Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3132342e3138342e302f32322d3232203d3e20323733333039.roa
File:                     3137372e3132342e3138342e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          FCjprDQJz3xukSheMM55TOxsL6knyTyPw1tW1cyRsKo=
Subject key identifier:   D4:07:BC:DC:CE:07:5B:6E:E7:79:81:BE:B6:C4:5A:90:E7:BB:A7:C8
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       0EDED3BF7C42D15373E159EAD7A0948C73EA49D7
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3132342e3138342e302f32322d3232203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:39 +0000
ROA not before:           Wed 09 Apr 2025 13:48:39 +0000
ROA not after:            Wed 08 Apr 2026 13:53:39 +0000
asID:                     273309
IP address blocks:        177.124.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:de:d3:bf:7c:42:d1:53:73:e1:59:ea:d7:a0:94:8c:73:ea:49:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:39 2025 GMT
            Not After : Apr  8 13:53:39 2026 GMT
        Subject: CN=D407BCDCCE075B6EE77981BEB6C45A90E7BBA7C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:51:96:d8:b1:fe:fd:6d:b8:c0:99:7d:07:
                    e8:f9:b0:99:df:32:7c:9c:c6:d6:1c:19:c4:47:99:
                    83:55:95:86:72:9a:9e:c8:2f:4b:18:bb:53:a6:96:
                    64:2b:de:9b:1a:ca:fd:fb:58:15:7f:3d:6e:f9:2f:
                    05:d5:65:2c:9c:77:20:d0:72:84:2c:f7:7b:85:a2:
                    b3:eb:c9:81:05:e2:c6:6b:30:7c:59:8e:cb:9b:41:
                    8d:fd:c7:9c:24:89:10:1f:96:a9:6a:67:5e:20:85:
                    91:9f:60:5a:9c:07:a3:a1:0c:ce:7e:a6:71:cb:0a:
                    eb:98:e4:ad:65:24:d2:ee:50:21:72:ce:33:4d:2b:
                    93:4b:0c:29:7d:22:70:f3:69:e9:7a:20:a9:67:82:
                    a3:7a:c5:c3:e3:27:a9:a9:b1:02:f6:ae:1b:84:a8:
                    dd:e8:01:dd:a4:12:57:c2:f1:a2:c2:ba:a1:eb:fd:
                    e5:94:eb:39:dd:88:18:6b:28:4e:80:f8:87:d5:1d:
                    69:1f:73:43:e5:88:63:05:2a:14:0a:dc:de:31:a8:
                    0c:a4:d4:ff:7e:db:76:10:d3:84:f7:bc:dc:3b:ec:
                    12:5a:18:86:d8:d7:22:7b:c8:d7:c7:4b:57:35:e6:
                    13:6d:55:95:b1:e5:9b:4a:af:bc:2f:29:4d:f2:3d:
                    e4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:07:BC:DC:CE:07:5B:6E:E7:79:81:BE:B6:C4:5A:90:E7:BB:A7:C8
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3132342e3138342e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:c7:ac:cd:8a:5a:a9:19:cb:b5:4b:0c:ed:2d:80:22:02:78:
         4a:1f:86:85:ee:75:22:e3:01:6b:cc:67:ff:9f:9a:a7:62:c4:
         cb:c0:83:1a:ed:58:78:9d:8c:b6:db:cd:af:06:e5:86:ab:e4:
         00:10:16:f4:0c:5a:60:65:b4:ef:69:1b:9e:a6:b6:57:03:2b:
         0a:d1:66:28:c3:ad:90:46:03:55:1b:49:b7:f8:1a:b3:a9:1e:
         81:6e:85:9e:6b:fc:41:63:32:c1:ae:b9:73:f8:44:42:96:4f:
         73:3e:d3:6b:3c:8b:11:4c:5c:59:f9:98:fe:8f:68:e3:cc:52:
         9c:07:b1:ed:51:95:7f:54:31:dc:0b:03:e5:45:e8:6f:d9:6b:
         05:63:40:e1:c0:ae:75:89:af:af:4c:ef:9c:77:fb:ab:30:5c:
         78:41:1b:e3:ac:ff:9d:77:46:60:15:41:b9:c0:94:76:c1:22:
         fc:a5:a9:8a:cd:88:a2:59:ad:32:45:79:1f:5a:a3:3d:34:04:
         60:0c:67:c4:cb:79:2b:a0:d1:9f:1e:c8:3b:35:b3:54:1a:7b:
         2c:8b:db:6c:98:c0:76:0d:0f:23:da:40:78:29:7a:d5:0a:d6:
         cd:36:88:0c:b6:cf:3d:7b:e5:54:d8:bf:18:ad:b7:b1:80:74:
         ce:ed:df:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net