Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139352e302f32342d3234203d3e20323632353930.roa
File:                     3137372e38342e3139352e302f32342d3234203d3e20323632353930.roa (raw, json)
Hash identifier:          2H5eKsK3ydiHqeaX3XfIkAHcaMLd/M4vOKkk92IkNzc=
Subject key identifier:   C9:C3:C9:A7:98:34:1C:88:6C:53:30:98:B2:97:2F:AE:E1:13:FA:FF
Certificate issuer:       /CN=231C01A4C21B4CA32569E7A61F40CB611354C269
Certificate serial:       5FD2B4CB31410CAE8371F70791E9F9F1DBE7C830
Authority key identifier: 23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139352e302f32342d3234203d3e20323632353930.roa
Signing time:             Fri 25 Apr 2025 17:49:42 +0000
ROA not before:           Fri 25 Apr 2025 17:44:42 +0000
ROA not after:            Fri 24 Apr 2026 17:49:42 +0000
asID:                     262590
IP address blocks:        177.84.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl
                          rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 12:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d2:b4:cb:31:41:0c:ae:83:71:f7:07:91:e9:f9:f1:db:e7:c8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231C01A4C21B4CA32569E7A61F40CB611354C269
        Validity
            Not Before: Apr 25 17:44:42 2025 GMT
            Not After : Apr 24 17:49:42 2026 GMT
        Subject: CN=C9C3C9A798341C886C533098B2972FAEE113FAFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:db:4d:e8:55:77:a4:bd:dd:9d:66:13:62:
                    d6:75:55:96:f4:e1:5d:23:de:be:fc:e0:b1:db:ee:
                    57:6e:51:99:c6:a6:35:30:14:76:2c:27:1a:64:f7:
                    b4:54:db:7d:07:3a:b9:be:ac:6a:34:fe:7a:ab:5b:
                    4d:49:ce:5e:29:f6:ce:8a:c3:44:63:89:21:8f:a3:
                    52:ef:9b:8f:e8:76:28:10:0c:b7:bc:66:91:d1:97:
                    f4:dd:3e:8d:3b:7d:7c:46:06:78:45:f5:e3:5b:44:
                    42:39:c4:e2:02:fc:58:91:71:0a:43:8c:9f:4b:98:
                    95:2d:ac:f6:ba:f0:02:ea:9e:86:83:de:5b:0a:f3:
                    88:64:78:7f:37:e4:1d:3e:53:3a:5a:02:4d:a5:ee:
                    6d:e5:ab:26:7b:e3:9a:80:ef:38:ad:91:d0:65:44:
                    10:23:68:88:b6:4c:c1:d6:bf:9d:3c:77:b7:42:e0:
                    a3:cc:a2:5d:e7:47:4e:43:a9:8d:bc:2a:26:d9:87:
                    dc:c3:97:32:12:7e:9a:b5:3c:52:75:2b:a8:e0:bf:
                    a1:1b:d2:35:ab:b6:79:9a:4f:56:db:e3:33:42:ff:
                    c3:ed:d7:ee:97:08:89:1e:91:1e:7c:40:24:a2:6a:
                    d6:77:9f:0f:1c:ba:23:1b:84:de:bd:8e:79:48:66:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C3:C9:A7:98:34:1C:88:6C:53:30:98:B2:97:2F:AE:E1:13:FA:FF
            X509v3 Authority Key Identifier:
                keyid:23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139352e302f32342d3234203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ea:63:f0:a7:08:fa:cc:b1:26:27:23:bd:d9:7a:b0:0d:86:
         a7:fa:b9:36:3f:79:fe:3f:37:f0:1c:0a:47:44:fd:d0:ad:da:
         18:11:d5:81:80:0b:39:04:0d:1b:e1:96:b2:77:82:a4:39:2b:
         61:83:ae:f8:d3:e9:4f:a7:ad:37:d6:e4:7b:1d:24:aa:95:30:
         e9:43:3c:d9:88:76:94:9c:16:4f:5f:a0:9b:33:53:65:0b:9f:
         d5:7a:a9:e1:c5:f3:ae:58:3c:b4:36:1c:ea:d6:9f:ce:24:14:
         6f:8f:bc:4b:80:86:df:21:1a:02:bc:66:a1:b2:c5:fa:e4:fc:
         da:a1:12:c3:46:3d:78:01:7e:a7:05:6e:cd:37:02:a9:0f:b4:
         8d:40:8c:38:2b:d7:80:2d:59:3d:40:2e:c8:27:4c:9e:23:8f:
         a9:94:92:b7:83:e4:8f:a2:d5:6f:0f:19:57:8c:45:8a:ac:4e:
         bc:ac:fd:61:ed:dd:fd:62:42:4d:f6:a9:4b:f8:d3:fb:e8:70:
         73:29:a7:d8:e1:d9:f7:d5:2d:f3:69:47:89:b7:fe:82:9a:d5:
         e0:8d:0c:7c:26:1f:71:bd:ed:d6:5b:f8:46:25:48:aa:88:21:
         82:de:f1:25:49:3c:8f:c5:27:ce:39:7f:ee:8b:c4:2f:94:b2:
         48:ff:d1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:22 2025 by rpki-client on console.sobornost.net