Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3135312e302f32342d3234203d3e203532373933.roa
File:                     3137372e3230302e3135312e302f32342d3234203d3e203532373933.roa (raw, json)
Hash identifier:          njsi2Cej9Xk7xx+Oa2Bef2XVU97/dSaQh3oDDVVOEa0=
Subject key identifier:   A0:74:CE:47:EA:F0:1D:3B:6F:DE:7B:77:98:0E:E0:DD:ED:D6:95:AD
Certificate issuer:       /CN=C868A06878254001614E44615C6C21349FD5A104
Certificate serial:       505E30078E033FF69F85C1DF15D23C5FE854E68E
Authority key identifier: C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3135312e302f32342d3234203d3e203532373933.roa
Signing time:             Tue 08 Apr 2025 20:54:57 +0000
ROA not before:           Tue 08 Apr 2025 20:49:57 +0000
ROA not after:            Tue 07 Apr 2026 20:54:57 +0000
asID:                     52793
IP address blocks:        177.200.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl
                          rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5e:30:07:8e:03:3f:f6:9f:85:c1:df:15:d2:3c:5f:e8:54:e6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A06878254001614E44615C6C21349FD5A104
        Validity
            Not Before: Apr  8 20:49:57 2025 GMT
            Not After : Apr  7 20:54:57 2026 GMT
        Subject: CN=A074CE47EAF01D3B6FDE7B77980EE0DDEDD695AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:90:14:ca:d1:74:14:8b:34:6f:ae:d5:6e:ee:
                    02:6d:29:75:19:e9:ee:03:69:e4:61:58:ad:38:04:
                    8c:71:da:45:ba:b2:4a:1e:e2:4b:cb:24:18:64:1f:
                    55:51:b1:d8:ae:64:ff:e1:17:dc:4a:d4:93:ef:1f:
                    15:29:f2:0b:17:30:8b:be:a4:b5:1c:e5:ec:97:5d:
                    dc:f5:68:11:5e:7e:16:8c:30:48:e7:db:d0:c6:14:
                    2b:28:98:fd:7c:14:75:f5:81:7a:64:82:c2:bf:dd:
                    78:28:67:6e:12:16:26:0f:f5:fb:d2:19:81:1c:8b:
                    8e:79:b5:ed:cf:e5:79:3d:d7:70:9b:cd:05:4c:9a:
                    25:ca:20:f1:d5:0f:fc:6c:3c:50:c0:28:a8:d2:89:
                    b6:59:4b:2f:c8:55:16:d0:03:a4:25:a7:9b:7b:a9:
                    ce:27:5c:1d:91:af:9a:41:d4:bf:f0:3e:0c:a9:be:
                    e1:d8:37:cf:4b:13:b5:67:72:5b:55:bf:f5:d3:56:
                    fc:4e:c3:82:ed:2a:e3:ac:a0:e1:b2:65:5f:11:b8:
                    d5:86:8a:ac:af:5b:cf:a9:00:c6:f5:f4:17:a2:aa:
                    29:fe:e2:ea:8e:46:dc:d9:80:a0:36:8e:4d:47:4a:
                    8b:7a:63:3f:a7:8e:3e:db:9b:3f:41:af:bc:40:3e:
                    4f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:74:CE:47:EA:F0:1D:3B:6F:DE:7B:77:98:0E:E0:DD:ED:D6:95:AD
            X509v3 Authority Key Identifier:
