Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e31312e38302e302f32322d3332203d3e203533323434.roa
File:                     3137372e31312e38302e302f32322d3332203d3e203533323434.roa (raw, json)
Hash identifier:          m4Gy90C1vtMqRejB+YUuwKU94SrmOm0IcGfhsmmknj8=
Subject key identifier:   C8:46:CC:12:C7:7E:1F:39:F3:50:1F:FE:1B:C3:E3:63:2E:29:FB:4E
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       6A2C97EB9A0A91737F511C9FD506D8DA33D2C86C
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e31312e38302e302f32322d3332203d3e203533323434.roa
Signing time:             Thu 06 Mar 2025 01:31:13 +0000
ROA not before:           Thu 06 Mar 2025 01:26:13 +0000
ROA not after:            Thu 05 Mar 2026 01:31:13 +0000
asID:                     53244
IP address blocks:        177.11.80.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2c:97:eb:9a:0a:91:73:7f:51:1c:9f:d5:06:d8:da:33:d2:c8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Mar  6 01:26:13 2025 GMT
            Not After : Mar  5 01:31:13 2026 GMT
        Subject: CN=C846CC12C77E1F39F3501FFE1BC3E3632E29FB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:13:1c:aa:a3:50:94:df:d2:c2:30:da:18:
                    50:f4:a9:d1:b5:d4:60:3d:f9:64:9a:6a:5f:ef:f7:
                    ac:9b:f2:8d:01:cc:bd:8a:a0:40:66:62:24:aa:97:
                    a5:a3:dd:89:82:eb:d6:19:bc:c8:5c:6c:62:2b:7c:
                    f6:9a:33:ee:d2:a4:58:38:57:f7:ea:d0:26:91:e0:
                    07:46:5e:5a:b9:2f:10:26:dd:8a:f5:dd:fd:63:8e:
                    1d:22:2a:3a:bd:17:85:9e:c5:20:1e:60:13:64:f7:
                    6b:cf:bb:3a:7f:cb:41:2c:fd:6b:7f:4a:4d:3b:a8:
                    c4:e2:4e:b4:10:69:d3:ee:9d:c8:9f:33:32:a2:40:
                    f8:98:fb:f5:2d:96:66:88:3f:73:82:04:ae:47:23:
                    ef:36:f1:a6:f6:9e:57:2a:95:1a:d0:08:56:32:a1:
                    a9:23:ef:4b:a4:4d:3a:f1:32:3d:6e:28:e9:25:91:
                    4d:6f:e1:13:5d:70:76:c7:48:f2:e3:73:b6:b7:e5:
                    54:ed:cc:9f:3b:93:c2:70:f1:6b:9f:ef:73:b0:bc:
                    4b:d7:29:61:36:5b:04:bd:56:07:7b:48:3c:22:e6:
                    77:e5:18:bf:7e:7a:24:af:41:3b:e1:2f:b9:d6:be:
                    a6:0f:2b:58:f5:46:97:b5:81:cd:95:a5:5a:ce:0e:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:46:CC:12:C7:7E:1F:39:F3:50:1F:FE:1B:C3:E3:63:2E:29:FB:4E
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e31312e38302e302f32322d3332203d3e203533323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:c4:d2:cb:b1:84:a7:31:7d:0e:ca:85:5b:c7:04:da:54:
         8a:ba:b9:a6:cf:b6:a9:b9:32:1d:26:9c:2a:ab:68:ae:c5:6a:
         ab:cc:b6:17:f1:b0:42:f5:43:57:b3:de:83:bc:16:0a:cd:80:
         b3:7f:e2:82:4f:73:93:e6:8d:48:57:3e:6d:4a:92:63:b2:36:
         57:d3:75:a4:51:95:78:6e:79:31:7d:f5:70:84:ac:b5:f6:a2:
         74:90:d9:ee:50:47:fc:1e:af:78:78:cf:b1:c9:3c:db:7f:5c:
         cd:39:89:71:08:a0:0e:03:54:95:09:c0:3f:6e:ba:a3:a8:cc:
         01:51:21:24:2b:cd:bc:4c:69:7e:0f:dc:f8:cb:ac:e9:23:3f:
         3f:5a:d4:72:74:db:1a:61:5a:6f:dd:de:d9:1a:7e:ee:da:51:
         e9:d9:fb:1d:cd:9d:09:2e:b2:71:5c:12:1b:c6:32:f8:0f:4d:
         78:52:41:50:e6:5d:f4:c7:95:72:f1:1c:6f:20:87:d8:53:3b:
         83:58:df:3d:70:11:0f:df:28:75:95:04:9c:d4:32:00:f5:fd:
         14:4b:34:72:44:38:2e:c3:42:36:d4:6e:95:fe:0b:c6:69:f4:
         9e:57:fb:15:cf:88:8f:34:82:d1:d1:6c:6f:83:e9:89:0e:b0:
         dd:27:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:29 2025 by rpki-client on console.sobornost.net