Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230342e302f32342d3234203d3e203532373830.roa
File:                     3137372e33392e3230342e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          4+zbwrf3iZgB4s7jU+/5nhFXNwcfdbN/n/eHcl1LcIk=
Subject key identifier:   6B:FD:5C:07:A1:8F:DB:23:DA:15:BD:3D:3F:59:4F:6A:91:04:2A:19
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       726795BBF49CC63D8760A7B50F19629630F9075A
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230342e302f32342d3234203d3e203532373830.roa
Signing time:             Thu 06 Mar 2025 15:33:24 +0000
ROA not before:           Thu 06 Mar 2025 15:28:24 +0000
ROA not after:            Thu 05 Mar 2026 15:33:24 +0000
asID:                     52780
IP address blocks:        177.39.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:67:95:bb:f4:9c:c6:3d:87:60:a7:b5:0f:19:62:96:30:f9:07:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Mar  6 15:28:24 2025 GMT
            Not After : Mar  5 15:33:24 2026 GMT
        Subject: CN=6BFD5C07A18FDB23DA15BD3D3F594F6A91042A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:04:51:f5:35:92:de:bd:f9:e6:44:c2:eb:
                    6a:d8:a3:ff:17:ce:22:42:a3:73:3b:de:34:3b:2c:
                    69:5e:2a:d8:24:d2:a2:31:23:1d:52:4b:2e:dd:cb:
                    d8:5a:39:fb:f0:57:d3:7b:61:03:b9:76:61:e7:8e:
                    40:64:e3:80:2d:87:9b:af:d4:f9:a1:1d:26:45:d6:
                    26:08:a9:40:e3:87:1f:55:45:7d:62:b4:2d:d4:cf:
                    45:18:f6:c8:b2:21:82:32:3a:72:21:1d:17:93:5a:
                    78:65:d4:a9:ac:87:71:31:89:80:1e:a1:5e:d0:f0:
                    d9:07:78:82:66:85:0a:11:76:46:a9:72:4c:0c:ee:
                    02:94:b8:99:cd:ce:df:8d:97:28:3c:bf:10:49:6b:
                    8b:29:d1:b1:97:c4:cb:fb:68:57:d6:a5:bf:87:b4:
                    ce:48:99:90:c1:5c:3c:5d:b2:d5:dc:3f:c6:54:18:
                    9c:45:2e:76:7b:73:64:b0:0d:97:3c:f3:0c:64:cd:
                    34:0c:9d:74:6f:d4:69:c6:02:90:98:e9:68:20:81:
                    c7:d1:ff:96:fb:31:69:75:48:1e:ff:21:ec:4f:7e:
                    e0:be:aa:da:c4:61:df:4a:51:f2:a8:17:33:a4:ef:
                    3b:39:ec:3b:de:67:39:68:3c:a0:ce:08:cd:3f:86:
                    d8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FD:5C:07:A1:8F:DB:23:DA:15:BD:3D:3F:59:4F:6A:91:04:2A:19
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230342e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:62:87:16:cf:b0:73:d6:19:a2:4c:f7:ca:0e:70:2a:ee:1f:
         a8:1b:5e:80:5e:53:d8:66:86:1b:7b:c8:7a:c8:8d:1e:4c:ac:
         c5:f2:ef:c9:e2:41:e7:34:50:df:12:65:3e:34:f2:26:fd:b1:
         c9:9a:5b:7d:e6:87:a8:e7:da:d0:c1:6b:6b:e5:a4:22:15:70:
         fc:7d:b3:47:d6:c2:b1:3d:8c:d9:d6:b8:eb:db:53:58:e4:fd:
         bd:78:62:15:7a:5a:0e:49:5d:22:f3:3c:fa:7b:6f:19:59:24:
         37:35:41:6a:18:13:72:be:5d:ec:6a:ec:a7:1a:c3:4d:94:a9:
         a6:f7:83:53:87:3d:80:d8:d9:77:50:3f:ca:04:b1:02:05:41:
         cb:83:6c:96:17:fa:50:dc:ec:5d:e5:b4:c4:f6:8a:63:99:3b:
         a6:dc:fc:75:57:8f:84:89:d3:dc:52:a2:e8:02:34:97:98:15:
         8e:f3:cb:d8:ec:e7:02:4d:1a:f3:ca:09:71:2c:c0:f7:3a:5f:
         e1:a0:0f:a0:68:7e:36:79:f9:b6:e7:02:0d:99:86:d2:b5:b5:
         5f:c7:ea:54:45:94:7e:0b:fa:f5:a7:4b:f1:03:06:e4:5b:52:
         e4:d3:be:54:ac:bc:2f:a3:72:d4:34:cb:ea:e8:bc:60:e5:54:
         0f:50:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:14 2025 by rpki-client on console.sobornost.net