Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3135392e302f32342d3234203d3e203532373933.roa
File:                     3137372e3230302e3135392e302f32342d3234203d3e203532373933.roa (raw, json)
Hash identifier:          qxXT5c15P3/njzcFn5gjA1Fko/bq6rqKj3K9Zf6ArBk=
Subject key identifier:   DD:57:1E:50:D8:47:78:A7:44:CB:07:F4:54:32:2E:40:1F:3B:0E:17
Certificate issuer:       /CN=C868A06878254001614E44615C6C21349FD5A104
Certificate serial:       20716FFD505E65A12BB32C02853BD1D284C37527
Authority key identifier: C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3135392e302f32342d3234203d3e203532373933.roa
Signing time:             Tue 08 Apr 2025 20:54:56 +0000
ROA not before:           Tue 08 Apr 2025 20:49:56 +0000
ROA not after:            Tue 07 Apr 2026 20:54:56 +0000
asID:                     52793
IP address blocks:        177.200.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl
                          rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:71:6f:fd:50:5e:65:a1:2b:b3:2c:02:85:3b:d1:d2:84:c3:75:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A06878254001614E44615C6C21349FD5A104
        Validity
            Not Before: Apr  8 20:49:56 2025 GMT
            Not After : Apr  7 20:54:56 2026 GMT
        Subject: CN=DD571E50D84778A744CB07F454322E401F3B0E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:68:74:e1:e2:19:29:b6:ee:55:6a:00:c3:78:
                    72:65:f4:34:bf:12:8c:aa:6d:41:0c:b3:9d:bd:78:
                    a5:f2:43:b3:1d:d8:2e:bf:42:55:2a:8c:9e:de:6f:
                    75:6a:cc:0b:57:35:99:b0:38:1f:02:ae:5d:a5:a6:
                    10:43:97:be:24:e6:b5:26:bc:a3:9b:92:44:03:69:
                    42:e6:92:4e:fe:b8:be:f0:74:0c:ed:17:ec:2b:71:
                    d2:59:61:d7:45:ae:a4:c8:9a:51:40:0e:ba:be:7b:
                    c0:fd:87:50:e3:5d:a9:f5:ac:2e:6f:22:ee:1a:8f:
                    c4:7c:a4:9d:ab:c2:bc:9c:7c:37:53:a5:c8:ad:6c:
                    d6:cf:70:f4:e8:c3:22:70:05:6d:03:74:de:55:e6:
                    e1:e2:b6:fd:d9:5d:2c:82:db:55:d8:84:f2:7c:c9:
                    ae:00:1c:44:75:31:84:67:16:fd:b9:85:5b:d1:40:
                    6f:4a:6d:9e:e9:5d:ca:e4:f1:38:fd:76:7b:4a:1a:
                    08:77:b3:91:0e:7b:a1:99:9c:6e:2a:c3:11:b4:fa:
                    39:65:58:3d:82:3f:14:b4:b8:60:e9:d3:25:4d:bc:
                    49:c1:bf:cf:06:d2:81:3a:99:5d:d6:95:e8:8e:3b:
                    82:ca:0e:b6:f8:a9:c2:1f:30:fe:fe:32:4a:47:5e:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:57:1E:50:D8:47:78:A7:44:CB:07:F4:54:32:2E:40:1F:3B:0E:17
            X509v3 Authority Key Identifier:
                keyid:C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3135392e302f32342d3234203d3e203532373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:40:36:74:19:39:fe:26:33:d2:0b:c3:41:70:c0:bc:f4:74:
         8a:6f:7a:98:33:df:fa:4b:8c:88:8d:7e:d2:35:f3:a4:65:aa:
         64:77:bb:72:d9:f2:5c:96:9f:63:ad:84:f2:d5:f5:a9:52:d6:
         a0:34:75:2b:02:bc:0e:39:df:44:3d:74:59:5c:3d:74:c1:aa:
         49:e8:8c:6c:5b:62:7d:bb:a4:47:28:5e:88:5e:e5:1b:b6:ab:
         9a:5a:21:47:d7:a6:b6:7c:eb:fb:ec:7b:2a:f1:56:02:11:72:
         9b:46:c7:02:70:9c:78:57:1c:d8:90:55:7c:4c:a5:92:4e:b9:
         87:0d:ca:9f:e6:50:e2:8d:47:4b:ba:a4:98:27:5a:53:f5:f3:
         e6:f9:05:d9:7a:76:18:51:fb:de:b5:eb:7d:ed:a4:c4:74:aa:
         a7:93:94:b7:9f:44:6f:30:34:f7:f8:58:da:a1:08:ac:b6:76:
         6a:ce:b3:09:a8:7f:8b:82:9d:13:22:a9:54:b7:f0:da:91:1a:
         3d:3e:b0:e1:c5:92:9e:3d:38:df:e6:8f:20:6b:14:f3:6f:d6:
         ba:dd:76:f1:2b:31:84:f4:6a:d7:b8:18:78:8e:72:9c:3b:63:
         47:19:1f:df:58:e1:9d:56:36:cf:52:ed:3e:a4:e4:e7:e8:4d:
         ff:51:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:15 2025 by rpki-client on console.sobornost.net