Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3135372e302f32342d3234203d3e203532373933.roa
File:                     3137372e3230302e3135372e302f32342d3234203d3e203532373933.roa (raw, json)
Hash identifier:          TbRVSjCW2B0TUP+Q/ndQxYtJhkkXbYHFoU1PyMq4rK8=
Subject key identifier:   68:18:92:CD:40:C8:AE:EA:3F:80:88:A3:5D:1B:6F:CF:5B:8C:54:E2
Certificate issuer:       /CN=C868A06878254001614E44615C6C21349FD5A104
Certificate serial:       11473EA8FA06BF06E64440FAF958410238CCBAA7
Authority key identifier: C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3135372e302f32342d3234203d3e203532373933.roa
Signing time:             Tue 08 Apr 2025 20:54:55 +0000
ROA not before:           Tue 08 Apr 2025 20:49:55 +0000
ROA not after:            Tue 07 Apr 2026 20:54:55 +0000
asID:                     52793
IP address blocks:        177.200.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl
                          rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 11:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:47:3e:a8:fa:06:bf:06:e6:44:40:fa:f9:58:41:02:38:cc:ba:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A06878254001614E44615C6C21349FD5A104
        Validity
            Not Before: Apr  8 20:49:55 2025 GMT
            Not After : Apr  7 20:54:55 2026 GMT
        Subject: CN=681892CD40C8AEEA3F8088A35D1B6FCF5B8C54E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:c7:bb:e1:8f:f7:ae:47:3f:1a:30:98:e0:
                    b6:70:42:95:45:98:94:b6:28:fa:81:61:34:96:e0:
                    73:d4:de:1b:14:24:91:c0:9d:3f:a0:11:a7:b0:a4:
                    c1:6f:a0:a6:80:71:e5:e4:4e:eb:a0:e5:55:e4:9d:
                    a0:29:37:22:f4:dc:31:91:fd:c1:eb:fb:64:32:9b:
                    d6:f2:3b:4b:b3:ea:bb:ce:22:8b:d5:09:8c:77:1a:
                    54:2e:32:9d:a3:47:3d:c6:19:5f:4c:52:05:c3:58:
                    c6:45:71:7b:cb:ce:de:e8:b5:93:32:96:53:b0:e8:
                    24:ca:11:d4:dd:47:b8:bd:d3:0e:a0:be:0e:23:3c:
                    9d:cf:e2:bb:4f:c9:f5:22:7f:d3:43:be:bf:0e:57:
                    4b:10:f1:78:7f:33:a8:c6:30:ac:8f:70:e0:b5:67:
                    47:21:e2:9e:d5:75:a7:69:f2:7a:e1:86:fe:ea:91:
                    f6:92:1a:d6:77:92:2b:c1:f0:ae:90:87:90:e3:ed:
                    03:eb:f2:9c:ba:9e:f3:e1:e8:d3:a0:fe:52:38:1b:
                    14:66:d5:48:12:cf:80:cc:63:db:dd:3d:da:f1:57:
                    16:24:e5:2e:61:02:cf:9a:8f:44:98:a4:c6:81:4f:
                    c4:0d:4d:8e:7d:51:8f:05:2a:6b:c9:82:89:28:6f:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:18:92:CD:40:C8:AE:EA:3F:80:88:A3:5D:1B:6F:CF:5B:8C:54:E2
            X509v3 Authority Key Identifier:
