Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/3137372e3132382e3231362e302f32322d3234203d3e20323632363631.roa
File:                     3137372e3132382e3231362e302f32322d3234203d3e20323632363631.roa (raw, json)
Hash identifier:          91UFMxdQa0TjoB/UqzxHg4dYSB5PWS6pw+uFyCH27ho=
Subject key identifier:   6E:34:F6:97:8E:1A:6E:D0:07:1D:20:52:0D:0A:47:09:B1:DF:AA:7F
Certificate issuer:       /CN=2E99EC5426678FEDA87CF25917DEEA66BCE0738C
Certificate serial:       5D8E61A34A404627A5A0B9F95CC002ACB5520899
Authority key identifier: 2E:99:EC:54:26:67:8F:ED:A8:7C:F2:59:17:DE:EA:66:BC:E0:73:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/3137372e3132382e3231362e302f32322d3234203d3e20323632363631.roa
Signing time:             Wed 19 Mar 2025 16:03:55 +0000
ROA not before:           Wed 19 Mar 2025 15:58:55 +0000
ROA not after:            Wed 18 Mar 2026 16:03:55 +0000
asID:                     262661
IP address blocks:        177.128.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.crl
                          rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8e:61:a3:4a:40:46:27:a5:a0:b9:f9:5c:c0:02:ac:b5:52:08:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E99EC5426678FEDA87CF25917DEEA66BCE0738C
        Validity
            Not Before: Mar 19 15:58:55 2025 GMT
            Not After : Mar 18 16:03:55 2026 GMT
        Subject: CN=6E34F6978E1A6ED0071D20520D0A4709B1DFAA7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:89:8a:c8:a8:39:2f:f8:59:04:00:8e:38:14:
                    ab:4a:e4:cb:dc:c7:9b:33:af:56:76:92:6e:a1:c6:
                    2d:fe:43:8a:fa:f1:f2:96:a1:72:f3:12:ee:23:3f:
                    bf:ae:be:77:bf:85:62:f9:8e:16:4e:60:2b:a9:dc:
                    c0:f0:50:7f:31:b3:69:7a:af:84:74:40:7f:22:97:
                    97:b3:ea:3a:38:c7:78:44:6a:23:cf:58:10:3a:50:
                    c2:24:41:10:b1:39:fa:63:80:63:15:84:7f:38:d1:
                    64:a7:a4:33:b6:a3:6b:21:e1:93:bb:1e:fe:97:34:
                    34:12:2a:bc:2f:3f:99:a4:5f:15:2d:ae:28:9a:9d:
                    cf:8a:81:ac:44:8a:69:b1:e3:f6:33:53:b0:35:5c:
                    3f:ac:09:b0:b6:88:35:88:8c:f1:a9:ba:e8:9f:ba:
                    a8:dd:ab:fa:f2:c0:21:64:24:a9:d8:5c:95:8b:4a:
                    58:24:4a:5f:fe:cc:41:ef:cb:ab:36:c3:f4:86:e3:
                    c2:13:84:f9:0f:aa:f2:4b:49:17:8b:d0:1d:04:87:
                    1e:f6:3c:7e:57:b8:e1:e4:5f:62:88:56:1c:f0:48:
                    5d:29:92:2d:81:f4:21:9a:90:37:49:81:31:07:c0:
                    7b:3d:82:f9:7b:ed:89:54:47:2b:ec:90:1e:81:4f:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:34:F6:97:8E:1A:6E:D0:07:1D:20:52:0D:0A:47:09:B1:DF:AA:7F
            X509v3 Authority Key Identifier:
                keyid:2E:99:EC:54:26:67:8F:ED:A8:7C:F2:59:17:DE:EA:66:BC:E0:73:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/3137372e3132382e3231362e302f32322d3234203d3e20323632363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:e8:31:66:49:ec:e9:98:cf:e6:ab:53:78:57:0c:94:ec:49:
         22:68:8c:60:69:8b:b0:e2:be:e8:b2:61:03:1b:a7:fc:7f:08:
         89:21:5b:fa:0a:64:5a:16:73:92:9c:82:a9:fa:f6:d0:97:22:
         59:d0:6d:04:9e:6e:31:f9:a5:27:87:45:ac:68:5b:c3:93:7f:
         94:57:e7:89:08:2d:e5:03:b7:58:6b:af:b1:3e:cd:87:8d:50:
         43:f3:6f:d7:01:ee:29:ff:f8:5b:6b:bb:34:c5:b2:cf:44:ec:
         f7:bd:ac:e2:30:e7:0e:04:e5:73:df:b4:6d:e6:63:6b:e0:ff:
         dc:70:8e:62:be:f9:a0:a4:ba:b7:b0:00:eb:f6:43:33:cf:a9:
         06:a0:f4:93:79:4c:81:fe:c9:13:80:fc:92:cd:2a:2a:e1:0f:
         ec:d8:02:e9:cf:09:74:b7:10:cd:31:0c:38:03:18:13:08:f5:
         7d:83:b1:1c:43:c8:c0:3e:74:99:a9:71:a3:25:c7:92:95:ea:
         5d:b4:2f:f3:27:d4:44:4c:a6:b6:23:b9:08:c2:88:5f:fe:7d:
         a9:b6:45:71:95:07:4d:f3:a2:36:34:56:81:a5:b7:21:9d:b9:
         81:59:c4:ae:c7:41:c7:1b:dd:56:be:46:65:58:6f:e2:d5:ba:
         c6:94:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:32 2025 by rpki-client on console.sobornost.net