                keyid:C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3135312e302f32342d3234203d3e203532373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:67:55:dc:72:34:6f:3c:f6:28:27:c7:fb:46:37:ce:17:15:
         eb:ea:96:92:da:38:00:c1:a4:78:07:75:7b:c5:43:da:19:dc:
         06:30:58:54:d5:56:b5:af:85:c8:9b:0d:cc:68:9f:b8:fd:eb:
         a8:f6:a5:15:23:0c:74:71:37:6c:48:1b:e6:d9:9a:00:da:73:
         e2:45:77:c8:2f:ed:bf:0a:a6:a6:69:e0:c1:c3:0d:24:71:a8:
         09:12:77:c9:54:f2:ab:52:99:c9:a6:d6:87:85:a8:31:b8:c0:
         5b:04:d6:e2:62:71:f9:59:06:7d:0b:6f:e5:51:59:95:79:bb:
         0c:fa:e2:51:a6:37:b5:90:00:70:24:cd:76:28:ae:69:55:ae:
         08:b7:f6:49:49:54:06:4b:bb:75:f5:35:d4:e0:cb:89:b1:ab:
         65:b6:56:05:c1:04:4e:8b:41:c3:43:49:7b:6f:35:e4:f1:b3:
         35:b6:a0:03:9a:8e:5c:05:d1:77:38:9c:69:91:da:3e:50:8b:
         45:ea:4a:ae:cc:4e:81:7f:a9:52:44:a4:f0:a8:f1:1c:0a:1a:
         b7:3d:99:65:86:8a:a3:f4:ca:a9:c7:99:58:cc:68:42:dc:5f:
         3a:ec:aa:52:b9:a1:52:6a:b5:63:70:01:f5:a2:de:de:60:62:
         0a:4c:0a:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUF4wB44DP/afhcHfFdI8X+hU5o4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg2OEEwNjg3ODI1NDAwMTYxNEU0NDYxNUM2QzIxMzQ5
RkQ1QTEwNDAeFw0yNTA0MDgyMDQ5NTdaFw0yNjA0MDcyMDU0NTdaMDMxMTAvBgNV
BAMTKEEwNzRDRTQ3RUFGMDFEM0I2RkRFN0I3Nzk4MEVFMERERURENjk1QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkBTK0XQUizRvrtVu7gJtKXUZ
6e4DaeRhWK04BIxx2kW6skoe4kvLJBhkH1VRsdiuZP/hF9xK1JPvHxUp8gsXMIu+
pLUc5eyXXdz1aBFefhaMMEjn29DGFCsomP18FHX1gXpkgsK/3XgoZ24SFiYP9fvS
GYEci455te3P5Xk913CbzQVMmiXKIPHVD/xsPFDAKKjSibZZSy/IVRbQA6Qlp5t7
qc4nXB2Rr5pB1L/wPgypvuHYN89LE7VncltVv/XTVvxOw4LtKuOsoOGyZV8RuNWG
iqyvW8+pAMb19Beiqin+4uqORtzZgKA2jk1HSot6Yz+njj7bmz9Br7xAPk/xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoHTOR+rwHTtv3nt3mA7g3e3Wla0wHwYDVR0j
BBgwFoAUyGigaHglQAFhTkRhXGwhNJ/VoQQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzU3dGZhRmVDZTNDMTNIcUtrTEREM2ZHdkdQRmdFZTZEejJ3WFIxQ0tt
cWovMC9DODY4QTA2ODc4MjU0MDAxNjE0RTQ0NjE1QzZDMjEzNDlGRDVBMTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4NjhBMDY4NzgyNTQwMDE2
MTRFNDQ2MTVDNkMyMTM0OUZENUExMDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c1N3RmYUZlQ2UzQzEzSHFLa0xERDNmR3ZHUEZnRWU2RHoyd1hSMUNLbXFqLzAv
MzEzNzM3MmUzMjMwMzAyZTMxMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxyJcwDQYJKoZIhvcNAQELBQADggEBAJRnVdxy
NG889ignx/tGN84XFevqlpLaOADBpHgHdXvFQ9oZ3AYwWFTVVrWvhcibDcxon7j9
66j2pRUjDHRxN2xIG+bZmgDac+JFd8gv7b8KpqZp4MHDDSRxqAkSd8lU8qtSmcmm
1oeFqDG4wFsE1uJicflZBn0Lb+VRWZV5uwz64lGmN7WQAHAkzXYormlVrgi39klJ
VAZLu3X1NdTgy4mxq2W2VgXBBE6LQcNDSXtvNeTxszW2oAOajlwF0Xc4nGmR2j5Q
i0XqSq7MToF/qVJEpPCo8RwKGrc9mWWGiqP0yqnHmVjMaELcXzrsqlK5oVJqtWNw
AfWi3t5gYgpMCik=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:52 2025 by rpki-client on console.sobornost.net