                keyid:C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3135372e302f32342d3234203d3e203532373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:35:49:05:58:df:81:3f:ba:5a:dc:ca:7c:42:e7:56:66:9b:
         2a:d0:8a:e5:6f:c1:2e:4e:d5:21:b0:cd:fb:3b:9b:1c:d1:99:
         0f:46:3f:43:6d:f4:d4:bc:5c:d3:8f:67:8d:2f:53:6b:64:ed:
         30:5b:d0:91:e1:05:00:43:de:b3:98:d9:e3:9d:d1:33:ee:c6:
         4c:f4:27:c9:c4:c1:fc:eb:68:f6:58:87:65:65:2d:ac:aa:d6:
         49:7e:e6:0e:a3:31:42:6b:a2:bd:1f:4b:f1:04:6d:83:4c:83:
         57:e2:14:99:2e:be:4f:98:c1:41:a1:02:5b:10:49:30:c3:8e:
         d0:62:85:64:83:25:a1:db:19:0a:c0:f4:4e:ad:35:2d:c8:d9:
         77:7f:89:a4:71:4a:47:8f:e0:b6:a6:a2:79:6e:9e:ce:0a:dc:
         0f:9f:fc:65:6b:d3:ce:e6:7f:f3:d1:74:79:0a:3f:8c:1c:a3:
         3a:74:00:94:00:2e:88:de:58:ba:a6:83:c5:90:74:70:30:81:
         02:88:96:30:5c:4b:6e:d7:3d:6c:f5:fd:ab:09:b5:14:3c:80:
         a0:70:52:f6:4d:b1:1e:26:7f:37:40:19:2e:d5:d5:59:6e:10:
         67:74:c0:97:88:7b:f4:89:bb:a0:5a:ad:33:54:a6:5a:64:03:
         97:ba:41:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEUc+qPoGvwbmRED6+VhBAjjMuqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg2OEEwNjg3ODI1NDAwMTYxNEU0NDYxNUM2QzIxMzQ5
RkQ1QTEwNDAeFw0yNTA0MDgyMDQ5NTVaFw0yNjA0MDcyMDU0NTVaMDMxMTAvBgNV
BAMTKDY4MTg5MkNENDBDOEFFRUEzRjgwODhBMzVEMUI2RkNGNUI4QzU0RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYse74Y/3rkc/GjCY4LZwQpVF
mJS2KPqBYTSW4HPU3hsUJJHAnT+gEaewpMFvoKaAceXkTuug5VXknaApNyL03DGR
/cHr+2Qym9byO0uz6rvOIovVCYx3GlQuMp2jRz3GGV9MUgXDWMZFcXvLzt7otZMy
llOw6CTKEdTdR7i90w6gvg4jPJ3P4rtPyfUif9NDvr8OV0sQ8Xh/M6jGMKyPcOC1
Z0ch4p7Vdadp8nrhhv7qkfaSGtZ3kivB8K6Qh5Dj7QPr8py6nvPh6NOg/lI4GxRm
1UgSz4DMY9vdPdrxVxYk5S5hAs+aj0SYpMaBT8QNTY59UY8FKmvJgokobyQrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaBiSzUDIruo/gIijXRtvz1uMVOIwHwYDVR0j
BBgwFoAUyGigaHglQAFhTkRhXGwhNJ/VoQQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzU3dGZhRmVDZTNDMTNIcUtrTEREM2ZHdkdQRmdFZTZEejJ3WFIxQ0tt
cWovMC9DODY4QTA2ODc4MjU0MDAxNjE0RTQ0NjE1QzZDMjEzNDlGRDVBMTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4NjhBMDY4NzgyNTQwMDE2
MTRFNDQ2MTVDNkMyMTM0OUZENUExMDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c1N3RmYUZlQ2UzQzEzSHFLa0xERDNmR3ZHUEZnRWU2RHoyd1hSMUNLbXFqLzAv
MzEzNzM3MmUzMjMwMzAyZTMxMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxyJ0wDQYJKoZIhvcNAQELBQADggEBAD41SQVY
34E/ulrcynxC51ZmmyrQiuVvwS5O1SGwzfs7mxzRmQ9GP0Nt9NS8XNOPZ40vU2tk
7TBb0JHhBQBD3rOY2eOd0TPuxkz0J8nEwfzraPZYh2VlLayq1kl+5g6jMUJror0f
S/EEbYNMg1fiFJkuvk+YwUGhAlsQSTDDjtBihWSDJaHbGQrA9E6tNS3I2Xd/iaRx
SkeP4Lamonluns4K3A+f/GVr087mf/PRdHkKP4wcozp0AJQALojeWLqmg8WQdHAw
gQKIljBcS27XPWz1/asJtRQ8gKBwUvZNsR4mfzdAGS7V1VluEGd0wJeIe/SJu6Ba
rTNUplpkA5e6Qd8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:24 2025 by rpki-client on console.sobornost.net