Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa
File:                     3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa (raw, json)
Hash identifier:          ensNjliPVGcPGmarcWganrVlOlX9e+0kbEhHckxdCrs=
Subject key identifier:   9D:55:35:7D:E4:A1:46:00:6D:27:E1:31:AE:C8:8B:AA:CB:62:63:AF
Certificate issuer:       /CN=A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B
Certificate serial:       0552A7A78846942E1B02D3CD9EDE7F9504CBCF3B
Authority key identifier: A7:CF:6A:D9:57:FD:96:A4:24:FF:83:F6:75:AC:AF:C7:EE:E7:EF:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa
Signing time:             Tue 10 Dec 2024 22:06:37 +0000
ROA not before:           Tue 10 Dec 2024 22:01:37 +0000
ROA not after:            Tue 09 Dec 2025 22:06:37 +0000
asID:                     263584
IP address blocks:        177.129.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:52:a7:a7:88:46:94:2e:1b:02:d3:cd:9e:de:7f:95:04:cb:cf:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B
        Validity
            Not Before: Dec 10 22:01:37 2024 GMT
            Not After : Dec  9 22:06:37 2025 GMT
        Subject: CN=9D55357DE4A146006D27E131AEC88BAACB6263AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:22:bf:73:cf:f7:bc:3c:b8:34:78:9f:56:
                    3a:24:69:75:54:a8:25:ce:50:e4:5a:74:da:d4:18:
                    84:84:2d:96:29:4c:ba:b0:4b:11:5c:54:26:8d:3f:
                    b0:bf:bb:0b:1a:fe:b5:04:e9:43:ee:1b:9d:04:51:
                    05:7f:6a:b9:df:e2:73:13:ea:9c:8b:34:3c:02:10:
                    0e:f7:65:dd:c4:b5:ea:58:2f:4e:84:d9:a2:ed:06:
                    c3:f3:66:71:d3:3c:14:26:9b:4f:05:80:3a:4b:c1:
                    53:4e:aa:0e:f1:52:15:a5:51:2d:7e:24:13:76:e9:
                    00:c7:ac:b0:de:b1:3f:20:73:47:ed:24:e0:38:42:
                    1e:70:8c:65:93:4d:9c:54:75:b6:5b:4d:98:6d:b6:
                    6f:0a:be:21:76:e4:8d:41:77:a0:06:08:ac:6d:46:
                    c5:0d:3a:0c:23:f2:54:88:21:03:86:e7:86:54:1c:
                    52:dd:fe:21:a6:dd:40:08:f3:34:b7:66:86:48:c4:
                    be:1e:3d:a5:cc:fc:55:35:2e:75:72:a3:76:56:28:
                    cb:e8:96:fe:97:b8:32:2c:51:33:fa:ad:e3:f3:43:
                    ae:81:6d:ed:98:b5:af:1b:98:27:e6:48:fc:0e:41:
                    96:80:36:43:cb:6d:ed:41:49:66:14:7b:aa:5a:03:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:55:35:7D:E4:A1:46:00:6D:27:E1:31:AE:C8:8B:AA:CB:62:63:AF
            X509v3 Authority Key Identifier:
                keyid:A7:CF:6A:D9:57:FD:96:A4:24:FF:83:F6:75:AC:AF:C7:EE:E7:EF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:09:55:91:71:11:bc:70:a2:f6:f8:21:f1:07:06:28:72:e0:
         27:27:8c:60:48:7f:73:9d:5c:45:8b:f4:80:f0:01:db:7f:e2:
         c3:6d:ef:14:f9:16:ef:1f:05:a3:4e:80:08:27:3b:70:15:22:
         2c:d0:af:3e:a2:2f:fa:cc:e9:0d:e1:10:3e:a6:89:5e:d6:3e:
         a2:15:97:e9:e9:d1:c0:98:a0:17:e8:81:8d:c0:fb:4e:84:67:
         ff:15:80:a7:dc:91:d1:44:1b:5e:60:0f:6f:bb:64:ac:bd:a5:
         2b:8f:c4:a2:d4:1e:e2:fa:3d:3e:a3:a2:aa:6f:46:e6:91:4b:
         90:28:e4:fa:3b:31:2b:76:8e:0f:66:88:1b:c9:0c:f8:f6:03:
         d1:52:33:d6:2c:32:bc:f2:ca:ad:c7:13:89:9b:58:82:9c:a7:
         24:7a:24:9c:82:9f:05:3a:9d:4d:9b:db:38:ce:1d:c3:7e:71:
         80:9f:5b:66:b6:24:5c:5f:49:34:90:27:7f:63:0a:33:5f:33:
         10:d1:76:a1:5d:5f:12:41:8b:20:ac:b8:be:13:bb:ab:c0:fd:
         89:ec:f4:5a:49:c7:58:0d:ca:62:ab:c5:c8:0f:67:f1:3c:1e:
         42:57:09:ef:26:07:0f:52:e6:ee:82:85:85:19:c3:58:f6:93:
         0d:4c:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:17 2025 by rpki-client on console.sobornost.net