec:83:88:56:49:56:13:ba:
         9c:a5:9a:d6:4b:3c:d9:2c:45:95:db:bf:9c:a1:8f:5f:d5:22:
         d7:98:dc:4d:e5:49:a5:c5:7c:57:9a:59:12:72:8d:2f:fc:30:
         9d:b2:fa:f2:6f:34:ea:45:40:bb:55:15:2d:71:7c:56:63:b9:
         3a:23:28:f7:c6:44:f6:9d:46:56:4c:0b:b2:44:3f:5a:98:48:
         41:4b:b5:83:85:02:52:79:d4:c3:b5:a4:7d:5b:1a:71:9f:d0:
         65:3e:01:f6:de:6f:fc:02:1a:96:14:ce:69:aa:97:17:c1:25:
         e7:54:3a:bb:9a:80:02:20:69:94:c4:ea:38:1e:c1:f9:9d:c5:
         f3:2f:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:20 2025 by rpki-client on console.sobornost.net